Package: libpam-u2f (1.4.0-1) universal 2nd factor (U2F) PAM module Other Packages Related to libpam-u2f: [libc6 ] (>= 2.38)
GNU C Library: Shared libraries
[libfido2-1 ] (>= 1.2.0)
library for generating and verifying FIDO 2.0 objects
[libpam0g ] (>= 1.1.3)
Pluggable Authentication Modules library
[libssl3t64 ] (>= 3.0.0)
Secure Sockets Layer toolkit - shared libraries
Package file paths (8) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/lib/aarch64-linux-gnu/security/pam_u2f.so /usr/lib/x86_64-linux-gnu/security/pam_u2f.so /usr/share/doc/libpam-u2f/changelog.Debian.gz /usr/share/doc/libpam-u2f/changelog.gz /usr/share/doc/libpam-u2f/copyright /usr/share/doc/libpam-u2f/README.gz /usr/share/lintian/overrides/libpam-u2f /usr/share/man/man8/pam_u2f.8.gz Field source: Debian 13 (Trixie) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
Fixed and unaffected versions (4) CVE Severity Version impact [CVE-2025-23013 ] Published: Jan 15, 2025, 12:00:00 AM UTC
PAM/U2F vulnerability
High(7.8) Fixed Details (2) [CVE-2021-31924 ] Published: May 26, 2021, 12:15:00 AM UTC
pam-u2f: CVE-2021-31924
High(7.3) Fixed Details (2) [CVE-2019-12209 ] Published: Jun 4, 2019, 9:29:00 PM UTC
pam-u2f: CVE-2019-12209
Medium(4.6) Fixed Details (2) [CVE-2019-12210 ] Published: Jun 4, 2019, 12:00:00 AM UTC
pam-u2f: CVE-2019-12210
High(8.1) Fixed Details (2)
Last synced: Oct 28, 2026, 3:52:27 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
1.4.0-1 / amd64 Observed Sep 1, 2026 sha256 a7d5ad62b5ce…3adc1fa5Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): a7d5ad62b5ce99f0942c057336f6247fc5806b3d17c2d2d33de076d43adc1fa5
Verify download
printf '%s %s\n' 'a7d5ad62b5ce99f0942c057336f6247fc5806b3d17c2d2d33de076d43adc1fa5' 'libpam-u2f_1.4.0-1_amd64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main amd64
1.4.0-1 / arm64 Observed Sep 1, 2026 sha256 b2c2f0f6415a…eec10f16Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): b2c2f0f6415a9ccc738de3ffe3d5c69339e28b2a4c8db5733f2bd0fbeec10f16
Verify download
printf '%s %s\n' 'b2c2f0f6415a9ccc738de3ffe3d5c69339e28b2a4c8db5733f2bd0fbeec10f16' 'libpam-u2f_1.4.0-1_arm64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main arm64
