Explore top 10 tips to secure your open-source projects now. Read More
×* bsc#1244509 Cross-References: * CVE-2025-6020 . # Security update for pam Announcement ID: SUSE-SU-2025:20441-1 Release Date: 2025-06-19T08:45:49Z Rating: important References: * bsc#1244509 Cross-References: * CVE-2025-6020 CVSS scores: * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path. And keep the bind-mount protection from protect_mount() as a defense in depthmeasure. (bsc#1244509) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-151=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * pam-debugsource-1.6.1-slfo.1.1_3.1 * pam-1.6.1-slfo.1.1_3.1 * pam-debuginfo-1.6.1-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . SUSE has released an update that rectifies the pam flaw identified as CVE-2025-6020, incorporating critical patches within this version.. SUSE Linux Micro,pam security update,CVE-2025-6020,patch management. . Severity: Important. LinuxSecurity.com Team
* bsc#1244509 Cross-References: * CVE-2025-6020 . # Security update for pam Announcement ID: SUSE-SU-2025:20427-1 Release Date: 2025-06-19T08:55:37Z Rating: important References: * bsc#1244509 Cross-References: * CVE-2025-6020 CVSS scores: * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path. And keep the bind-mount protection from protect_mount() as a defense in depthmeasure. (bsc#1244509) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-361=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * pam-1.6.0-5.1 * pam-debuginfo-1.6.0-5.1 * pam-debugsource-1.6.0-5.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . Crucial patch for pam addressing CVE-2025-6020 vulnerabilities to enhance SUSE security and safeguard systems from threats. SUSE Linux Micro, pam security update, CVE-2025-6020. . Severity: Critical. LinuxSecurity.com Team
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-9526 http://linux.oracle.com/errata/ELSA-2025-9526.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: pam-1.5.1-25.0.1.el9_6.i686.rpm pam-1.5.1-25.0.1.el9_6.x86_64.rpm pam-devel-1.5.1-25.0.1.el9_6.i686.rpm pam-devel-1.5.1-25.0.1.el9_6.x86_64.rpm pam-docs-1.5.1-25.0.1.el9_6.x86_64.rpm aarch64: pam-1.5.1-25.0.1.el9_6.aarch64.rpm pam-devel-1.5.1-25.0.1.el9_6.aarch64.rpm pam-docs-1.5.1-25.0.1.el9_6.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/pam-1.5.1-25.0.1.el9_6.src.rpm Related CVEs: CVE-2025-6020 Description of changes: [1.5.1-25.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.5.1-25] - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96729 _______________________________________________ El-errata mailing list
pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-432b207745 2025-06-21 01:25:36.028815+00:00 -------------------------------------------------------------------------------- Name : pam Product : Fedora 42 Version : 1.7.0 Release : 6.fc42 URL : https://github.com/linux-pam/linux-pam Summary : An extensible library which provides authentication for applications Description : PAM (Pluggable Authentication Modules) is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication. -------------------------------------------------------------------------------- Update Information: pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 18 2025 Iker Pedrosa - 1.7.0-6 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-432b207745' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
An update that solves two vulnerabilities can now be installed.. # Security update for pam Announcement ID: SUSE-SU-2025:02013-1 Release Date: 2025-06-18T18:06:12Z Rating: important References: * bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 * CVE-2025-6020 CVSS scores: * CVE-2025-6018 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6018 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * Development Tools Module 15-SP6 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSELinux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path (bsc#1244509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2013=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2013=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2013=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-2013=1 * Development Tools Module 15-SP7 zypper in -tpatch SUSE-SLE-Module-Development-Tools-15-SP7-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2013=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2013=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2013=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2013=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-2013=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-2013=1 * SUSE Linux EnterpriseMicro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (noarch) * pam-doc-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (noarch) * pam-doc-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 *pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) *pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6018.html * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . An essential patch for Fedora resolves significant vulnerabilities in sudo; prompt action advised.. SUSE Security, openSUSE Security, PAM Updates, Important Security Alerts. . Severity: Important. LinuxSecurity.com Team
* bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 . # Security update for pam Announcement ID: SUSE-SU-2025:02013-1 Release Date: 2025-06-18T18:06:12Z Rating: important References: * bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 * CVE-2025-6020 CVSS scores: * CVE-2025-6018 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6018 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * Development Tools Module 15-SP6 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE LinuxEnterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path (bsc#1244509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2013=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2013=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2013=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2013=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-2013=1 * Development Tools Module 15-SP7 zypper in -t patchSUSE-SLE-Module-Development-Tools-15-SP7-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2013=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2013=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2013=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2013=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2013=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2013=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2013=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-2013=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-2013=1 * SUSE Linux Enterprise Micro5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2013=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * openSUSE Leap 15.6 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP6 (noarch) * pam-doc-1.3.0-150000.6.83.1 *Basesystem Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (noarch) * pam-doc-1.3.0-150000.6.83.1 * Basesystem Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP6 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * Development Tools Module 15-SP7 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 *pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 *pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) *pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Proxy 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Manager Server 4.3 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Manager Server4.3 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-extra-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-extra-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * pam-devel-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (noarch) * pam-doc-1.3.0-150000.6.83.1 * SUSE Enterprise Storage 7.1 (x86_64) * pam-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-debuginfo-1.3.0-150000.6.83.1 * pam-devel-32bit-1.3.0-150000.6.83.1 * pam-extra-32bit-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * pam-debuginfo-1.3.0-150000.6.83.1 * pam-1.3.0-150000.6.83.1 * pam-debugsource-1.3.0-150000.6.83.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6018.html * https://www.suse.com/security/cve/CVE-2025-6020.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . The latest pam revisions tackle vital security concerns aimed at bolstering the integrity of the system and ensuring a secure user experience.. SUSE Security, pam Update, Important Pam Security, SUSE Patch, Linux Security Update. . Severity: Critical. LinuxSecurity.com Team
PAM could be made to run programs as an administrator.. ========================================================================== Ubuntu Security Notice USN-7580-1 June 18, 2025 pam vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.04 - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: PAM could be made to run programs as an administrator. Software Description: - pam: Pluggable Authentication Modules Details: Olivier BAL-PETRE discovered that the PAM pam_namespace module incorrectly handled user-controlled paths. In environments where pam_namespace is used, a local attacker could possibly use this issue to escalate their privileges to root. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.04 libpam-modules 1.5.3-7ubuntu4.3 Ubuntu 24.10 libpam-modules 1.5.3-7ubuntu2.3 Ubuntu 24.04 LTS libpam-modules 1.5.3-5ubuntu5.4 Ubuntu 22.04 LTS libpam-modules 1.4.0-11ubuntu2.6 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7580-1 CVE-2025-6020 Package Information: https://launchpad.net/ubuntu/+source/pam/1.5.3-7ubuntu4.3 https://launchpad.net/ubuntu/+source/pam/1.5.3-7ubuntu2.3 https://launchpad.net/ubuntu/+source/pam/1.5.3-5ubuntu5.4 https://launchpad.net/ubuntu/+source/pam/1.4.0-11ubuntu2.6 . A vulnerability in PAM could enable local adversaries to gain elevated privileges, potentially compromising system integrity. Please refer to the updated patch notes for mitigation steps.. PAM Security, Ubuntu Update, Privilege Escalation Fix. . Severity: Important. LinuxSecurity.com Team
* bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 . # Security update for pam Announcement ID: SUSE-SU-2025:02001-1 Release Date: 2025-06-18T11:21:30Z Rating: important References: * bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018 CVSS scores: * CVE-2025-6018 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6018 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for pam fixes the following issues: * CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). * pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors instead of absolute path (bsc#1244509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2001=1 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2025-2001=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * pam-32bit-1.1.8-24.71.1 * pam-debugsource-1.1.8-24.71.1 * pam-devel-1.1.8-24.71.1 * pam-extra-1.1.8-24.71.1 * pam-1.1.8-24.71.1 * pam-extra-debuginfo-1.1.8-24.71.1 * pam-debuginfo-1.1.8-24.71.1 * pam-extra-32bit-1.1.8-24.71.1 *pam-extra-debuginfo-32bit-1.1.8-24.71.1 * pam-debuginfo-32bit-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * pam-doc-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pam-debugsource-1.1.8-24.71.1 * pam-devel-1.1.8-24.71.1 * pam-extra-1.1.8-24.71.1 * pam-1.1.8-24.71.1 * pam-debuginfo-1.1.8-24.71.1 * pam-extra-debuginfo-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * pam-doc-1.1.8-24.71.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * pam-debuginfo-32bit-1.1.8-24.71.1 * pam-extra-32bit-1.1.8-24.71.1 * pam-extra-debuginfo-32bit-1.1.8-24.71.1 * pam-32bit-1.1.8-24.71.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6018.html * https://bugzilla.suse.com/show_bug.cgi?id=1243226 * https://bugzilla.suse.com/show_bug.cgi?id=1244509 . Important security patch for SUSE enhances protection against threats in user configuration files and directory path management.. SUSE Security Update,pam vulnerabilities,pam security.. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.