Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02031-1

Опубликовано: 20 июн. 2025
Источник: suse-cvrf

Описание

Security update for pam_pkcs11

This update for pam_pkcs11 fixes the following issues:

  • CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

Список пакетов

Image SLES15-SP4-Hardened-BYOS
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-Hardened-BYOS-Azure
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-Hardened-BYOS-EC2
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-Hardened-BYOS-GCE
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-SAP-Hardened
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-SAP-Hardened-Azure
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-SAP-Hardened-BYOS
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-SAP-Hardened-GCE
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-Hardened-BYOS-Azure
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-Hardened-BYOS-EC2
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-Hardened-BYOS-GCE
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-SAP-Hardened-Azure
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP5-SAP-Hardened-GCE
pam_pkcs11-0.6.10-150100.3.11.1
SUSE Enterprise Storage 7.1
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise Micro 5.1
pam_pkcs11-0.6.10-150100.3.11.1
SUSE Linux Enterprise Micro 5.2
pam_pkcs11-0.6.10-150100.3.11.1
SUSE Linux Enterprise Micro 5.3
pam_pkcs11-0.6.10-150100.3.11.1
SUSE Linux Enterprise Micro 5.4
pam_pkcs11-0.6.10-150100.3.11.1
SUSE Linux Enterprise Micro 5.5
pam_pkcs11-0.6.10-150100.3.11.1
SUSE Linux Enterprise Server 15 SP3-LTSS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise Server 15 SP4-LTSS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise Server 15 SP5-LTSS
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Manager Proxy 4.3
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1
SUSE Manager Server 4.3
pam_pkcs11-0.6.10-150100.3.11.1
pam_pkcs11-32bit-0.6.10-150100.3.11.1

Ссылки

Описание

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.

Затронутые продукты
Image SLES15-SP4-Hardened-BYOS-Azure:pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-Hardened-BYOS-EC2:pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-Hardened-BYOS-GCE:pam_pkcs11-0.6.10-150100.3.11.1
Image SLES15-SP4-Hardened-BYOS:pam_pkcs11-0.6.10-150100.3.11.1
Ссылки