Synopsis

pam_pkcs11 bug fix update

Type/Severity

Bug Fix Advisory

Topic

An updated pam_pkcs11 package that fixes a bug is now available for Red Hat
Enterprise Linux 5.

Description

The pam_pkcs11 package allows X.509 certificate-based user authentication. It
provides access to the certificate and its dedicated private key with an
appropriate Public Key Cryptographic Standards #11 (PKCS#11) module.

This updated pam_pkcs11 package includes fixes for the following bug:

• The commands "pklogin_finder" and "pkcs11_inspect", both call "pk_configure"
  with their entire "argv" array. This includes the command name, which is not
  recognized as a valid option. Consequently, when running pklogin_finder or
  pkcs11_inspect, unnecessary error messages were written to the system log in the
  following format:
  

pkcs11_inspect: argument /usr/bin/pkcs11_inspect is not supported by this
module

This update applies a patch that improves the code, and the unnecessary error
messages are no longer generated. (BZ#623640)

All users of pam_pkcs11 are advised to upgrade to this updated package, which
fixes this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 623640 - pklogin_finder and pkcs11_inspect both pass command name to pk_configure
• BZ - 759576 - TPS SRPM Failures Dist Usage Test

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
pam_pkcs11-0.5.3-26.el5.src.rpm	SHA-256: bba5744c6143d3b76d7de67d0327ea1c69995af7aa1f398cba2ad7a78c021294
x86_64
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68
pam_pkcs11-0.5.3-26.el5.x86_64.rpm	SHA-256: ceb85f7d73ebe56799419d84b6a79748603e1ab24ce8b2c9019420bb3e4416e3
ia64
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68
pam_pkcs11-0.5.3-26.el5.ia64.rpm	SHA-256: 946250309fa2250fc0e10f1940e92029e9b746a09a1862b10070ff85b951f8dd
i386
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68

Red Hat Enterprise Linux Workstation 5

SRPM
pam_pkcs11-0.5.3-26.el5.src.rpm	SHA-256: bba5744c6143d3b76d7de67d0327ea1c69995af7aa1f398cba2ad7a78c021294
x86_64
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68
pam_pkcs11-0.5.3-26.el5.x86_64.rpm	SHA-256: ceb85f7d73ebe56799419d84b6a79748603e1ab24ce8b2c9019420bb3e4416e3
i386
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68

Red Hat Enterprise Linux Desktop 5

SRPM
pam_pkcs11-0.5.3-26.el5.src.rpm	SHA-256: bba5744c6143d3b76d7de67d0327ea1c69995af7aa1f398cba2ad7a78c021294
x86_64
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68
pam_pkcs11-0.5.3-26.el5.x86_64.rpm	SHA-256: ceb85f7d73ebe56799419d84b6a79748603e1ab24ce8b2c9019420bb3e4416e3
i386
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
pam_pkcs11-0.5.3-26.el5.src.rpm	SHA-256: bba5744c6143d3b76d7de67d0327ea1c69995af7aa1f398cba2ad7a78c021294
s390x
pam_pkcs11-0.5.3-26.el5.s390.rpm	SHA-256: 72c9f13eb831cbbac8e6b0bd9ecdf9b921fa27a5e4ad26c30df8c5e27438a4d1
pam_pkcs11-0.5.3-26.el5.s390x.rpm	SHA-256: 084c14ac64c56b91cfdaa13cf40b429f6a002b967150f3798bf462bb54677bd9

Red Hat Enterprise Linux for Power, big endian 5

SRPM
pam_pkcs11-0.5.3-26.el5.src.rpm	SHA-256: bba5744c6143d3b76d7de67d0327ea1c69995af7aa1f398cba2ad7a78c021294
ppc
pam_pkcs11-0.5.3-26.el5.ppc.rpm	SHA-256: c8f268315ac6a994de87479cb116c6b2e6a5a60626d37a08ef0edd2e8cc5ec19
pam_pkcs11-0.5.3-26.el5.ppc64.rpm	SHA-256: 51fd17f225887094e87a010a0c0c69a5f5cadc8825ee7f90db0cd052370aadbd

Red Hat Enterprise Linux Server from RHUI 5

SRPM
pam_pkcs11-0.5.3-26.el5.src.rpm	SHA-256: bba5744c6143d3b76d7de67d0327ea1c69995af7aa1f398cba2ad7a78c021294
x86_64
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68
pam_pkcs11-0.5.3-26.el5.x86_64.rpm	SHA-256: ceb85f7d73ebe56799419d84b6a79748603e1ab24ce8b2c9019420bb3e4416e3
i386
pam_pkcs11-0.5.3-26.el5.i386.rpm	SHA-256: d81960e545d24bd50a230aa68caa1e367d8f270ae02380e991fcc326831fed68