Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE Linux Micro Update: 2025:20199-1 critical: pam_pkcs11 issues

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
The latest release for pam_pkcs11 rectifies significant vulnerabilities in SUSE Linux Micro, particularly a segmentation fault and an authentication bypass issue.
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031

Summary

## This update for pam_pkcs11 fixes the following issues: * CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN (bsc#1237058). * CVE-2025-24032: Fixed authentication bypass with default value for `cert_policy` (`none`) (bsc#1237062). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-293=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * pam_pkcs11-debugsource-0.6.12-3.1 * pam_pkcs11-debuginfo-0.6.12-3.1 * pam_pkcs11-0.6.12-3.1

Topics%20covered

Topics Covered

security advisory authentication bypass important issue segmentation fault patch instructions SUSE Linux Micro

References

* bsc#1237058

* bsc#1237062

Cross-

* CVE-2025-24031

* CVE-2025-24032

CVSS scores:

* CVE-2025-24031 ( SUSE ): 4.6

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2025-24031 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

* CVE-2025-24031 ( NVD ): 5.1

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-24032 ( SUSE ): 7.5

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

* CVE-2025-24032 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

* CVE-2025-24032 ( NVD ): 9.2

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20199-1
Release Date: 2025-04-22T14:29:25Z
Rating: important

Topics%20covered

Topics Covered

security advisory authentication bypass important issue segmentation fault patch instructions SUSE Linux Micro

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here