shield Security update for pam_pkcs11

SUSE-SLE-Module-Basesystem-15-SP6-2025-689

This update for pam_pkcs11 fixes the following issues: - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062). - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash (bsc#1237058).

• Release Date
  Feb 24 2025
• References
  Bugzilla: 1237058, 1237062
  CVEs: CVE-2025-24032, CVE-2025-24031
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.6 aarch64

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150600.16.3.1 lock rpm lock src

Basesystem Module 15.6 s390x

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150600.16.3.1 lock rpm lock src

Basesystem Module 15.6 x86_64

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150600.16.3.1 lock rpm lock src

  pam_pkcs11-32bit
  PKCS #11 PAM Module

  0.6.10-150600.16.3.1 lock rpm

Basesystem Module 15.6 ppc64le

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150600.16.3.1 lock rpm lock src