-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5864-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
February 12, 2025                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : pam-pkcs11
CVE ID         : CVE-2025-24032 CVE-2025-24531
Debian Bug     : 1095402

Two vulnerabilities were discovered in pam-pkcs11, a PAM module which
allows to use PKCS#11 based smart cards in the PAM authentication stack,
which may allow to bypass the authentication in some scenarios.

For the stable distribution (bookworm), these problems have been fixed in
version 0.6.12-1+deb12u1.

We recommend that you upgrade your pam-pkcs11 packages.

For the detailed security status of pam-pkcs11 please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/pam-pkcs11

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=NEnV
-----END PGP SIGNATURE-----