-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-5864-1
[email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 12, 2025
https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : pam-pkcs11
CVE ID : CVE-2025-24032 CVE-2025-24531
Debian Bug : 1095402
Two vulnerabilities were discovered in pam-pkcs11, a PAM module which
allows to use PKCS#11 based smart cards in the PAM authentication stack,
which may allow to bypass the authentication in some scenarios.
For the stable distribution (bookworm), these problems have been fixed in version 0.6.12-1+deb12u1.
We recommend that you upgrade your pam-pkcs11 packages.
For the detailed security status of pam-pkcs11 please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/pam-pkcs11
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at:
https://www.debian.org/security/
Mailing list:
[email protected]
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmesomBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0SYuw/+JNgevdlSVPmv1MBFT1AuSuZZ3nEdYaYE36QUQsxe2p4gQ/ISwPPF07r8 /RnD3ulvbLwU00FQyMpTV7nSFUofZaJ6RzGE5vBca9vtOVy9zFQ/OaI3fV/uPJgc 6ZCNlQ/9RwBq6fr58x+Te+3gWbP9p+Ps8u+mmwf7y9lB85WXfbUdTpRryWFxLyer n5AhaWuFcQ/lJugoeO1zf8aRIEnAWSBGk/dLXvM/t52u4NJlRyFtEGlSyYLoRfo3 o/m+rDbOtVY4FMiFv5JqmWLhJgWt0pOBuaL8UrCIjA5a4ClQG8LHg3aSKFm9Hm+b dOnMG3aVWNlQ2oE1wpX7m0wLY2wBeh435Z7DqmD6nbqNizZCxvgoA5tSTFn6Qd9Q 0bcZzYAmyggmRSWETJBwU0dyozNT6D8cQVqW3Y5LsMlCi61Vqj2EcaWl+IT7C7un 6XllldDiJZ7TXSuwfvO58CsE8KoPrG7Rek2iOScefqSvvkgx2wHrCudoSuf/r6rT 0jmfkf+uvq2VN4qFCXTVOsp3IQNb1XpRxGBOymMRBRJupIlFav7g49ZR0rDnYtlX ZrFBDgw+QxguOKCmSgSsQ8b19epfM4axbcAuuIXZQuDHfJWy6PY8NZv5npNQkpb4 qEQq8q3pDcRj3d3zDiANO8GSz9JQl645MOinVQvlVQ+/tS8L6qk=
=NEnV
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)