Security update for pam_pkcs11

Announcement ID: SUSE-SU-2018:3311-1
Rating: moderate
References:
Affected Products:
  • SUSE Linux Enterprise Desktop 12 SP3
  • SUSE Linux Enterprise High Performance Computing 12 SP3
  • SUSE Linux Enterprise Server 12 SP3
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3

An update that has two security fixes can now be installed.

Description:

This update for pam_pkcs11 provides the following fixes:

Security issues fixed (bsc#1105012):

  • Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability
  • Fixed a stack-based buffer overflow in opensshmapper.c
  • Make sure memory is properly cleaned before invoking free()

Other changes:

  • Add a systemd service file. (bsc#1049219)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Desktop 12 SP3
    zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-2378=1
  • SUSE Linux Enterprise Server 12 SP3
    zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-2378=1
  • SUSE Linux Enterprise High Performance Computing 12 SP3
    zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-2378=1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3
    zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-2378=1

Package List:

  • SUSE Linux Enterprise Desktop 12 SP3 (x86_64)
    • pam_pkcs11-0.6.8-7.5.1
    • pam_pkcs11-debugsource-0.6.8-7.5.1
    • pam_pkcs11-32bit-0.6.8-7.5.1
    • pam_pkcs11-debuginfo-0.6.8-7.5.1
    • pam_pkcs11-debuginfo-32bit-0.6.8-7.5.1
  • SUSE Linux Enterprise Server 12 SP3 (aarch64 ppc64le s390x x86_64)
    • pam_pkcs11-0.6.8-7.5.1
    • pam_pkcs11-debuginfo-0.6.8-7.5.1
    • pam_pkcs11-debugsource-0.6.8-7.5.1
  • SUSE Linux Enterprise Server 12 SP3 (s390x x86_64)
    • pam_pkcs11-debuginfo-32bit-0.6.8-7.5.1
    • pam_pkcs11-32bit-0.6.8-7.5.1
  • SUSE Linux Enterprise High Performance Computing 12 SP3 (aarch64 x86_64)
    • pam_pkcs11-0.6.8-7.5.1
    • pam_pkcs11-debuginfo-0.6.8-7.5.1
    • pam_pkcs11-debugsource-0.6.8-7.5.1
  • SUSE Linux Enterprise High Performance Computing 12 SP3 (x86_64)
    • pam_pkcs11-debuginfo-32bit-0.6.8-7.5.1
    • pam_pkcs11-32bit-0.6.8-7.5.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 (ppc64le x86_64)
    • pam_pkcs11-0.6.8-7.5.1
    • pam_pkcs11-debuginfo-0.6.8-7.5.1
    • pam_pkcs11-debugsource-0.6.8-7.5.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 (x86_64)
    • pam_pkcs11-debuginfo-32bit-0.6.8-7.5.1
    • pam_pkcs11-32bit-0.6.8-7.5.1

References: