pam_pkcs11-32bit-0.6.10-150600.16.8.1 < > , # hOp9|mS W 2r qsr[g9_o&ˀ֟
##$V<κy 15[q[X\= ]fnA,DS sOX1"/{Nm^ 2#DR Փ3y^t 1Smf5|L+-`JAD0G;?~X,zFԬ!|Ze4+y?mNz$4~ %I #5̊heBB5w˭ > A h ? X d ( < & 8 N d
2 P x < ( 8
9
:
> Z G d H | I X Y \ ] ^ < b p c . d e f l u v w < x T y l ] T C pam_pkcs11-32bit 0.6.10 150600.16.8.1 PKCS #11 PAM Module This Linux PAM module allows X.509 a certificate-based user
authentication. The certificate and its dedicated private key are
thereby accessed by means of an appropriate PKCS #11 module. For the
verification of the users' certificates, locally stored CA certificates
as well as online or locally accessible CRLs are used.
Additionally, the package includes pam_pkcs11-related tools:
* pkcs11_eventmgr: Generates actions on card insert, removal, or
time-out events
* pklogin_finder: Gets the login name that maps to a certificate
* pkcs11_inspect: Inspects the contents of a certificate
* make_hash_links: Creates hash link directories for storing CAs and
CRLs hOh01-ch2c SUSE Linux Enterprise 15 SUSE LLC LGPL-2.1-or-later https://www.suse.com/ Productivity/Security https://github.com/OpenSC/pam_pkcs11 linux x86_64 /sbin/ldconfig p 0 AA hOhOhOhOhOhO ce9d888a8084c2c3a047db5cfca41ce9b301b5e8fd51ee3b868e7c649b2eebf8 9ba4cbc962dfb27f16c344c22d6b654fc094201daf6586a5979fc381640dacd2 eb453fc0acb359a0106f30acc5a7ed47e51134252dc822a2d8e88e5e01eb2b4d 9fd4d0adcb7e6e0247730bfd889d37eee9d47050bc5f4dd98457fe94651add4c root root root root root root root root root root root root pam_pkcs11-0.6.10-150600.16.8.1.src.rpm pam_pkcs11-32bit pam_pkcs11-32bit(x86-32) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.3) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.33) libc.so.6(GLIBC_2.34) libc.so.6(GLIBC_2.4) libc.so.6(GLIBC_2.7) libcurl.so.4 libldap_r-2.4.so.2 libnspr4.so libnss3.so libnss3.so(NSS_3.10) libnss3.so(NSS_3.2) libnss3.so(NSS_3.3) libnss3.so(NSS_3.4) libnss3.so(NSS_3.6) libnss3.so(NSS_3.7) libnss3.so(NSS_3.8) libnss3.so(NSS_3.9.2) libnss3.so(NSS_3.9.3) libpam.so.0 libpam.so.0(LIBPAM_1.0) libpam.so.0(LIBPAM_EXTENSION_1.0) libplc4.so rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 h+ @gf:\P@@[v[U@Y)@Y@Yp@Vvalentin.lefebvre@suse.com angel.yankov@suse.com davide.benini@suse.com sbrabec@suse.com vcizek@suse.com sbrabec@suse.com jengelh@inai.de astieger@suse.com sbrabec@suse.com antoine.belvire@laposte.net - Removes pam_env from auth stack for security reason
[bsc#1243226, CVE-2025-6018] - Security update fix [bsc#1237062, CVE-2025-24032], [bsc#1237058, CVE-2025-24031]
* Fix CVE-2025-24032: vulnerable to authentication bypass with default value for `cert_policy` (`none`)
* Fix CVE-2025-24031: vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN
* Add pam_pkcs11-CVE-2025-24032.patch
* Add pam_pkcs11-CVE-2025-24031.patch
* spec: set noarch for doc pkg, add %check section - Fix for bsc#1221255:
* Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch - Update to version 0.6.10:
* Fix some security issues (thx @frankmorgner):
https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
(drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
0002-fixed-buffer-overflow-with-long-home-directory.patch,
0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
* Fix buffer overflow with long home directory.
* Fix wiping secrets (now using OpenSSL_cleanse()).
* Verify using a nonce from the system, not the card.
* Fix segfalt when checking CRLs
(drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink. - Address security issues found by X41 D-Sec audit (bsc#1105012)
* Authentication Replay
* Buffer Overflow
* Memory not cleaned properly before free()
- add patches:
* 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
* 0002-fixed-buffer-overflow-with-long-home-directory.patch
* 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch - Fix segfault and fetch problems when checking CRLs
(pam_pkcs11-crl-check.patch). - Repair bulletpoint that skidded in description.
Trim description of %name-devel-doc, it does not cotain
the programs. - add service file bsc#1049219 - Updated to version 0.6.9:
* Upstream web moved.
* pkcs11_listcerts: Do not fail on certificate error.
* Do not fail if card was already unlocked.
* Other bug fixes.
* Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
"make dist".
- Split API documentation into a separate package
pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch. - Fix build for Tumbleweed:
* Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
* Rebuild configure with the bootstrap script (add libtool as
build dependency) /bin/sh 0.6.10-150600.16.8.1 0.6.10-150600.16.8.1 security pam_pkcs11.so pam_pkcs11 ldap_mapper.so opensc_mapper.so openssh_mapper.so /lib/ /lib/security/ /usr/lib/ /usr/lib/pam_pkcs11/ -fomit-frame-pointer -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:38821/SUSE_SLE-15-SP6_Update/ccb54b8152a4531969b6e4c51545deaf-pam_pkcs11.SUSE_SLE-15-SP6_Update drpm xz 5 x86_64-suse-linux directory ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=6127273e8ac60d6a8bd576a003360269f8ef818e, stripped ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=1ba7cf336c4603ada1a70aeed45f3bee851a551b, stripped ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=9712ed94de2d1b05946b3a548630837742090e4e, stripped ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically linked, BuildID[sha1]=03b02dd9eb2c32d5e9a013de64c25ea736e3c787, stripped 1 G R R R R R R R R R R R R R R R R R
R R R R R R
R R R R R R R R R R R R R R R R R R
R R R R R
R R R R R R R R R R R R R R R R R R
R R R R R
R R R R R R R R R R R R R R R R R
R R R R R
R R packageand(pam_pkcs11:pam-32bit) utf-8 557e093beb8849e6dd826710f6f2f46c1dfa1d16e748d93f171eae225dffeef6 ? 7zXZ
! t/J] "k%v]p]bI2 -^n鸹he%wO(8PrEz0e8 pgC> y` ym'c( 7QQ8~*abK.vRh C(GG@{}'t
GHP{]T[n #HgbwmT;+3~| w_{S< a4y`JZ,k˿Fgr,;mYĦ6Gqeo H8q:HQ_X@ u2j ͼ}&E)!OsYel8cz{Gr@:_3- DUmdh.o ~Nh S ,w Z An_k>sˆxGY0ʻyV^y 94.#uG3nD²EH3b30? NGx=ch8h`_0ә
\lhQzkE5_(4/(Rn)LhPN v) Vto
&_
'\$iPG{ Eڔ /$-u^ڝJp TqGwP̅]
jʉcK8VPKmaJ9
v9HI*&j1Fk
FB@жW;fǐ1gt#Rd?>pߊaڭ*1 pED<|Y| ϰy57ZL|Ԭ~l̽ #B)H: fJ 50'FN%FLAu*uj-) Tx _Vs浘v xp