Mandriva Linux Security Advisory 2014-061 - It was found that comments in /etc/users.oath could prevent one-time-passwords from being invalidated, leaving the OTP vulnerable to replay attacks.
c6a62e06caed23c48a6e9b292f932b46cf045fc9e5a20a667fcfec9e225762a0