pam_pkcs11-32bit-0.6.10-150600.16.3.1 < > , 2 gp9|T bwsľN]t.Oh\ד_r6Ow µqSrƼG Qk^: u+t6k cz'͓/'*]F-x B c"9&;~[? nELVx0HW ѓF%l23iO Dc U:M;?)G^ "7N2D÷qn#$=2VC.YԽZ9^j"G$'GȶU CbV >Jj9 > A \ ? L d ( < & 8 N d
2 P x < ( 8
9
:
> P G X H p I X Y \ ] ^ 0 b d c " d e f l u v w 0 x H y ` ] H C pam_pkcs11-32bit 0.6.10 150600.16.3.1 PKCS #11 PAM Module This Linux PAM module allows X.509 a certificate-based user
authentication. The certificate and its dedicated private key are
thereby accessed by means of an appropriate PKCS #11 module. For the
verification of the users' certificates, locally stored CA certificates
as well as online or locally accessible CRLs are used.
Additionally, the package includes pam_pkcs11-related tools:
* pkcs11_eventmgr: Generates actions on card insert, removal, or
time-out events
* pklogin_finder: Gets the login name that maps to a certificate
* pkcs11_inspect: Inspects the contents of a certificate
* make_hash_links: Creates hash link directories for storing CAs and
CRLs gh01-ch4d SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ Productivity/Security https://github.com/OpenSC/pam_pkcs11 linux x86_64 /sbin/ldconfig p 0 AA gggggg ca014929385eb1c2fbeaa81dba8fcc1eb6d502049905084047eee09a89a35a15 4bf8eb0cbfa299a48697b661e6a093707b27e152433245ef8c87225f23676069 0ddf9aadb0168d92a818a8a59a885b0b4f3dd1c105f64e0ab736b2755041ec68 0054c35fab0e96030cbbacb6f1121fbf913eff1554e32896358e3c7cdfffd772 root root root root root root root root root root root root pam_pkcs11-0.6.10-150600.16.3.1.src.rpm pam_pkcs11-32bit pam_pkcs11-32bit(x86-32) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.3) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.33) libc.so.6(GLIBC_2.34) libc.so.6(GLIBC_2.4) libc.so.6(GLIBC_2.7) libcurl.so.4 libldap_r-2.4.so.2 libnspr4.so libnss3.so libnss3.so(NSS_3.10) libnss3.so(NSS_3.2) libnss3.so(NSS_3.3) libnss3.so(NSS_3.4) libnss3.so(NSS_3.6) libnss3.so(NSS_3.7) libnss3.so(NSS_3.8) libnss3.so(NSS_3.9.2) libnss3.so(NSS_3.9.3) libpam.so.0 libpam.so.0(LIBPAM_1.0) libpam.so.0(LIBPAM_EXTENSION_1.0) libplc4.so rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 gf:\P@@[v[U@Y)@Y@Yp@VO@angel.yankov@suse.com davide.benini@suse.com sbrabec@suse.com vcizek@suse.com sbrabec@suse.com jengelh@inai.de astieger@suse.com sbrabec@suse.com antoine.belvire@laposte.net sbrabec@suse.cz - Security update fix [bsc#1237062, CVE-2025-24032], [bsc#1237058, CVE-2025-24031]
* Fix CVE-2025-24032: vulnerable to authentication bypass with default value for `cert_policy` (`none`)
* Fix CVE-2025-24031: vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN
* Add pam_pkcs11-CVE-2025-24032.patch
* Add pam_pkcs11-CVE-2025-24031.patch
* spec: set noarch for doc pkg, add %check section - Fix for bsc#1221255:
* Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch - Update to version 0.6.10:
* Fix some security issues (thx @frankmorgner):
https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
(drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
0002-fixed-buffer-overflow-with-long-home-directory.patch,
0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
* Fix buffer overflow with long home directory.
* Fix wiping secrets (now using OpenSSL_cleanse()).
* Verify using a nonce from the system, not the card.
* Fix segfalt when checking CRLs
(drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink. - Address security issues found by X41 D-Sec audit (bsc#1105012)
* Authentication Replay
* Buffer Overflow
* Memory not cleaned properly before free()
- add patches:
* 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
* 0002-fixed-buffer-overflow-with-long-home-directory.patch
* 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch - Fix segfault and fetch problems when checking CRLs
(pam_pkcs11-crl-check.patch). - Repair bulletpoint that skidded in description.
Trim description of %name-devel-doc, it does not cotain
the programs. - add service file bsc#1049219 - Updated to version 0.6.9:
* Upstream web moved.
* pkcs11_listcerts: Do not fail on certificate error.
* Do not fail if card was already unlocked.
* Other bug fixes.
* Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
"make dist".
- Split API documentation into a separate package
pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch. - Fix build for Tumbleweed:
* Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
* Rebuild configure with the bootstrap script (add libtool as
build dependency) - Updated to version 0.6.8:
* Code cleanup.
* Bug fixes.
* Translation updates. /bin/sh 0.6.10-150600.16.3.1 0.6.10-150600.16.3.1 security pam_pkcs11.so pam_pkcs11 ldap_mapper.so opensc_mapper.so openssh_mapper.so /lib/ /lib/security/ /usr/lib/ /usr/lib/pam_pkcs11/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:37553/SUSE_SLE-15-SP6_Update/ec9dad8a377133eb626d3e2304474659-pam_pkcs11.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=73af66cd863d3e8266163f43abdddcce04c045a6, stripped ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=37a14ca64040f3a219a805b50afb8913158421e6, stripped ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=b692c349b4a44a67e3b642ac0d634ffc478ebdbc, stripped ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=ae6d7e9d8154494865084e70d4894f1cc0fc5300, stripped 1 G R R R R R R R R R R R R R R R R R
R R R R R R
R R R R R R R R R R R R R R R R R R
R R R R R
R R R R R R R R R R R R R R R R R R
R R R R R
R R R R R R R R R R R R R R R R R
R R R R R
R R packageand(pam_pkcs11:pam-32bit) utf-8 4c6c014dd54a64874b8287e944a45392873879e1be2d39f7ebc0d12a6ee98ebe ? 7zXZ
! t/"] "k%46]p]bI2 -^n鸹hSb~"r_1k)>P wu)58 ͘7$KN>͇
.u[*k)@͒bJ@ S |3DP&vC03> ٗ"r
y8/S
_627BxX-+wn%9\l&txA`ѬWw5 _ȕ;NORX$[1Tb '@*J蜓mةlLLҙ }*iQŨ i$ Mst0mJƏM7.-1(5ۣMa/Nf*`HV#j竸 ¹`dqr~T'S6 \ Ih*?3JCn oĝte\HP?7|zlp[OO&L;pd&6ѽ8e4I7Eݛ=U?˶{ME4zE{Ϩ DuwT^g~qL DO ^jcE^ ͩEG&6Ti;qFk`եCss 3l5+F~wƪ
\珃xO[ G"pK~pw3bde~] @|yP7# DZ^[y]44E
> FEb!BTbBc9iLi zCX].3-p'$31e
d,P0x
@voE\ٜwOH{ݰgm
wO 6 E^g&M6,r DՀ~}!Xtd@~t+!J"vr}/
@'OW9qUQx
꽲);/a-}Q\9 ϯ]&BWj Vl/if6z_9=}u_= ]vxOz"CId8VjV
xIuIvO<%y^6H0 ] gM zMm bҾSf4\xɹm>mn% 13*gVw-M]zMϬs4}El [Ѝ1;@hcm 15*m'ÆZK)n'^Rҙy [ Xk#3G6À2RѰ*QxqߥxZ;dZ;QM` Q6^*ñ gxKhOWH ;@)lKD0xNl[5/ 庯<܃M8M#I?y`U U 7jXEsniv
mhO 62k^hY2`/- YEqca!A]~1c[B!s=Zۀ}ݳ
=f]͕x:CFk~E~د@
T+]QpxM -ESdUlП{V8/?8{=k 47 .ByG+ɜZ%C+ǐ ۶6`\"ƨ\B}G4|R hB 9 AMvzY֩lpJJް"3 V'aL+.dC\BW|
cIGRBWL )E]4mq o76:ZgBQv*)HSl_Rƫ*P kHvoF웶g*Rxa ;b] ~5hr3mI~|k=A~7Y
~ )fii\|Y!nv̸Ym
>E eB3_[@X VX#WƄ$a{Ͼ[zV}TRvWO]:ҚZ+oU*_`1yU
T`6/I6b9E6nkʬ"L`B }]j$
\HhB[5exyH!] Gtk4KJ)QQskKbxQuT_ ߾<ʴ\4#A 'p!]țѨ[_ ig^\x4)\7YD,֚겗9Xm>@q1:CӸ~)}ݽn$yQ9Ԧ@1߂Ǧ s sS
˥>[yɧx\:ݯ<'m; < i\3PD
hz6QEEֶi+3ޙ譵gO.KYh֪ӡ34?8RWR .K @GEdÔFOgHE]ˍ̢8;N8hÖ,qWp*=V/"? llO,(F r#P
nպ><憿#: hd &Z E jܷzS.)DSR{8&e⤰вVwӰb- zqFM餇1'Ѳn3sl6^sj0>[riҽ~*mU<Ӂ$Ql"vD#Kl- }o돹NQk IZҬ4TBcjqئa(BI%Y(}r$r^x?NnF?G j#3里hʖqԖ #♲kON'Π@ӆ?V6[R(w-fFDL-'R)bz@VZ8hxѯ //~ƫhE|rz?%ThY\L gU&p2[D_