SUSE-SU-2025:02970-2

Опубликовано: 17 окт. 2025

Источник: suse-cvrf

Описание

Security update for pam

This update for pam fixes the following issues:

Improve previous CVE-2024-10041 fix which led to CPU performance issues (bsc#1232234)

Список пакетов

Container bci/bci-init:15.6

pam-1.3.0-150000.6.86.1

Container bci/bci-init:latest

pam-1.3.0-150000.6.86.1

Container bci/bci-sle15-kernel-module-devel:15.6

pam-1.3.0-150000.6.86.1

Container bci/bci-sle15-kernel-module-devel:latest

pam-1.3.0-150000.6.86.1

Container bci/kiwi:latest

pam-1.3.0-150000.6.86.1

Container bci/node:20

pam-1.3.0-150000.6.86.1

Container bci/nodejs:latest

pam-1.3.0-150000.6.86.1

Container bci/openjdk-devel:17

pam-1.3.0-150000.6.86.1

Container bci/openjdk-devel:latest

pam-1.3.0-150000.6.86.1

Container bci/php-apache:latest

pam-1.3.0-150000.6.86.1

Container bci/php-fpm:latest

pam-1.3.0-150000.6.86.1

Container bci/ruby:2

pam-1.3.0-150000.6.86.1

Container bci/ruby:latest

pam-1.3.0-150000.6.86.1

Container bci/spack:0.23

pam-1.3.0-150000.6.86.1

Container bci/spack:latest

pam-1.3.0-150000.6.86.1

Container containers/lmcache-vllm-openai:0

pam-1.3.0-150000.6.86.1

Container containers/open-webui:0

pam-1.3.0-150000.6.86.1

Container containers/vllm-openai:0

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-core:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-db:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-exporter:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-jobservice:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-nginx:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-portal:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-registry:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-registryctl:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-trivy-adapter:latest

pam-1.3.0-150000.6.86.1

Container private-registry/harbor-valkey:latest

pam-1.3.0-150000.6.86.1

Container suse/389-ds:latest

pam-1.3.0-150000.6.86.1

Container suse/bind:latest

pam-1.3.0-150000.6.86.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

pam-1.3.0-150000.6.86.1

Container suse/kea:latest

pam-1.3.0-150000.6.86.1

Container suse/kiosk/firefox-esr:latest

pam-1.3.0-150000.6.86.1

Container suse/kiosk/pulseaudio:latest

pam-1.3.0-150000.6.86.1

Container suse/kiosk/xorg-client:latest

pam-1.3.0-150000.6.86.1

Container suse/kiosk/xorg:latest

pam-1.3.0-150000.6.86.1

Container suse/manager/4.3/proxy-httpd:latest

pam-1.3.0-150000.6.86.1

Container suse/manager/4.3/proxy-salt-broker:latest

pam-1.3.0-150000.6.86.1

Container suse/manager/4.3/proxy-squid:latest

pam-1.3.0-150000.6.86.1

Container suse/manager/4.3/proxy-ssh:latest

pam-1.3.0-150000.6.86.1

Container suse/mariadb-client:10.11

pam-1.3.0-150000.6.86.1

Container suse/mariadb-client:latest

pam-1.3.0-150000.6.86.1

Container suse/mariadb:10.11

pam-1.3.0-150000.6.86.1

Container suse/mariadb:latest

pam-1.3.0-150000.6.86.1

Container suse/nginx:latest

pam-1.3.0-150000.6.86.1

Container suse/pcp:latest

pam-1.3.0-150000.6.86.1

Container suse/postgres:16

pam-1.3.0-150000.6.86.1

Container suse/postgres:latest

pam-1.3.0-150000.6.86.1

Container suse/registry:latest

pam-1.3.0-150000.6.86.1

Container suse/rmt-server:latest

pam-1.3.0-150000.6.86.1

Container suse/samba-client:latest

pam-1.3.0-150000.6.86.1

Container suse/samba-server:latest

pam-1.3.0-150000.6.86.1

Container suse/samba-toolbox:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro-rancher/5.2:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro-rancher/5.3:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro-rancher/5.4:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/5.1/toolbox:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/5.2/toolbox:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/5.3/toolbox:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/5.4/toolbox:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/5.5/toolbox:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/5.5:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/base-5.5:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/kvm-5.5:latest

pam-1.3.0-150000.6.86.1

Container suse/sle-micro/rt-5.5:latest

pam-1.3.0-150000.6.86.1

Container suse/sle15:15.6

pam-1.3.0-150000.6.86.1

Container suse/sle15:latest

pam-1.3.0-150000.6.86.1

Container suse/stunnel:latest

pam-1.3.0-150000.6.86.1

Container suse/valkey:latest

pam-1.3.0-150000.6.86.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

pam-1.3.0-150000.6.86.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAP

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAP-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAP-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAP-Hardened

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAP-Hardened-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAPCAL

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAPCAL-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP4-SAPCAL-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-Azure-3P

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-Micro-5-5

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-Micro-5-5-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAP-Azure-3P

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAP-Hardened-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAP-Hardened-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAPCAL-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP5-SAPCAL-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP6

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-Azure-3P

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-Azure-Basic

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-Azure-Standard

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-CHOST-BYOS

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-CHOST-BYOS-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-CHOST-BYOS-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-CHOST-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-CHOST-BYOS-GDC

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-EC2-ECS-HVM

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-HPC

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-HPC-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Azure-3P

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Hardened

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Hardened-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAP-Hardened-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAPCAL

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAPCAL-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAPCAL-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP6-SAPCAL-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-Azure-3P

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-Azure-Basic

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-Azure-Standard

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-BYOS-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-BYOS-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-CHOST-BYOS-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-CHOST-BYOS-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-CHOST-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-CHOST-BYOS-GDC

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-EC2-ECS-HVM

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-HPC-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-HPC-BYOS-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-HPC-BYOS-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-HPC-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-Hardened-BYOS-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-Hardened-BYOS-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-Hardened-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Azure-3P

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-BYOS-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-BYOS-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Hardened-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAP-Hardened-GCE

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAPCAL-Azure

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAPCAL-EC2

pam-1.3.0-150000.6.86.1

Image SLES15-SP7-SAPCAL-GCE

pam-1.3.0-150000.6.86.1

Image ai_15_6

pam-1.3.0-150000.6.86.1

SUSE Enterprise Storage 7.1

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise Server 15 SP3-LTSS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise Server 15 SP4-LTSS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise Server 15 SP5-LTSS

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-devel-32bit-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Manager Proxy LTS 4.3

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

SUSE Manager Server LTS 4.3

pam-1.3.0-150000.6.86.1

pam-32bit-1.3.0-150000.6.86.1

pam-devel-1.3.0-150000.6.86.1

pam-doc-1.3.0-150000.6.86.1

pam-extra-1.3.0-150000.6.86.1

pam-extra-32bit-1.3.0-150000.6.86.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202502970-2/
Link for SUSE-SU-2025:02970-2
https://lists.suse.com/pipermail/sle-security-updates/2025-October/022928.html
E-Mail link for SUSE-SU-2025:02970-2
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1232234
SUSE Bug 1232234
https://bugzilla.suse.com/1246221
SUSE Bug 1246221
https://www.suse.com/security/cve/CVE-2024-10041/
SUSE CVE CVE-2024-10041 page

Описание

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.

Затронутые продукты

Container bci/bci-init:15.6:pam-1.3.0-150000.6.86.1

Container bci/bci-init:latest:pam-1.3.0-150000.6.86.1

Container bci/bci-sle15-kernel-module-devel:15.6:pam-1.3.0-150000.6.86.1

Container bci/bci-sle15-kernel-module-devel:latest:pam-1.3.0-150000.6.86.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-10041.html
CVE-2024-10041
https://bugzilla.suse.com/1232234
SUSE Bug 1232234