FlawAtlas
Search the atlas
SUSE-SU-2017:1398-1 Not scored

Security update for pam

This update for pam fixes the following issues: - CVE-2015-3238: pam_unix in conjunction with SELinux allowed for DoS attacks (bsc#934920). - log a hint to syslog if /etc/nologin is present, but empty (bsc#1015565). - If /etc/nologin is present, but empty, log a hint to syslog. (bsc#1015565) - Added support for libowcrypt.so, if present, to configure support for BLOWFISH (bsc#1037824)

Exploit probability Not scored
Published May 24, 2017
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1 pam
SUSE:Linux Enterprise Desktop 12 SP2 pam
SUSE:Linux Enterprise Server 12 SP1 pam
SUSE:Linux Enterprise Server 12 SP2 pam
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 pam
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 pam
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 pam
SUSE:Linux Enterprise Software Development Kit 12 SP1 pam
SUSE:Linux Enterprise Software Development Kit 12 SP2 pam

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2017:1398-1

This update for pam fixes the following issues: - CVE-2015-3238: pam_unix in conjunction with SELinux allowed for DoS attacks (bsc#934920). - log a hint to syslog if /etc/nologin is present, but empty (bsc#1015565). - If /etc/nologin is present, but empty, log a hint to syslog. (bsc#1015565) - Added support for libowcrypt.so, if present, to configure support for BLOWFISH (bsc#1037824)

View original source

05 / REFERENCES

Further evidence