ELSA-2025-10027

ELSA-2025-10027 - pam security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-07-01

Description

[1.3.1-37.0.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36272695]

[1.3.1-37]
- pam_namespace: fix potential privilege escalation.
Resolves: CVE-2025-6020 and RHEL-96724

Related CVEs

CVE-2025-6020

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	pam-1.3.1-37.0.1.el8_10.src.rpm	962ba3a0cdc9b4b3ccdf4950a38939a2073193bef87a931f9eb29e919ccd83ed	-	ol8_aarch64_baseos_latest
	pam-1.3.1-37.0.1.el8_10.src.rpm	962ba3a0cdc9b4b3ccdf4950a38939a2073193bef87a931f9eb29e919ccd83ed	-	ol8_aarch64_u10_baseos_patch
	pam-1.3.1-37.0.1.el8_10.aarch64.rpm	25f14f678ed861f59bd508e10328fcd49a0028a7171c5f24391880f617ec1c74	-	ol8_aarch64_baseos_latest
	pam-1.3.1-37.0.1.el8_10.aarch64.rpm	25f14f678ed861f59bd508e10328fcd49a0028a7171c5f24391880f617ec1c74	-	ol8_aarch64_u10_baseos_patch
	pam-devel-1.3.1-37.0.1.el8_10.aarch64.rpm	59e70ef42c266e57b1d5bc7f7f3f50c4076cd5558a906fb50786521048430f12	-	ol8_aarch64_baseos_latest
	pam-devel-1.3.1-37.0.1.el8_10.aarch64.rpm	59e70ef42c266e57b1d5bc7f7f3f50c4076cd5558a906fb50786521048430f12	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	pam-1.3.1-37.0.1.el8_10.src.rpm	962ba3a0cdc9b4b3ccdf4950a38939a2073193bef87a931f9eb29e919ccd83ed	-	ol8_x86_64_baseos_latest
	pam-1.3.1-37.0.1.el8_10.src.rpm	962ba3a0cdc9b4b3ccdf4950a38939a2073193bef87a931f9eb29e919ccd83ed	-	ol8_x86_64_u10_baseos_patch
	pam-1.3.1-37.0.1.el8_10.i686.rpm	d2e0db0d70826dc9a805fbffc30c434dbb16b7746883f8f36ffd83f7c08dd9e6	-	ol8_x86_64_baseos_latest
	pam-1.3.1-37.0.1.el8_10.i686.rpm	d2e0db0d70826dc9a805fbffc30c434dbb16b7746883f8f36ffd83f7c08dd9e6	-	ol8_x86_64_u10_baseos_patch
	pam-1.3.1-37.0.1.el8_10.x86_64.rpm	3cecc4f05773e8cd674bc21ec30fd1d5d5c1c8b65ddc86cb65199a2726611658	-	ol8_x86_64_baseos_latest
	pam-1.3.1-37.0.1.el8_10.x86_64.rpm	3cecc4f05773e8cd674bc21ec30fd1d5d5c1c8b65ddc86cb65199a2726611658	-	ol8_x86_64_u10_baseos_patch
	pam-devel-1.3.1-37.0.1.el8_10.i686.rpm	b35bba3ab26572cc9960261cc4d7224807371d09490b9955e135f25d41af7c09	-	ol8_x86_64_baseos_latest
	pam-devel-1.3.1-37.0.1.el8_10.i686.rpm	b35bba3ab26572cc9960261cc4d7224807371d09490b9955e135f25d41af7c09	-	ol8_x86_64_u10_baseos_patch
	pam-devel-1.3.1-37.0.1.el8_10.x86_64.rpm	5b4def0c096bdadfc8703a77b3f5778a0be347532183528321435a413b1adf19	-	ol8_x86_64_baseos_latest
	pam-devel-1.3.1-37.0.1.el8_10.x86_64.rpm	5b4def0c096bdadfc8703a77b3f5778a0be347532183528321435a413b1adf19	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team