Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 18 articles for you...
89
security advisoryfedorabuffer overflowFedora 44 vips Critical Denial of Service Memory Issues 2026-b9f00ad1b7
update to v8.18.3 enable uhdr fix several security issues. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-b9f00ad1b7 2026-06-23 01:06:46.785031+00:00 -------------------------------------------------------------------------------- Name : vips Product : Fedora 44 Version : 8.18.3 Release : 2.fc44 URL : https://www.libvips.org/ Summary : C/C++ library for processing large images Description : VIPS is an image processing library. It is good for very large images (even larger than the amount of RAM in your machine), and for working with color. This package should be installed if you want to use a program compiled against VIPS. -------------------------------------------------------------------------------- Update Information: update to v8.18.3 enable uhdr fix several security issues -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 13 2026 Adam Goode - 8.18.3-2 - Upload vips v8.18.3 sources * Sat Jun 13 2026 Kleis Auke Wolthuizen - 8.18.3-1 - Update to 8.18.3 - Drop patches merged upstream - Build against libultrahdr (rhbz#2427101) * Sun May 31 2026 Richard Shaw - 8.18.0-8 - Rebuild for OpenColorIO 2.5.2. * Mon May 25 2026 Richard Shaw - 8.18.0-7 - Rebuild for OpenEXR 3.4.12. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2442677 - CVE-2026-3146 vips: libvips: Local denial of service due to null pointer dereference [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2442677 [ 2 ] Bug #2442681 - CVE-2026-3145 vips: libvips: Memory corruption via local manipulation [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2442681 [ 3 ] Bug #2442683 - CVE-2026-3147 vips: libvips: Heap-based buffer overflow [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2442683 [ 4 ] Bug #2443335 - CVE-2026-3282 vips:libvips unpremultiply.c vips_unpremultiply_build out-of-bounds [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443335 [ 5 ] Bug #2443339 - CVE-2026-3284 vips: libvips extract.c vips_extract_area_build integer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443339 [ 6 ] Bug #2443343 - CVE-2026-3283 vips: libvips extract.c vips_extract_band_build out-of-bounds [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443343 [ 7 ] Bug #2443344 - CVE-2026-3281 vips: libvips bandrank.c vips_bandrank_build heap-based overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443344 [ 8 ] Bug #2448617 - vips-8.18.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2448617 [ 9 ] Bug #2459221 - CVE-2026-6491 vips: heap-based buffer over-read in im_minpos_vec() in libvips/deprecated/vips7compat.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2459221 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-b9f00ad1b7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 22, 2026
•Critical
Fedora
89
security advisoryfedoramemory corruptionFedora 43 vips Key Update Fixes Critical Denial of Service Memory Issue
update to v8.18.3 enable uhdr fix several security issues. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-3b2ddea116 2026-06-23 00:52:30.610743+00:00 -------------------------------------------------------------------------------- Name : vips Product : Fedora 43 Version : 8.18.3 Release : 2.fc43 URL : https://www.libvips.org/ Summary : C/C++ library for processing large images Description : VIPS is an image processing library. It is good for very large images (even larger than the amount of RAM in your machine), and for working with color. This package should be installed if you want to use a program compiled against VIPS. -------------------------------------------------------------------------------- Update Information: update to v8.18.3 enable uhdr fix several security issues -------------------------------------------------------------------------------- ChangeLog: * Sat Jun 13 2026 Adam Goode - 8.18.3-2 - Upload vips v8.18.3 sources * Sat Jun 13 2026 Kleis Auke Wolthuizen - 8.18.3-1 - Update to 8.18.3 - Drop patches merged upstream - Build against libultrahdr (rhbz#2427101) * Sun May 31 2026 Richard Shaw - 8.18.0-8 - Rebuild for OpenColorIO 2.5.2. * Mon May 25 2026 Richard Shaw - 8.18.0-7 - Rebuild for OpenEXR 3.4.12. * Wed Apr 8 2026 Gwyn Ciesla - 8.18.0-6 - Libraw rebuild * Mon Feb 16 2026 Gwyn Ciesla - 8.18.0-5 - LibRaw rebuild * Tue Jan 20 2026 Mamoru TASAKA - 8.18.0-4 - Fix build with glibc 2.43 which supports C23 * Sat Jan 17 2026 Fedora Release Engineering - 8.18.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Sat Dec 20 2025 Kleis Auke Wolthuizen - 8.18.0-2 - Backport upstream patch to fix thumbnail generation on s390x * Wed Dec 17 2025 Kleis Auke Wolthuizen - 8.18.0-1 - Update to 8.18.0 - Resolves: rhbz#2423186 - Build against LibRaw - Switch from spng to libpng (preferred upstream) -Disable new uhdr feature (lack of libuhdr) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2442677 - CVE-2026-3146 vips: libvips: Local denial of service due to null pointer dereference [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2442677 [ 2 ] Bug #2442681 - CVE-2026-3145 vips: libvips: Memory corruption via local manipulation [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2442681 [ 3 ] Bug #2442683 - CVE-2026-3147 vips: libvips: Heap-based buffer overflow [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2442683 [ 4 ] Bug #2443335 - CVE-2026-3282 vips: libvips unpremultiply.c vips_unpremultiply_build out-of-bounds [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443335 [ 5 ] Bug #2443339 - CVE-2026-3284 vips: libvips extract.c vips_extract_area_build integer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443339 [ 6 ] Bug #2443343 - CVE-2026-3283 vips: libvips extract.c vips_extract_band_build out-of-bounds [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443343 [ 7 ] Bug #2443344 - CVE-2026-3281 vips: libvips bandrank.c vips_bandrank_build heap-based overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2443344 [ 8 ] Bug #2448617 - vips-8.18.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2448617 [ 9 ] Bug #2459221 - CVE-2026-6491 vips: heap-based buffer over-read in im_minpos_vec() in libvips/deprecated/vips7compat.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2459221 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3b2ddea116' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packagesare signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 22, 2026
•Critical
Fedora
89
security advisoryfedoraupdateFedora 43 apt 3.1.15 Important Local DoS Advisory 2026-1c47e433df
Update to latest upstream release apt 3.1.15 and python-apt 3.1.0 Update to latest upstream release apt 3.1.15, also fix build problem with previous release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-1c47e433df 2026-03-04 00:54:59.722793+00:00 -------------------------------------------------------------------------------- Name : apt Product : Fedora 43 Version : 3.1.15 Release : 2.fc43 URL : https://tracker.debian.org/pkg/apt Summary : Command-line package manager for Debian packages Description : This package provides commandline tools for searching and managing as well as querying information about packages as a low-level access to all features of the libapt-pkg library. These include: * apt-get for retrieval of packages and information about them from authenticated sources and for installation, upgrade and removal of packages together with their dependencies * apt-cache for querying available information about installed as well as installable packages * apt-cdrom to use removable media as a source for packages * apt-config as an interface to the configuration settings * apt-key as an interface to manage authentication keys -------------------------------------------------------------------------------- Update Information: Update to latest upstream release apt 3.1.15 and python-apt 3.1.0 Update to latest upstream release apt 3.1.15, also fix build problem with previous release -------------------------------------------------------------------------------- ChangeLog: * Mon Feb 16 2026 Terje Rosten - 3.1.15-2 - Rebuild due to so name bump * Sun Feb 15 2026 Terje Rosten - 3.1.15-1 - 3.1.15 * Fri Jan 16 2026 Fedora Release Engineering - 3.1.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 3.1.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Mon Oct 6 2025 Terje Rosten -3.1.8-1 - 3.1.8 - apt-key is gone - Add openssl-devel to buildreq - Fix include issue - apt-extracttemplates has moved * Wed Jul 23 2025 Fedora Release Engineering - 2.9.27-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Tue Feb 11 2025 Zbigniew J\u0119drzejewski-Szmek - 2.9.27-2 - Add sysusers.d config file to allow rpm to create users/groups automatically * Mon Feb 3 2025 Packit - 2.9.27-1 - Update to version 2.9.27 - Resolves: rhbz#2319327 * Thu Jan 16 2025 Fedora Release Engineering - 2.9.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2149769 - python-apt-3.1.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2149769 [ 2 ] Bug #2319327 - apt-3.1.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=2319327 [ 3 ] Bug #2339898 - apt-2.9.8-1.fc43 FTBFS: apt-2.9.8/apt-pkg/contrib/strutl.cc:597:7: error: \u2018uint8_t\u2019 was not declared in this scope https://bugzilla.redhat.com/show_bug.cgi?id=2339898 [ 4 ] Bug #2384459 - apt: FTBFS in Fedora rawhide/f43 https://bugzilla.redhat.com/show_bug.cgi?id=2384459 [ 5 ] Bug #2423062 - CVE-2025-6966 python-apt: python-apt: NULL pointer dereference leads to local denial of service [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2423062 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1c47e433df' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- .Update to apt 3.1.15 on Fedora 43 addresses important issues and build problems. Immediate installation recommended.. Fedora Apt Package Management Local Denial Service Update. . Severity: Important. LinuxSecurity.com Team
Mar 04, 2026
•Important
Fedora
100
security advisorymoderateSUSESUSE Linux Enterprise Micro 5.5 Moderate: pam Local DoS Fix
* bsc#1217000 * bsc#1218475 Cross-References: * CVE-2024-22365 . # Security update for pam Announcement ID: SUSE-SU-2024:0136-2 Rating: moderate References: * bsc#1217000 * bsc#1218475 Cross-References: * CVE-2024-22365 CVSS scores: * CVE-2024-22365 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-22365 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). * Check localtime_r() return value to fix crashing (bsc#1217000) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-136=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * pam-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22365.html * https://bugzilla.suse.com/show_bug.cgi?id=1217000 * https://bugzilla.suse.com/show_bug.cgi?id=1218475 . SUSE has issued a moderate security patch for libcurl focusing on a local denial of service flaw and additional improvements.. SUSE Linux Enterprise,pam security update,local DoS issue. . LinuxSecurity.com Team
Jul 09, 2024
SuSE
100
security advisorysecurity updatepatchSUSE: CU-2024:280-1 critical: suse/mariadb vulnerability patch
The container suse/postgres was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2024:279-1 Container Tags : suse/postgres:16 , suse/postgres:16-5.3 , suse/postgres:16.1 , suse/postgres:16.1-5.3 , suse/postgres:latest Container Release : 5.3 Severity : important Type : security References : 1211188 1211190 1217000 1218126 1218186 1218209 1218475 CVE-2023-1667 CVE-2023-2283 CVE-2023-48795 CVE-2023-6004 CVE-2023-6918 CVE-2024-22365 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:136-1 Released: Thu Jan 18 09:53:47 2024 Summary: Security update for pam Type: security Severity: moderate References: 1217000,1218475,CVE-2024-22365 This update for pam fixes the following issues: - CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). - Check localtime_r() return value to fix crashing (bsc#1217000) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:140-1 Released: Thu Jan 18 11:34:58 2024 Summary: Security update for libssh Type: security Severity: important References: 1211188,1211190,1218126,1218186,1218209,CVE-2023-1667,CVE-2023-2283,CVE-2023-48795,CVE-2023-6004,CVE-2023-6918 This update for libssh fixes the following issues: Security fixes: - CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209) - CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126) - CVE-2023-6918: Fixed missing checks for return values of MD functions (bsc#1218186) - CVE-2023-1667: Fixed NULLdereference during rekeying with algorithm guessing (bsc#1211188) - CVE-2023-2283: Fixed possible authorization bypass in pki_verify_data_signature under low-memory conditions (bsc#1211190) Other fixes: - Update to version 0.9.8 - Allow @ in usernames when parsing from URI composes - Update to version 0.9.7 - Fix several memory leaks in GSSAPI handling code The following package changes have been done: - libssh-config-0.9.8-150400.3.3.1 updated - libssh4-0.9.8-150400.3.3.1 updated - pam-1.3.0-150000.6.66.1 updated - container:sles15-image-15.0.0-36.5.74 updated . SUSE has introduced significant enhancements to the suse/postgres container, addressing urgent security vulnerabilities and enhancing overall protection.. SUSE Container Update, Security Patch, Postgres Update. . Severity: Important. LinuxSecurity.com Team
Jan 20, 2024
•Important
SuSE
100
security advisorymoderatesuseSUSE: 2024:268-1 moderate vulnerability: pam local denial of service
The container suse/sles12sp5 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sles12sp5 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2024:268-1 Container Tags : suse/sles12sp5:6.5.556 , suse/sles12sp5:latest Container Release : 6.5.556 Severity : moderate Type : security References : 1218475 CVE-2024-22365 ----------------------------------------------------------------- The container suse/sles12sp5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:137-1 Released: Thu Jan 18 09:55:34 2024 Summary: Security update for pam Type: security Severity: moderate References: 1218475,CVE-2024-22365 This update for pam fixes the following issues: - CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). The following package changes have been done: - pam-1.1.8-24.56.1 updated . SUSE Container Patch Update: Resolutions for SUSE/SLES12SP5 tackle local service denial vulnerabilities in PAM authorization.. SUSE Container Update, PAM Security Update, Local DoS Issue. . LinuxSecurity.com Team
Jan 20, 2024
SuSE
100
security advisorymoderate severitypatchSUSE 15.3 PAM Advisory: 2024:242-1 moderate Local DoS Risk Fix
The container suse/ltss/sle15.3/sle15 was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/ltss/sle15.3/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2024:242-1 Container Tags : suse/ltss/sle15.3/bci-base:15.3 , suse/ltss/sle15.3/bci-base:15.3.3.42 , suse/ltss/sle15.3/sle15:15.3 , suse/ltss/sle15.3/sle15:15.3.3.42 Container Release : 3.42 Severity : moderate Type : security References : 1212475 1217000 1218475 CVE-2024-22365 ----------------------------------------------------------------- The container suse/ltss/sle15.3/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:136-1 Released: Thu Jan 18 09:53:47 2024 Summary: Security update for pam Type: security Severity: moderate References: 1217000,1218475,CVE-2024-22365 This update for pam fixes the following issues: - CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). - Check localtime_r() return value to fix crashing (bsc#1217000) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:139-1 Released: Thu Jan 18 11:33:54 2024 Summary: Recommended update for go1.21 Type: recommended Severity: moderate References: 1212475 This update for go1.21 fixes the following issues: go1.21.6 (released 2024-01-09) includes fixes to the compiler, the runtime, and the crypto/tls, maps, and runtime/pprof packages. (bsc#1212475) * x/build,os/signal: TestDetectNohup and TestNohup fail on replacement darwin LUCI builders * runtime: ReadMemStats fatal error: mappedReady and other memstats are not equal * cmd/compile: linux/s390x: inlining bug in s390x * maps: maps.Clone reference semantics when cloning a map with large value types * runtime:excessive memory use between 1.21.0 -> 1.21.1 * cmd/compile: max/min builtin broken when used with string(byte) conversions * runtime/pprof: incorrect function names for generics functions * crypto: upgrade to BoringCrypto fips-20220613 and enable TLS 1.3 * runtime: race condition raised with parallel tests, panic(nil) and -race The following package changes have been done: - container-suseconnect-2.4.0-150000.4.48.1 updated - pam-1.3.0-150000.6.66.1 updated . Ubuntu Container Enhancement for ubuntu/security/focal featuring vital upgrades and instructions targeting Remote DoS vulnerabilities in SSH.. PAM Security Fix, SUSE Update, Local Denial of Service, Security Advisory. . LinuxSecurity.com Team
Jan 19, 2024
SuSE
202
security advisorymoderatelocal denial of serviceopenSUSE 15.5 SUSE-SU-2024:0136-1 Moderate: PAM Local DoS
This update for pam fixes the following issues: CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475).. # Security update for pam Announcement ID: SUSE-SU-2024:0136-1 Rating: moderate References: * bsc#1217000 * bsc#1218475 Cross-References: * CVE-2024-22365 CVSS scores: * CVE-2024-22365 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Development Tools Module 15-SP5 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux EnterpriseServer 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). * Check localtime_r() return value to fix crashing (bsc#1217000) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-136=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-136=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-136=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-136=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-136=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-136=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-136=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patchSUSE-SLE-Product-HPC-15-SP1-LTSS-2024-136=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-136=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-136=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-136=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-136=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-136=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2024-136=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-136=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-136=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-136=1 * SUSE Manager Proxy 4.3 zypper in -t patchSUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-136=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-136=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-136=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-136=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-136=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-136=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-136=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2024-136=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2024-136=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-136=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 *pam-1.3.0-150000.6.66.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * Basesystem Module 15-SP5 (noarch) * pam-doc-1.3.0-150000.6.66.1 * Basesystem Module 15-SP5 (x86_64) * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * Development Tools Module 15-SP5 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 *pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE LinuxEnterprise High Performance Computing ESPOS 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Real Time 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 *pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 *pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Proxy 4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 *pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Proxy 4.3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Manager Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Manager Server 4.3 (x86_64) * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * SUSE Enterprise Storage 7.1 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Enterprise Storage 7.1 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE CaaS Platform 4.0 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 *pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * SUSE CaaS Platform 4.0 (noarch) * pam-doc-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * openSUSE Leap Micro 5.3 (aarch64 x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * pam-debugsource-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * pam-devel-1.3.0-150000.6.66.1 * pam-debugsource-1.3.0-150000.6.66.1 * pam-extra-debuginfo-1.3.0-150000.6.66.1 * pam-extra-1.3.0-150000.6.66.1 * pam-1.3.0-150000.6.66.1 * pam-debuginfo-1.3.0-150000.6.66.1 * openSUSE Leap 15.5 (x86_64) * pam-devel-32bit-1.3.0-150000.6.66.1 * pam-32bit-debuginfo-1.3.0-150000.6.66.1 * pam-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-1.3.0-150000.6.66.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.66.1 * openSUSE Leap 15.5 (noarch) * pam-doc-1.3.0-150000.6.66.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22365.html * https://bugzilla.suse.com/show_bug.cgi?id=1217000 * https://bugzilla.suse.com/show_bug.cgi?id=1218475 . Patch released for pam to address local denial of servicevulnerability, enhancing secure authentication on impacted openSUSE versions.. pam Security Update, Local Denial Service, SUSE Advisory. . LinuxSecurity.com Team
Jan 18, 2024
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!