pam_pkcs11-0.6.10-150600.16.3.1<>,rgp9|WD.8NƨYv(@le+ADddQxjf2)sBqrf;IJ?Jd  " 6"4 J`  p9T9 9 89 9 9 X9 <9!Y9"v"9##&$P&'&('8' 9($ :( =2X>2`?2h@2pF2xG29H3t9I4X9X4Y4\49]59^9ib;hc<d<e<f<l<u<9v=wF9xF9yGzJDJTJXJkJlJpJvJCpam_pkcs110.6.10150600.16.3.1PKCS #11 PAM ModuleThis Linux PAM module allows X.509 a certificate-based user authentication. The certificate and its dedicated private key are thereby accessed by means of an appropriate PKCS #11 module. For the verification of the users' certificates, locally stored CA certificates as well as online or locally accessible CRLs are used. Additionally, the package includes pam_pkcs11-related tools: * pkcs11_eventmgr: Generates actions on card insert, removal, or time-out events * pklogin_finder: Gets the login name that maps to a certificate * pkcs11_inspect: Inspects the contents of a certificate * make_hash_links: Creates hash link directories for storing CAs and CRLsgh04-armsrv1SUSE Linux Enterprise 15SUSE LLC LGPL-2.1-or-laterhttps://www.suse.com/Productivity/Securityhttps://github.com/OpenSC/pam_pkcs11linuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in pkcs11_eventmgr.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in pkcs11_eventmgr.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable pkcs11_eventmgr.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop pkcs11_eventmgr.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in pkcs11_eventmgr.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart pkcs11_eventmgr.service ) || : fi fi_"(  X H  8g> ( ="(_i ; 8 E6EoylAA큤A큤큤AA큤gggggggggggggggggggggg[.@g[.@\T#[.@[.@[.@[.@[.@[.@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_pkcs11-0.6.10-150600.16.3.1.src.rpmconfig(pam_pkcs11)pam_pkcs11pam_pkcs11(aarch-64)@ @@@@@@@@@@@@@@@@@@@@@@@@    /bin/bash/bin/sh/bin/sh/bin/sh/bin/shconfig(pam_pkcs11)ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libcurl.so.4()(64bit)libldap_r-2.4.so.2()(64bit)libnspr4.so()(64bit)libnss3.so()(64bit)libnss3.so(NSS_3.10)(64bit)libnss3.so(NSS_3.2)(64bit)libnss3.so(NSS_3.3)(64bit)libnss3.so(NSS_3.4)(64bit)libnss3.so(NSS_3.6)(64bit)libnss3.so(NSS_3.7)(64bit)libnss3.so(NSS_3.8)(64bit)libnss3.so(NSS_3.9.2)(64bit)libnss3.so(NSS_3.9.3)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpam.so.0(LIBPAM_EXTENSION_1.0)(64bit)libpcsclite.so.1()(64bit)libplc4.so()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)systemdsystemdsystemdsystemd0.6.10-150600.16.3.13.0.4-14.6.0-14.0-15.2-14.14.3gf:\P@@[v[U@Y)@Y@Yp@VO@angel.yankov@suse.comdavide.benini@suse.comsbrabec@suse.comvcizek@suse.comsbrabec@suse.comjengelh@inai.deastieger@suse.comsbrabec@suse.comantoine.belvire@laposte.netsbrabec@suse.cz- Security update fix [bsc#1237062, CVE-2025-24032], [bsc#1237058, CVE-2025-24031] * Fix CVE-2025-24032: vulnerable to authentication bypass with default value for `cert_policy` (`none`) * Fix CVE-2025-24031: vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN * Add pam_pkcs11-CVE-2025-24032.patch * Add pam_pkcs11-CVE-2025-24031.patch * spec: set noarch for doc pkg, add %check section- Fix for bsc#1221255: * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch- Update to version 0.6.10: * Fix some security issues (thx @frankmorgner): https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/ (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch, 0002-fixed-buffer-overflow-with-long-home-directory.patch, 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch). * Fix buffer overflow with long home directory. * Fix wiping secrets (now using OpenSSL_cleanse()). * Verify using a nonce from the system, not the card. * Fix segfalt when checking CRLs (drop pam_pkcs11-crl-check.patch). - Add rcpkcs11_eventmgr service symlink.- Address security issues found by X41 D-Sec audit (bsc#1105012) * Authentication Replay * Buffer Overflow * Memory not cleaned properly before free() - add patches: * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch * 0002-fixed-buffer-overflow-with-long-home-directory.patch * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch- Fix segfault and fetch problems when checking CRLs (pam_pkcs11-crl-check.patch).- Repair bulletpoint that skidded in description. Trim description of %name-devel-doc, it does not cotain the programs.- add service file bsc#1049219- Updated to version 0.6.9: * Upstream web moved. * pkcs11_listcerts: Do not fail on certificate error. * Do not fail if card was already unlocked. * Other bug fixes. * Translation updates. - Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch. - Work around incorrect upstream release process not calling "make dist". - Split API documentation into a separate package pam_pkcs11-devel-doc. - Add pam_pkcs11-fsf-address.patch.- Fix build for Tumbleweed: * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch * Rebuild configure with the bootstrap script (add libtool as build dependency)- Updated to version 0.6.8: * Code cleanup. * Bug fixes. * Translation updates./bin/sh/bin/sh/bin/sh/bin/shh04-armsrv1 1739986591  56789:;<=>?@ABCDEFGHIJKLMdefritnlplptrutr0.6.10-150600.16.3.10.6.10-150600.16.3.10.6.10-150600.16.3.1 common-auth-smartcardpam_pkcs11cacertscard_eventmgr.confcrlspam_pkcs11.confpkcs11_eventmgr.confpam_pkcs11.socard_eventmgrpkcs11_eventmgrpkcs11_inspectpkcs11_listcertspkcs11_make_hash_linkpkcs11_setuppklogin_finderpkcs11_eventmgr.servicepam_pkcs11ldap_mapper.soopensc_mapper.soopenssh_mapper.sorcpkcs11_eventmgrpam_pkcs11AUTHORSCOPYINGChangeLogChangeLog.gitNEWSREADMEREADME.autologinREADME.mappersREADME.mdTODOcard_eventmgr.conf.exampledigest_mapping.examplemail_mapping.examplemappers_api.htmlpam.d_login.examplepam_pkcs11.conf.examplepam_pkcs11.htmlpkcs11_eventmgr.conf.examplesubject_mapping.examplepam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mopam_pkcs11.mocard_eventmgr.1.gzpkcs11_eventmgr.1.gzpkcs11_inspect.1.gzpkcs11_listcerts.1.gzpkcs11_make_hash_link.1.gzpkcs11_setup.1.gzpklogin_finder.1.gzpam_pkcs11.8.gz/etc/pam.d//etc//etc/pam_pkcs11//lib64/security//usr/bin//usr/lib/systemd/system//usr/lib64//usr/lib64/pam_pkcs11//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/pam_pkcs11//usr/share/locale/de/LC_MESSAGES//usr/share/locale/fr/LC_MESSAGES//usr/share/locale/it/LC_MESSAGES//usr/share/locale/nl/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/man/man1//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37553/SUSE_SLE-15-SP6_Update/ec9dad8a377133eb626d3e2304474659-pam_pkcs11.SUSE_SLE-15-SP6_Updatedrpmxz5aarch64-suse-linux   ASCII textdirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=567e1307128a084d989645ee10d7d88ce75876f6, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=8f3ca6534c16490a4bc37385ffeb0f6cd97b8027, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=dca3c804ed643c70c053a5cabd5be9d7d9923c2c, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=a057ae09960c5ee78166c9aa0ffae2392cdfaa16, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=2074545cc082d78f0b07ab25135796b48d766049, strippedBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=1a426e7dae1f53c6541e1478f121530cc7a94fa9, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, for GNU/Linux 3.7.0, BuildID[sha1]=a5f821eb2f1ba5953cd59c459bdc93ca996baeba, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=21a6f24fb4ce67145cf485c3be0a0ab13519db09, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c68fcbee2ebb3cc72839dc1df3483c84f93e444, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=656c19333ddc19a642e95484e8eeab40f40d9516, strippedUTF-8 Unicode textXML 1.0 document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)':KLQdw RRRRRRRRRRRRR R R RRRRR RRRR R RRRRRRRRR R RRRRRR R R RRRRRRRRRRRRR RRRRRRRRRRRRR R RRRRRRRR R RRRR R R RRRRRRRRRRRRR RRRRRRRRRRRRR R RRRR R RRRRRRRRRRRRR R RRRR RRRRRRRRRRRRR R RRRR RReȭ3Ÿ jGmᝏuqN29 Pd(B!x97#Wzn~( + yG ~8Q^Eѻ;5rl kaWC>[M"BOTrDtb'[IGmʐy@p1n*KW'p-0WDže1zvr Rȷl ,26dʪüF3:<,] հS`tMe;$ >  &UM7ZUu ]sʣ'Kem&'T:ȫKUKG_  bUV3/? lIe!\Ij?]:OF1+5HOsi/3v~:mUQrc#6v\!篵+@!xN,jX,,3^+ߏQk~8irZMNՈlŭ#rH*,&sE'qW>5~7g0m([;a4s `=}/1mh!GPqX:k/І'bЊdMsfv9h_52j!ߕMzIq 'R3ʨL ti!ᣏ="of/+ʡ?'(uO (0]ġN^: ?^Gs0E'8g`&t,Y;o|,+G/7G-#<*"ݑ>fu;glGA_nF'ЪfN˪MI?.ÎUܞ`Ճϥ(E!m${Q5x#&"{&Ͳqrct؊|ST6)SxͥO@]r>s2z?O)hkπ"}Z),GvF/FTp"rjJ"|`WJ>t.OχҙLON?ngw4LEA݉z 2&ygy-aә8ܛB~T4V€iNJ(kաHٔ/T}9Q/dԦ(hUYM7l'R5Wc:fy-,xH+]'~\9::TK-da`qjӒ,j.|ey LΓ{k}$ qX ]21lD"a[kME@i4aE{ ip#{~*- =w}) IݶZ3g{?f $hMEIl(*j7h 1c v$ YP H??An=Dqo),j=l|᠁RجNV#kkDؖgnh*VžlőH=Btip/{WFi2%*Ax gvi^)_tȄiIQ$ߎN1q_5s_h bL ;sڷ"K Y`gKy>^f/&`˫:1k F@ACM3%>p 4CHc s,eX#$cwYHe.AxYt~H<'эRr;H)۶J6_6Ty1I,0sFkOhìP%Ҿ}1|)rF#DCh0 wE0UL-R8p';]u+]dDЍƾI\^̬tIc'ım0tVy$vT5"Y9qv _+8|U}pb5‘I圈B*jؚԱ=Qk+W'dYlwOV讼zմiRO6D:_3GPšT$E1;bхb]VS2V;Q1VU)DϤ Q|Ƒ!L|@IAGM!5n ` ;kJB iuj[ p9;/I 6Z ֠@ǃ ]t e5w~Wtޛƈ3*H2 񂇵 ][plP(/ ?PXq21MJ%?.坆bpB*5*r͂X^$:G=\u.g(??,_$oMqdܔ,.Tר%{7A2pn"֗gu{s1 ,ھXʜTaLUvR;cYlrZP69D!En"2i4oc塀I ،~uf-ýЌesg켔?7V6AY^VHn6poJC;zJH\<#DzI ce'#XL B]gOc>oBb;KL~1 7;a4 y7h%6}50\ڀ&av<ֶAWl9rs s|`$Y]E=yTyBশkZ%N5k"f J^.d4BDebyqS${]I9^(6Hl3wMEm`T-#0kz\ʩ׭b3R9r9 =;XgpЎkݸ{G/EtyS.b- #iӪ >+Uby>T3Q?lN-f @u.G?6|v?BF%"V!% >4SW +WIoWOl$G3\p'BR C}LQc-4~,ít׆v"hևϺɻ /R_rYLіxCX;(]HaXP rq 'h}CAߓ]L,̋" ʡp}jRp4qræ妰 tPmSp1@A?b~1|_:X  Tq>?F_PTn+S\cnbvSf9O|v:X c\K;[ poĔ›yTtfͬJA$dԟb?V7է z#^n`((ƥ%2{jlH^ %+FgW PPTayL mt,UƮ!u\(~VkiMD4ِB ڃ]Bw?Iʗ/D ifJ=Ķ- ޑMUE!Uc\4`V. c4)ZgR"-l{Νo_ QYvi=>gÌ5l$fsq4"Mn#\ ifJDw\1Y]gQ+9z%lU/Õur^`6SaAY#pv8[dLr/NM6%ۺKs)Hpe7w2CAg?Ps0m @/ FBޒ޷ (KGg1b- r%%R~E@yOG1 ©cC 4IT4:#Adv~Ŋhͼ T)u6$R5N?ݦ|=L&0nqƇ&f$qa+(NdĪh&=`ĜST4 u鳡,@ZMLXdG*SG57hŖQ@)F YHiU͏E3Ғ/˽i8i rj̢nEl3!ykNl@.OSwpї4;—:h aS)W֯w_3VDr5-G,*TO$6jyoWS|h٫R]!K':gJ6 t8Axa׋&ȧFD\>CӲJRi߉=xabYKϨѬ|TJ|33S@x}2M))#c|˻`v",|L5&6F.D97몃sswu=YQ1˷:; `JgB{z| 2[RkI ŴX=Hr|٬&^7F76S+pZ]ؚM~M[:9ȠBRbTpݶ}RL HȂl9<9*ݗ5Rheɤ!zW\3A>à Uca"X Zl,%0oE☛$ Cև=C=9K iBcp|ҘѦhg=!!H0E{ubi̕Y2͌mxazȀ\+u\f9>g!h|x^bw`ZJ{tx/ P] ݋Bgmg#x -`PVMJcCM BU "sV'ݯ<?5څ˲*Qx'Nvq!bYPWa^4 _o|2U]/9ђc=Ez *q\wK~{#  ߾`hdh<֎2CK0vcdncV'FgԴ4.>[$~/ H%\Ml}ډ:~VO?8D(ƼM6St<*B<뱂wcdM8׏=;LMru=C:5ٺ5RךJ=_ m^D<[]C/e}db8ZtPu̯!̏uVl0}^:*}mP|OFr"g)FaѢ',w@sj f': 3hڶaعC:ni1癍NZdN9v|U"mD!G68ۏ %\Elz휦2QH1CՏt&.?FIԝ_} hyĴpVCG{!Iӹ>]սVb$4*s(ʔx7=Ю"G!o;uiQUk'pc琀CӯYYS?"TImԳnD]4Aq#`dGQ$O/(LQHdfoSA(.Mgiϛ8S0I,6_ mM_[S䰉pAcI!Ued&kE9M?jCлщr2Y+tSXEcnH3bX-ً0".*%|?gs6c+zai^"gvݠJjJa* 1=緓sRZ'?lhV} Q(gsS-^SL.e\c4~yS{SN}PSW^Ht$yI?4fZle$¤<#{5/w°8~xjj@h bm%*u&ݽE¸YuGRdL\hP cH~1ӞCR⽴pis18hj 2,!,ַRV}slI@ŴQzŖ`__ƣ0PEg5 YZ