Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 72 articles for you...
100

SUSE: 2025:20441-1 critical: pam CVE-2025-6020 security update

* bsc#1244509 Cross-References: * CVE-2025-6020 . # Security update for pam Announcement ID: SUSE-SU-2025:20441-1 Release Date: 2025-06-19T08:45:49Z Rating: important References: * bsc#1244509 Cross-References: * CVE-2025-6020 CVSS scores: * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path. And keep the bind-mount protection from protect_mount() as a defense in depthmeasure. (bsc#1244509) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-151=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * pam-debugsource-1.6.1-slfo.1.1_3.1 * pam-1.6.1-slfo.1.1_3.1 * pam-debuginfo-1.6.1-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . SUSE has released an update that rectifies the pam flaw identified as CVE-2025-6020, incorporating critical patches within this version.. SUSE Linux Micro,pam security update,CVE-2025-6020,patch management. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 30, 2025 Important SuSE
100

SUSE: 2025:20427-1 critical: pam vulnerability CVE-2025-6020 fix

* bsc#1244509 Cross-References: * CVE-2025-6020 . # Security update for pam Announcement ID: SUSE-SU-2025:20427-1 Release Date: 2025-06-19T08:55:37Z Rating: important References: * bsc#1244509 Cross-References: * CVE-2025-6020 CVSS scores: * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path. And keep the bind-mount protection from protect_mount() as a defense in depthmeasure. (bsc#1244509) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-361=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * pam-1.6.0-5.1 * pam-debuginfo-1.6.0-5.1 * pam-debugsource-1.6.0-5.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . Crucial patch for pam addressing CVE-2025-6020 vulnerabilities to enhance SUSE security and safeguard systems from threats. SUSE Linux Micro, pam security update, CVE-2025-6020. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 26, 2025 Critical SuSE
217

Oracle Linux 9 ELSA-2025-9526 Important: pam Privilege Escalation Fix

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9526 http://linux.oracle.com/errata/ELSA-2025-9526.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: pam-1.5.1-25.0.1.el9_6.i686.rpm pam-1.5.1-25.0.1.el9_6.x86_64.rpm pam-devel-1.5.1-25.0.1.el9_6.i686.rpm pam-devel-1.5.1-25.0.1.el9_6.x86_64.rpm pam-docs-1.5.1-25.0.1.el9_6.x86_64.rpm aarch64: pam-1.5.1-25.0.1.el9_6.aarch64.rpm pam-devel-1.5.1-25.0.1.el9_6.aarch64.rpm pam-docs-1.5.1-25.0.1.el9_6.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/pam-1.5.1-25.0.1.el9_6.src.rpm Related CVEs: CVE-2025-6020 Description of changes: [1.5.1-25.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.5.1-25] - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96729 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Amazon Linux 2023 unveils critical improvements to the OpenSSH module, rectifying vulnerabilities and strengthening remote access protocols.. Oracle Linux,pam security,access control updates,security patch,linux advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 25, 2025 Important Oracle
89

Fedora 42: FEDORA-2025-432b207745 Critical: pam privilege escalation

pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-432b207745 2025-06-21 01:25:36.028815+00:00 -------------------------------------------------------------------------------- Name : pam Product : Fedora 42 Version : 1.7.0 Release : 6.fc42 URL : https://github.com/linux-pam/linux-pam Summary : An extensible library which provides authentication for applications Description : PAM (Pluggable Authentication Modules) is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication. -------------------------------------------------------------------------------- Update Information: pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 18 2025 Iker Pedrosa - 1.7.0-6 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-432b207745' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Ubuntu Security Advisory: Important sudo patch resolves CVE-2025-6005, mitigating dangers of unauthorized access through elevated permissions.. pam namespace, security issues, privilege escalation, Fedora fixes, pam updates. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 21, 2025 Critical Fedora
202

openSUSE: 2025:02013-1 Critical Update for PAM Security Vulnerability

An update that solves two vulnerabilities can now be installed.. # Security update for pam Announcement ID: SUSE-SU-2025:02013-1 Release Date: 2025-06-18T18:06:12Z Rating: important References: * bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 * CVE-2025-6020 CVSS scores: * CVE-2025-6018 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6018 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * Development Tools Module 15-SP6 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSELinux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path (bsc#1244509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2013=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2013=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2013=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-2013=1 * Development Tools Module 15-SP7 zypper in -tpatch SUSE-SLE-Module-Development-Tools-15-SP7-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2013=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2013=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2013=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2013=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-2013=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-2013=1 * SUSE Linux EnterpriseMicro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (noarch) * pam-doc-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (noarch) * pam-doc-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 *pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) *pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6018.html * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . An essential patch for Fedora resolves significant vulnerabilities in sudo; prompt action advised.. SUSE Security, openSUSE Security, PAM Updates, Important Security Alerts. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 18, 2025 Important OpenSUSE
100

SUSE: 2025:02013-1 Critical: pam Privilege Escalation Vulnerability Alert

* bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 . # Security update for pam Announcement ID: SUSE-SU-2025:02013-1 Release Date: 2025-06-18T18:06:12Z Rating: important References: * bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 * CVE-2025-6020 CVSS scores: * CVE-2025-6018 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6018 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * Development Tools Module 15-SP6 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE LinuxEnterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path (bsc#1244509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2013=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2013=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2013=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-2013=1 * Development Tools Module 15-SP7 zypper in -t patchSUSE-SLE-Module-Development-Tools-15-SP7-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2013=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2013=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2013=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2013=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-2013=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-2013=1 * SUSE Linux Enterprise Micro5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (noarch) * pam-doc-1.3.0-150000.6.83.1 *Basesystem Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (noarch) * pam-doc-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 *pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) *pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6018.html * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . The latest pam revisions tackle vital security concerns aimed at bolstering the integrity of the system and ensuring a secure user experience.. SUSE Security, pam Update, Important Pam Security, SUSE Patch, Linux Security Update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 18, 2025 Critical SuSE
172

Ubuntu 25.04: 7580-1 important: PAM privilege escalation

PAM could be made to run programs as an administrator.. ========================================================================== Ubuntu Security Notice USN-7580-1 June 18, 2025 pam vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: PAM could be made to run programs as an administrator. Software Description: - pam: Pluggable Authentication Modules Details: Olivier BAL-PETRE discovered that the PAM pam_namespace module incorrectly handled user-controlled paths. In environments where pam_namespace is used, a local attacker could possibly use this issue to escalate their privileges to root. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 libpam-modules 1.5.3-7ubuntu4.3 Ubuntu 24.10 libpam-modules 1.5.3-7ubuntu2.3 Ubuntu 24.04 LTS libpam-modules 1.5.3-5ubuntu5.4 Ubuntu 22.04 LTS libpam-modules 1.4.0-11ubuntu2.6 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7580-1 CVE-2025-6020 Package Information: https://launchpad.net/ubuntu/+source/pam/1.5.3-7ubuntu4.3 https://launchpad.net/ubuntu/+source/pam/1.5.3-7ubuntu2.3 https://launchpad.net/ubuntu/+source/pam/1.5.3-5ubuntu5.4 https://launchpad.net/ubuntu/+source/pam/1.4.0-11ubuntu2.6 . A vulnerability in PAM could enable local adversaries to gain elevated privileges, potentially compromising system integrity. Please refer to the updated patch notes for mitigation steps.. PAM Security, Ubuntu Update, Privilege Escalation Fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 18, 2025 Important Ubuntu
100

SUSE: 2025:02001-1 important: pam environment security risk

* bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 . # Security update for pam Announcement ID: SUSE-SU-2025:02001-1 Release Date: 2025-06-18T11:21:30Z Rating: important References: * bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 CVSS scores: * CVE-2025-6018 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6018 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). * pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors instead of absolute path (bsc#1244509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2001=1 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2025-2001=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * pam-32bit-1.1.8-24.71.1 * pam-debugsource-1.1.8-24.71.1 * pam-devel-1.1.8-24.71.1 * pam-extra-1.1.8-24.71.1 * pam-1.1.8-24.71.1 * pam-extra-debuginfo-1.1.8-24.71.1 * pam-debuginfo-1.1.8-24.71.1 * pam-extra-32bit-1.1.8-24.71.1 *pam-extra-debuginfo-32bit-1.1.8-24.71.1 * pam-debuginfo-32bit-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * pam-doc-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pam-debugsource-1.1.8-24.71.1 * pam-devel-1.1.8-24.71.1 * pam-extra-1.1.8-24.71.1 * pam-1.1.8-24.71.1 * pam-debuginfo-1.1.8-24.71.1 * pam-extra-debuginfo-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * pam-doc-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * pam-debuginfo-32bit-1.1.8-24.71.1 * pam-extra-32bit-1.1.8-24.71.1 * pam-extra-debuginfo-32bit-1.1.8-24.71.1 * pam-32bit-1.1.8-24.71.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6018.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . Important security patch for SUSE enhances protection against threats in user configuration files and directory path management.. SUSE Security Update,pam vulnerabilities,pam security.. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 18, 2025 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200