[SECURITY] Fedora EPEL 6 Update: oath-toolkit-2.0.2-5.el6

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2014-3962
2014-11-12 22:15:28
--------------------------------------------------------------------------------

Name        : oath-toolkit
Product     : Fedora EPEL 6
Version     : 2.0.2
Release     : 5.el6
URL         : http://www.nongnu.org/oath-toolkit/
Summary     : One-time password components
Description :
The OATH Toolkit provide components for building one-time password
authentication systems. It contains shared libraries, command line tools and a
PAM module. Supported technologies include the event-based HOTP algorithm
(RFC4226) and the time-based TOTP algorithm (RFC6238). OATH stands for Open
AuTHentication, which is the organization that specify the algorithms. For
managing secret key files, the Portable Symmetric Key Container (PSKC) format
described in RFC6030 is supported.

--------------------------------------------------------------------------------
Update Information:

This is an update that adds null check to strdup calls.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1161360 - oath-toolkit: potential NULL pointer dereference in OATH PAM module
        https://bugzilla.redhat.com/show_bug.cgi?id=1161360
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update oath-toolkit' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------