freeipa

Clone
Source Code
GIT

7a5a10b ipa-otpd: use oidc_child's --client-secret-stdin option

1 file Authored by sbose 7 months ago, Committed by antorres 7 months ago,
raw patch tree parent
1 file changed. 14 lines added. 10 lines removed.
daemons/ipa-otpd/oauth2.c
file modified
+14 -10 
    ipa-otpd: use oidc_child's --client-secret-stdin option
    
    To remove the client secret from the command line where it would be
    visible e.g. when calling ps it is now passed via stdin to oidc_child.
    
    Fixes: CVE-2024-11029
    
    Signed-off-by: Sumit Bose <sbose@redhat.com>
file modified
+14 -10
Powered by Pagure 5.14.1
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.