Security update for pam_pkcs11 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:3311-1 Final 1 1 2018-10-23T07:34:45Z current 2018-10-23T07:34:45Z 2018-10-23T07:34:45Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for pam_pkcs11 This update for pam_pkcs11 provides the following fixes: Security issues fixed (bsc#1105012): - Fixed a logic bug in pampkcs11.c, leading to an authentication replay vulnerability - Fixed a stack-based buffer overflow in opensshmapper.c - Make sure memory is properly cleaned before invoking free() Other changes: - Add a systemd service file. (bsc#1049219) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP3-2018-2378,SUSE-SLE-SERVER-12-SP3-2018-2378 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20183311-1/ Link for SUSE-SU-2018:3311-1 https://lists.suse.com/pipermail/sle-security-updates/2018-October/004761.html E-Mail link for SUSE-SU-2018:3311-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1049219 SUSE Bug 1049219 https://bugzilla.suse.com/1105012 SUSE Bug 1105012 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 pam_pkcs11-0.6.8-7.5.1 pam_pkcs11-32bit-0.6.8-7.5.1 pam_pkcs11-0.6.8-7.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 pam_pkcs11-32bit-0.6.8-7.5.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 pam_pkcs11-0.6.8-7.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 pam_pkcs11-32bit-0.6.8-7.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 pam_pkcs11-0.6.8-7.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 pam_pkcs11-32bit-0.6.8-7.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3