shield Security update for pam_pkcs11

SUSE-SLE-Micro-5.5-2025-712

This update for pam_pkcs11 fixes the following issues: - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062). - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash (bsc#1237058).

• Release Date
  Feb 25 2025
• References
  Bugzilla: 1237062, 1237058
  CVEs: CVE-2025-24032, CVE-2025-24031
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro 5.5 ppc64le

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150100.3.6.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 s390x

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150100.3.6.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 aarch64

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150100.3.6.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.5 x86_64

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150100.3.6.1 lock rpm lock src