RHBA-2013:0397 - Bug Fix Advisory

Topic

Updated coolkey packages that fix several bugs and add an enhancement are now
available for Red Hat Enterprise Linux 6.

Description

Coolkey is a smart card support library for the CoolKey, CAC (Common Access
Card), and PIV (Personal Identity Verification) smart cards.

This update fixes the following bugs:

• Previously, Coolkey was unable to recognize PIV-I cards. This update fixes the

bug and Coolkey now allows these cards to be read and display certificate
information as expected. (BZ#861108)

• Prior to this update, The pkcs11_listcerts and pklogin_finder utilities were

unable to recognize certificates and USB tokens on smart cards after upgrading
the Coolkey library. A patch has been provided to address this issue and these
utilities now work as expected. (BZ#879563)

• Previously, the remote-viewer utility failed to utilize a plugged smart card

reader when a Spice client was running. Eventually, the client could terminate
unexpectedly. Now, remote-viewer recognizes the reader and offers authentication
once the card is inserted and the crashes no longer occur. (BZ#806038)

• Previously, certain new PIV-II smart cards could not be recognized by client

card readers, the ESC card manager, or the pklogin_finder utility. A patch has
been provided to address this issue and PIV-II cards now work with Coolkey as
expected. (BZ#884266)

This update also adds the following enhancement:

• Support for Oberthur Smart Cards has been added to the Coolkey library.

(BZ#805693)

Users of coolkey are advised to upgrade to these updated packages, which fix
these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

• BZ - 879563 - pkcs11_listcerts/pklogin_finder are not able to see certs/token on a smartcard
• BZ - 884266 - None of the DoD PIV test cards work, even with the latest coolkey.

CVEs

(none)

References

(none)