pam_pkcs11-0.6.10-150600.16.8.1 < > , W hOkp9| >>1¦IK+o1gqƯ@]9F| iiTՌ4uY=B[7HD3D d[z&",jւõ 6
R9%Vg?qH/V=. 3;?F` H $ϻ Zko,2m Bv
&Ō}FR0dP ىyRx:8mdl > I J ? J d
" 6 " 4 J `
p 9 T 9 9
8 9 9 9
X 9 < 9 !Y 9 "v " 9 # # & $P & ' & ( ' 8 '
9 ($
: (
= 2b > 2j ? 2r @ 2z F 2 G 2 9 H 3 9 I 4d 9 X 4 Y 4 \ 4 9 ] 5 9 ^ 9u b ;t c < d < e < f < l < u < 9 v = w F 9 x G 9 y G z JP J` Jd Jw Jx J| J J C pam_pkcs11 0.6.10 150600.16.8.1 PKCS #11 PAM Module This Linux PAM module allows X.509 a certificate-based user
authentication. The certificate and its dedicated private key are
thereby accessed by means of an appropriate PKCS #11 module. For the
verification of the users' certificates, locally stored CA certificates
as well as online or locally accessible CRLs are used.
Additionally, the package includes pam_pkcs11-related tools:
* pkcs11_eventmgr: Generates actions on card insert, removal, or
time-out events
* pklogin_finder: Gets the login name that maps to a certificate
* pkcs11_inspect: Inspects the contents of a certificate
* make_hash_links: Creates hash link directories for storing CAs and
CRLs hOkh02-armsrv2 SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ Productivity/Security https://github.com/OpenSC/pam_pkcs11 linux aarch64
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in pkcs11_eventmgr.service ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in pkcs11_eventmgr.service ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable pkcs11_eventmgr.service || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop pkcs11_eventmgr.service
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in pkcs11_eventmgr.service ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart pkcs11_eventmgr.service
) || :
fi
fi F " ( X H 8 g>
(
= " ( _i
;
8
E 6 E o y lAA큤A큤큤AA큤 hOihOihOihOihOihOihOihOjhOjhOjhOjhOjhOihOjhOjhOihOjhOjhOjhOjhOihOi[.@hOT[.@\T#[.@[.@[.@[.@[.@[.@hOihOihOihOahOihOihOahOihOihOihOihOihOihOihOihOihOihOihOihOihOihOihOihOihOie24eb295659efb39bdf56c59c6b2126e29d1a0adcb62800445ead20c51a67212 c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f840 43fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53c 131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e ce97cb473b43d4a5ba4a5cb86e97a269b24f9729bac88eb8e020de48b5de854f 5e838136e4dcc8055be7d63a67257e66755b6d88f2f5efd1e841435275699523 7206a7b2e95878633ecef3af227455592d4befbc4036e9d9a6cd70bfee9803a8 404776c8b4a184bef64ad068d93d2a53d3e9c8a94a1f0492ce643443a1f3eec4 e0ddedd5afa41ad694a29837224127ec95c08ba29fbdd6b432e2a53d40e370b8 7a511d42da4d012097b3df55d144021cf2ed98b2b934eda56de4ddcf8f68b6fd 591f7d72c3b68fa8525c2e096f57582286a269f10bc6fbe5a38205ebef43daf3 0ab103472161ece0a2b0f5c43ab356af08effc4cba616bb2e71fdd2a87d24d18 35ac90a159fcfa5f390fa1ec51fad76645f02572fde9d99b0bf9190c46570fde 1773f4f021874d8889b1f7135aa15d7f06bf0a4944ef94c79145cf2bec90338d bf2c970556ece810fb4c59c6ee57f0d3649f3fb3878c16ec26c6cf4ff1bda3a8 95cc60c694012116d2166c9232cc0dd55202c9c25fe395e421d827ed4b600d08 5a5e8294453f7b0acdd079fe687606dd1952aa8c85ace94ac76720e6a01645b7 15268e0a938155fef128a36fd20bbcbdbcc68229cb05882db74d42b8392883de fca543bfc2e74e4520445d469834e2ebbfda30f90e09dcf3f283644b1bd31c08 e5ac7af0a33e952dd5cccd0c344fa3255b1865f3b86ba2c85ad0c8dcf8afc2a9 0786adc85f218870c929ba49130246d55096b53ddbe243c43fcf000604dcd024 eedb7ee6611c73fe69220bc3b774ccb18d7dfff7dfcd05ce96c44c7f3346df33 f2f0405f9ba1cc07d60a0a036076557480f10d1a038a1e78b44d2b89b266fc69 6c50089a5c6a137d2be64b94dfd4d0515dbe041881b164007f8ca5385bcf7818 8b6f52d4a5ce7dc57b92275dcb7a9991be07be5417d07e691742e6f1fb3e4e72 9b2647732f01409b797bcb71a5a53775dbc2bb3288f5932b594ccbb56bcb8147 c79e89aab0974402abc9411da4431b9d9ca9b1ac1c907f09b6d87ae6a2b1f840 558ed62beb359afb96c6ae277740c735669862f01e330471f40a38ee7a3cc710 bf4bf8da3fb658b6b07d79ce99ba12aca945c77b5e20a530500f7d756c5ece2b 1303f66ed4c5da4000de8d3e0fdd716d3390008e388e1acc957c913c0437ccd7 980caf8b7e060f068cdfc13ac5631f1ca982d76ce8d8b72db42a2188c4dc77a9 43fd4e62884418ea546390d29af404c34f74d585ecc05599bba72aa25f9da53c f6b5de0548dbfe62cdf51f9be893cc4eb3f66748193af0a973c76ea6a5ca49eb 131ff417cde40bad00e7c5df30395e1ff1732903bc3a801db0b61abc6bee4d0e 90b9fbb4dd495544fc3cc3a1e80bd013fb02677a3ca55ff9a4ffbba907385d4d cc83b959726b34d34f904e3828bad5100024e17f1a205ed6a12818a6a0ff38d3 964e20238be9fa953632a00a1db19186d76477dfec71c0bd6a482d3a83b057e7 16a9758f298fa77beab9daee075c66a1f6469add7b42d495281d2b77a18bbdae 951d79b1d79f755504ed5ddbd22b3741c3da126f86c47cfc9fdf2fa85843c633 285fbff6d89fcd57f838119cba143b750467ce776d4f0c9da391846566ea750d 602c9854f0619a32412187c216267d5aba1a5c0e8706ecc1e5b93cffb5852d99 3da77083b332201f3c8e7e2c13e8d962fc4f5154736a082fa9e85a7edf6123cc 02816430f1e721af71badad8120cf06079427833f6364d88f7b6caf768eadc44 114a004f1490bd721a24607ead73fe3ca8afad0209871e505cd35df7cddb27aa 92d7c59a6744b8e577df930aba6fc51d7baa7234a1b06c0893e51a42e4ce319e c2bba7a8141656e0c4d8b8c7a8e6005679951f4fedb77fe5bef0e71ff828ee47 70a251c26a268b0c45a1838164ac0ec0747fb04bd07d7543affe1ece1e11365a 95bb326ca3a34843524f31298311cab56641ef39704f8cc5c9f8410f0adc1010 a511a95317518984b0efe0a80bfe1c0ee7290190c598a68ad1a22923b39cd6d8 c882ab24d11940db20bc4637ec8e9589923922baa2dc8c25b953f149b05b308d 6d75762c06337c15ae0105f52b35eb10bc331088eedca160bfb731e4d79c8cb6 service root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root pam_pkcs11-0.6.10-150600.16.8.1.src.rpm config(pam_pkcs11) pam_pkcs11 pam_pkcs11(aarch-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/bash /bin/sh /bin/sh /bin/sh /bin/sh config(pam_pkcs11) ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.33)(64bit) libc.so.6(GLIBC_2.34)(64bit) libcurl.so.4()(64bit) libldap_r-2.4.so.2()(64bit) libnspr4.so()(64bit) libnss3.so()(64bit) libnss3.so(NSS_3.10)(64bit) libnss3.so(NSS_3.2)(64bit) libnss3.so(NSS_3.3)(64bit) libnss3.so(NSS_3.4)(64bit) libnss3.so(NSS_3.6)(64bit) libnss3.so(NSS_3.7)(64bit) libnss3.so(NSS_3.8)(64bit) libnss3.so(NSS_3.9.2)(64bit) libnss3.so(NSS_3.9.3)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libpam.so.0(LIBPAM_EXTENSION_1.0)(64bit) libpcsclite.so.1()(64bit) libplc4.so()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) systemd systemd systemd systemd 0.6.10-150600.16.8.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 h+ @gf:\P@@[v[U@Y)@Y@Yp@Vvalentin.lefebvre@suse.com angel.yankov@suse.com davide.benini@suse.com sbrabec@suse.com vcizek@suse.com sbrabec@suse.com jengelh@inai.de astieger@suse.com sbrabec@suse.com antoine.belvire@laposte.net - Removes pam_env from auth stack for security reason
[bsc#1243226, CVE-2025-6018] - Security update fix [bsc#1237062, CVE-2025-24032], [bsc#1237058, CVE-2025-24031]
* Fix CVE-2025-24032: vulnerable to authentication bypass with default value for `cert_policy` (`none`)
* Fix CVE-2025-24031: vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN
* Add pam_pkcs11-CVE-2025-24032.patch
* Add pam_pkcs11-CVE-2025-24031.patch
* spec: set noarch for doc pkg, add %check section - Fix for bsc#1221255:
* Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch - Update to version 0.6.10:
* Fix some security issues (thx @frankmorgner):
https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
(drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
0002-fixed-buffer-overflow-with-long-home-directory.patch,
0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
* Fix buffer overflow with long home directory.
* Fix wiping secrets (now using OpenSSL_cleanse()).
* Verify using a nonce from the system, not the card.
* Fix segfalt when checking CRLs
(drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink. - Address security issues found by X41 D-Sec audit (bsc#1105012)
* Authentication Replay
* Buffer Overflow
* Memory not cleaned properly before free()
- add patches:
* 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
* 0002-fixed-buffer-overflow-with-long-home-directory.patch
* 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch - Fix segfault and fetch problems when checking CRLs
(pam_pkcs11-crl-check.patch). - Repair bulletpoint that skidded in description.
Trim description of %name-devel-doc, it does not cotain
the programs. - add service file bsc#1049219 - Updated to version 0.6.9:
* Upstream web moved.
* pkcs11_listcerts: Do not fail on certificate error.
* Do not fail if card was already unlocked.
* Other bug fixes.
* Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
"make dist".
- Split API documentation into a separate package
pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch. - Fix build for Tumbleweed:
* Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
* Rebuild configure with the bootstrap script (add libtool as
build dependency) /bin/sh /bin/sh /bin/sh /bin/sh h02-armsrv2 1750070123
5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M de fr it nl pl pt ru tr 0.6.10-150600.16.8.1 0.6.10-150600.16.8.1 0.6.10-150600.16.8.1
common-auth-smartcard pam_pkcs11 cacerts card_eventmgr.conf crls pam_pkcs11.conf pkcs11_eventmgr.conf pam_pkcs11.so card_eventmgr pkcs11_eventmgr pkcs11_inspect pkcs11_listcerts pkcs11_make_hash_link pkcs11_setup pklogin_finder pkcs11_eventmgr.service pam_pkcs11 ldap_mapper.so opensc_mapper.so openssh_mapper.so rcpkcs11_eventmgr pam_pkcs11 AUTHORS COPYING ChangeLog ChangeLog.git NEWS README README.autologin README.mappers README.md TODO card_eventmgr.conf.example digest_mapping.example mail_mapping.example mappers_api.html pam.d_login.example pam_pkcs11.conf.example pam_pkcs11.html pkcs11_eventmgr.conf.example subject_mapping.example pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo pam_pkcs11.mo card_eventmgr.1.gz pkcs11_eventmgr.1.gz pkcs11_inspect.1.gz pkcs11_listcerts.1.gz pkcs11_make_hash_link.1.gz pkcs11_setup.1.gz pklogin_finder.1.gz pam_pkcs11.8.gz /etc/pam.d/ /etc/ /etc/pam_pkcs11/ /lib64/security/ /usr/bin/ /usr/lib/systemd/system/ /usr/lib64/ /usr/lib64/pam_pkcs11/ /usr/sbin/ /usr/share/doc/packages/ /usr/share/doc/packages/pam_pkcs11/ /usr/share/locale/de/LC_MESSAGES/ /usr/share/locale/fr/LC_MESSAGES/ /usr/share/locale/it/LC_MESSAGES/ /usr/share/locale/nl/LC_MESSAGES/ /usr/share/locale/pl/LC_MESSAGES/ /usr/share/locale/pt_BR/LC_MESSAGES/ /usr/share/locale/ru/LC_MESSAGES/ /usr/share/locale/tr/LC_MESSAGES/ /usr/share/man/man1/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38821/SUSE_SLE-15-SP6_Update/ccb54b8152a4531969b6e4c51545deaf-pam_pkcs11.SUSE_SLE-15-SP6_Update drpm xz 5 aarch64-suse-linux
ASCII text directory ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8afea70e402475474d9511b3be249e5e3a3137ce, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=0ed88f0cab0bd6768567ece05a9a9a31740e08e1, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=0b86e0e6fe844f77063647b696e8f778319a346b, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=1ddc3befcce51e7f9293069b910172ba550f33c7, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=29495cc33101a0895dcc26a10d34781c3881203f, stripped Bourne-Again shell script, ASCII text executable ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=82a5c2a0df30fff0953bbd71c4dfb569b6d39b42, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 4.3.0, BuildID[sha1]=be7b455fc6c8066c9746a204fc48d44a3afa83cc, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d84c76799dedbbb2e49be660a992d8aacfe392bb, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3450a60c8e2d6c7c2212d4bbc01f71f9272ed4a8, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=40190c46cdba8034992a453d033a9e0d8f9d99e3, stripped UTF-8 Unicode text XML 1.0 document, UTF-8 Unicode text, with very long lines troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix) ' : K L Q d w R R R R R R R R R R R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R R R R R R R R R R R R R R R R R R R R R R R R R R R
R R R R R R
R R R R R R R R R R R R R
R R R R R R R R R R R R R R R R R R
R R R R R R R /02 DA & systemd-sysvcompat utf-8 01d7c94ca2e9e930644b686bca5cdabd1614c1b920491a8f493490853139c0e9 ? p 7zXZ
! t/] "k%I]p]bIĚk7-Kwߐ2冽twH1?2E l Z>']u\,y\8V;&yt M.hVG89s$TᘙBʀW̞˰| ӬzcԡDGh{ tV<`/9 /ϱaM$=ÃG q]a# Q
9a쫐'sXXmXK 'Nde|ۦÓYYTefkOP0bkSБ[գy*d3 +Z5&j0Uٕ
Ӻ6@Th{}rAo XV\R 6dTB,A}O1
f"&TJ)q'o%ʞc 0v'ce#˴{C$ziZ73ie&bq K'zwrB^&Y`w=&i#riX<^ViwR3;vf+:健GKǖQ6U Z
%r#QpY3>ڣ,DGO~U 0ɉnЫ>+`G