Issued:

2012-02-20

Updated:

2012-02-20

RHBA-2012:0215 - pam_pkcs11 bug fix update

Synopsis

pam_pkcs11 bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

An updated pam_pkcs11 package that fixes a bug is now available for Red Hat Enterprise Linux 5.

Description

The pam_pkcs11 package allows X.509 certificate-based user authentication. It provides access to the certificate and its dedicated private key with an appropriate Public Key Cryptographic Standards #11 (PKCS#11) module.

This updated pam_pkcs11 package includes fixes for the following bug:

• The commands "pklogin_finder" and "pkcs11_inspect", both call "pk_configure" with their entire "argv" array. This includes the command name, which is not recognized as a valid option. Consequently, when running pklogin_finder or pkcs11_inspect, unnecessary error messages were written to the system log in the following format:

  pkcs11_inspect: argument /usr/bin/pkcs11_inspect is not supported by this module

This update applies a patch that improves the code, and the unnecessary error messages are no longer generated. (BZ#623640)

All users of pam_pkcs11 are advised to upgrade to this updated package, which fixes this bug.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• pam_pkcs11-0.5.3-26.el5.x86_64.rpm
• pam_pkcs11-0.5.3-26.el5.ppc.rpm
• pam_pkcs11-0.5.3-26.el5.s390.rpm
• pam_pkcs11-0.5.3-26.el5.s390x.rpm
• pam_pkcs11-0.5.3-26.el5.ppc64.rpm
• pam_pkcs11-0.5.3-26.el5.src.rpm
• pam_pkcs11-0.5.3-26.el5.ia64.rpm
• pam_pkcs11-0.5.3-26.el5.i386.rpm

Fixes

• This content is not included.BZ - 623640
• This content is not included.BZ - 759576

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.