SUSE-SU-2018:3311-1: moderate: Security update for pam_pkcs11
sle-updates at lists.suse.com
sle-updates at lists.suse.com
Tue Oct 23 07:13:32 MDT 2018
SUSE Security Update: Security update for pam_pkcs11
______________________________________________________________________________
Announcement ID: SUSE-SU-2018:3311-1
Rating: moderate
References: #1049219 #1105012
Affected Products:
SUSE Linux Enterprise Server 12-SP3
SUSE Linux Enterprise Desktop 12-SP3
______________________________________________________________________________
An update that contains security fixes can now be installed.
Description:
This update for pam_pkcs11 provides the following fixes:
Security issues fixed (bsc#1105012):
- Fixed a logic bug in pampkcs11.c, leading to an authentication replay
vulnerability
- Fixed a stack-based buffer overflow in opensshmapper.c
- Make sure memory is properly cleaned before invoking free()
Other changes:
- Add a systemd service file. (bsc#1049219)
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Server 12-SP3:
zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-2378=1
- SUSE Linux Enterprise Desktop 12-SP3:
zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-2378=1
Package List:
- SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64):
pam_pkcs11-0.6.8-7.5.1
pam_pkcs11-debuginfo-0.6.8-7.5.1
pam_pkcs11-debugsource-0.6.8-7.5.1
- SUSE Linux Enterprise Server 12-SP3 (s390x x86_64):
pam_pkcs11-32bit-0.6.8-7.5.1
pam_pkcs11-debuginfo-32bit-0.6.8-7.5.1
- SUSE Linux Enterprise Desktop 12-SP3 (x86_64):
pam_pkcs11-0.6.8-7.5.1
pam_pkcs11-32bit-0.6.8-7.5.1
pam_pkcs11-debuginfo-0.6.8-7.5.1
pam_pkcs11-debuginfo-32bit-0.6.8-7.5.1
pam_pkcs11-debugsource-0.6.8-7.5.1
References:
https://bugzilla.suse.com/1049219
https://bugzilla.suse.com/1105012
More information about the sle-updates
mailing list