shield Security update for pam_pkcs11

SUSE-SUSE-MicroOS-5.2-2025-712

This update for pam_pkcs11 fixes the following issues: - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062). - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash (bsc#1237058).

• Release Date
  Feb 25 2025
• References
  Bugzilla: 1237062, 1237058
  CVEs: CVE-2025-24032, CVE-2025-24031
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150100.3.6.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150100.3.6.1 lock rpm lock src

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  pam_pkcs11
  PKCS #11 PAM Module

  0.6.10-150100.3.6.1 lock rpm lock src