RHBA-2012:0215 - Bug Fix Advisory

Topic

An updated pam_pkcs11 package that fixes a bug is now available for Red Hat
Enterprise Linux 5.

Description

The pam_pkcs11 package allows X.509 certificate-based user authentication. It
provides access to the certificate and its dedicated private key with an
appropriate Public Key Cryptographic Standards #11 (PKCS#11) module.

This updated pam_pkcs11 package includes fixes for the following bug:

• The commands "pklogin_finder" and "pkcs11_inspect", both call "pk_configure"

with their entire "argv" array. This includes the command name, which is not
recognized as a valid option. Consequently, when running pklogin_finder or
pkcs11_inspect, unnecessary error messages were written to the system log in the
following format:

pkcs11_inspect: argument /usr/bin/pkcs11_inspect is not supported by this
module

This update applies a patch that improves the code, and the unnecessary error
messages are no longer generated. (BZ#623640)

All users of pam_pkcs11 are advised to upgrade to this updated package, which
fixes this bug.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 623640 - pklogin_finder and pkcs11_inspect both pass command name to pk_configure
• BZ - 759576 - TPS SRPM Failures Dist Usage Test

CVEs

(none)

References

(none)