shield Security update for pam

SUSE-SLE-SERVER-12-SP2-2017-865

This update for pam fixes the following issues: - CVE-2015-3238: pam_unix in conjunction with SELinux allowed for DoS attacks (bsc#934920). - log a hint to syslog if /etc/nologin is present, but empty (bsc#1015565). - If /etc/nologin is present, but empty, log a hint to syslog. (bsc#1015565) - Added support for libowcrypt.so, if present, to configure support for BLOWFISH (bsc#1037824)

• Release Date
  May 24 2017
• References
  Bugzilla: 934920, 1015565, 1037824
  CVEs: CVE-2015-3238
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  pam
  A Security Tool that Provides Authentication for Applications

  1.1.8-23.1 lock rpm lock src

  pam-doc
  Documentation for Pluggable Authentication Modules

  1.1.8-23.1 lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  pam
  A Security Tool that Provides Authentication for Applications

  1.1.8-23.1 lock rpm lock src

  pam-32bit
  A Security Tool that Provides Authentication for Applications

  1.1.8-23.1 lock rpm

  pam-doc
  Documentation for Pluggable Authentication Modules

  1.1.8-23.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  pam
  A Security Tool that Provides Authentication for Applications

  1.1.8-23.1 lock rpm lock src

  pam-doc
  Documentation for Pluggable Authentication Modules

  1.1.8-23.1 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  pam
  A Security Tool that Provides Authentication for Applications

  1.1.8-23.1 lock rpm lock src

  pam-32bit
  A Security Tool that Provides Authentication for Applications

  1.1.8-23.1 lock rpm

  pam-doc
  Documentation for Pluggable Authentication Modules

  1.1.8-23.1 lock rpm