Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2025:9526

Опубликовано: 04 окт. 2025
Источник: rocky
Оценка: Important

Описание

Important: pam security update

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.

Security Fix(es):

  • linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
pami68625.el9_6pam-1.5.1-25.el9_6.i686.rpm
pamx86_6425.el9_6pam-1.5.1-25.el9_6.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.8
ubuntu
6 месяцев назад

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

CVSS3: 7.8
redhat
6 месяцев назад

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

CVSS3: 7.8
nvd
6 месяцев назад

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

CVSS3: 7.8
msrc
5 месяцев назад

Linux-pam: linux-pam directory traversal

CVSS3: 7.8
debian
6 месяцев назад

A flaw was found in linux-pam. The module pam_namespace may use access ...