Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02080-1

Опубликовано: 24 июн. 2025
Источник: suse-cvrf

Описание

Security update for pam-config

This update for pam-config fixes the following issues:

  • CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack (bsc#1243226).

Список пакетов

Container bci/bci-init:15.6
pam-config-1.1-150600.16.8.1
Container bci/bci-init:latest
pam-config-1.1-150600.16.8.1
Container bci/kiwi:latest
pam-config-1.1-150600.16.8.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
pam-config-1.1-150600.16.8.1
Container suse/kiosk/pulseaudio:latest
pam-config-1.1-150600.16.8.1
Container suse/kiosk/xorg:latest
pam-config-1.1-150600.16.8.1
Container suse/manager/5.0/x86_64/proxy-httpd:latest
pam-config-1.1-150600.16.8.1
Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest
pam-config-1.1-150600.16.8.1
Container suse/manager/5.0/x86_64/server:latest
pam-config-1.1-150600.16.8.1
Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latest
pam-config-1.1-150600.16.8.1
Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest
pam-config-1.1-150600.16.8.1
Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:latest
pam-config-1.1-150600.16.8.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
pam-config-1.1-150600.16.8.1
Container suse/pcp:latest
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:550-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:550.163.01-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:570-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:570.195.03-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:570.211.01-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:575-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:575.57.08-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:580-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:580.105.08-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:580.126.09-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:580.126.16-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:580.126.20-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:580.82.07-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:580.95.05-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:590-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:590.48.01-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:595-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:595.45.04-sles15.7
pam-config-1.1-150600.16.8.1
Container third-party/nvidia/driver:595.58.03-sles15.7
pam-config-1.1-150600.16.8.1
Image SLES15-SP6
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-Azure-3P
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-Azure-Basic
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-Azure-Standard
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-CHOST-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-CHOST-BYOS-Aliyun
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-CHOST-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-CHOST-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-CHOST-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-CHOST-BYOS-GDC
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-EC2-ECS-HVM
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-HPC-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-Hardened-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-Hardened-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-Hardened-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-Hardened-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Azure-3P
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Azure-LI-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened-BYOS
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAP-Hardened-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAPCAL
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAPCAL-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAPCAL-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP6-SAPCAL-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-Azure-3P
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-Azure-Basic
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-Azure-Standard
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-CHOST-BYOS-Aliyun
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-CHOST-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-CHOST-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-CHOST-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-CHOST-BYOS-GDC
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-EC2-ECS-HVM
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-GCE-3P
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-HPC-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-HPC-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-HPC-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-HPC-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-Hardened-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-Hardened-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-Hardened-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Azure-3P
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-GCE-3P
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Hardened-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAP-Hardened-GCE
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAPCAL-Azure
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAPCAL-EC2
pam-config-1.1-150600.16.8.1
Image SLES15-SP7-SAPCAL-GCE
pam-config-1.1-150600.16.8.1
Image server-hub-xmlrpc-api-image
pam-config-1.1-150600.16.8.1
Image server-image
pam-config-1.1-150600.16.8.1
Image server-image-sles15sp7
pam-config-1.1-150600.16.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
pam-config-1.1-150600.16.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
pam-config-1.1-150600.16.8.1
openSUSE Leap 15.6
pam-config-1.1-150600.16.8.1

Ссылки

Описание

A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.

Затронутые продукты
Container bci/bci-init:15.6:pam-config-1.1-150600.16.8.1
Container bci/bci-init:latest:pam-config-1.1-150600.16.8.1
Container bci/kiwi:latest:pam-config-1.1-150600.16.8.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:pam-config-1.1-150600.16.8.1
Ссылки
Уязвимость SUSE-SU-2025:02080-1