CVE-2025-24531

In OpenSC pampkcs11 before 0.6.13, pamsmauthenticate wrongly returns PAMIGNORE in many error situations such as an error triggered by a smartcard before login, allowing authentication bypass...

SUSE-SU-2025:20496-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - Removes pamenv from auth stack for security reason bsc1243226...

SUSE-RU-2025:20479-1 Recommended update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - Removes pamenv from auth stack for security reason bsc1243226...

pam_pkcs11-0.6.13-2.1 on GA media (moderate)

pampkcs11-0.6.13-2.1 on GA media Announcement ID: openSUSE-SU-2025:15257-1 Rating: moderate Cross-References: CVE-2025-6018 CVSS scores: CVE-2025-6018 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-6018 SUSE : 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:15257-1 pam_pkcs11-0.6.13-2.1 on GA media

These are all security issues fixed in the pampkcs11-0.6.13-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES12 Security Update : pam_pkcs11 (SUSE-SU-2025:02032-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02032-1 advisory. - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226. Tenable has extracted the preceding description block directly from th...

SUSE SLES15 Security Update : pam_pkcs11 (SUSE-SU-2025:02031-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02031-1 advisory. - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226. Tenable has extracted the preceding description block...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : pam_pkcs11 (SUSE-SU-2025:02026-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02026-1 advisory. - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226. Tenable has extracted th...

SUSE: Security Advisory (SUSE-SU-2025:02026-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:02031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:02026-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:02032-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2025:02032-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226...

SUSE-SU-2025:02031-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226...

SUSE-SU-2025:02026-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226...

SUSE: Security Advisory (SUSE-SU-2025:0689-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN bsc1237058. CVE-2025-24032: Fixed authentication bypass with default value for certpolicy none bsc1237062. Patch Instructions: To install this SUSE update use the SUS...

SUSE-SU-2025:20199-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN bsc1237058. - CVE-2025-24032: Fixed authentication bypass with default value for certpolicy none bsc1237062...

SUSE-SU-2025:20225-1 Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: - CVE-2025-24531: Fixed regression in version 0.6.12 returning PAMIGNORE in many situations with possible authentication bypass bsc1236314...

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24531: Fixed regression in version 0.6.12 returning PAMIGNORE in many situations with possible authentication bypass bsc1236314. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...