ELSA-2025-14557

ELSA-2025-14557 - pam security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-08-26

Description

[1.3.1-38.0.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36272695]

[1.3.1-38]
- pam_namespace: fix potential privilege escalation.
Resolves: CVE-2025-6020 and RHEL-96724

Related CVEs

CVE-2025-6020

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	pam-1.3.1-38.0.1.el8_10.src.rpm	41c8da51a2426b1119709cc78c070dcba416a01f3d13fa3eb0684a628f4942ad	-	ol8_aarch64_baseos_latest
	pam-1.3.1-38.0.1.el8_10.src.rpm	41c8da51a2426b1119709cc78c070dcba416a01f3d13fa3eb0684a628f4942ad	-	ol8_aarch64_u10_baseos_patch
	pam-1.3.1-38.0.1.el8_10.aarch64.rpm	35489d1a35d2de0768b1c697428a3d39c42decd9b400a77c00f887ed972899a5	-	ol8_aarch64_baseos_latest
	pam-1.3.1-38.0.1.el8_10.aarch64.rpm	35489d1a35d2de0768b1c697428a3d39c42decd9b400a77c00f887ed972899a5	-	ol8_aarch64_u10_baseos_patch
	pam-devel-1.3.1-38.0.1.el8_10.aarch64.rpm	5f7f94b13985d6c2f6fe1444261490465f42f9a9960c25154461a51bd6d90850	-	ol8_aarch64_baseos_latest
	pam-devel-1.3.1-38.0.1.el8_10.aarch64.rpm	5f7f94b13985d6c2f6fe1444261490465f42f9a9960c25154461a51bd6d90850	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	pam-1.3.1-38.0.1.el8_10.src.rpm	41c8da51a2426b1119709cc78c070dcba416a01f3d13fa3eb0684a628f4942ad	-	ol8_x86_64_baseos_latest
	pam-1.3.1-38.0.1.el8_10.src.rpm	41c8da51a2426b1119709cc78c070dcba416a01f3d13fa3eb0684a628f4942ad	-	ol8_x86_64_u10_baseos_patch
	pam-1.3.1-38.0.1.el8_10.i686.rpm	175a0afc7a960fa61eff4afc6756cfa8f1a17e1148cf1093b7828515784902aa	-	ol8_x86_64_baseos_latest
	pam-1.3.1-38.0.1.el8_10.i686.rpm	175a0afc7a960fa61eff4afc6756cfa8f1a17e1148cf1093b7828515784902aa	-	ol8_x86_64_u10_baseos_patch
	pam-1.3.1-38.0.1.el8_10.x86_64.rpm	20ed14e0678dbf6ee2573f0b58f3db5b3d2d05420e2e342dbb435481645afe07	-	ol8_x86_64_baseos_latest
	pam-1.3.1-38.0.1.el8_10.x86_64.rpm	20ed14e0678dbf6ee2573f0b58f3db5b3d2d05420e2e342dbb435481645afe07	-	ol8_x86_64_u10_baseos_patch
	pam-devel-1.3.1-38.0.1.el8_10.i686.rpm	8a67d129513f29fa93258f52afe47de60ea39ca2b59b4e8771f36b2f864a1ff6	-	ol8_x86_64_baseos_latest
	pam-devel-1.3.1-38.0.1.el8_10.i686.rpm	8a67d129513f29fa93258f52afe47de60ea39ca2b59b4e8771f36b2f864a1ff6	-	ol8_x86_64_u10_baseos_patch
	pam-devel-1.3.1-38.0.1.el8_10.x86_64.rpm	83b16af17bc9714b00c04201745670b8d610563d2b4dee67c7bc9be5cab68aa8	-	ol8_x86_64_baseos_latest
	pam-devel-1.3.1-38.0.1.el8_10.x86_64.rpm	83b16af17bc9714b00c04201745670b8d610563d2b4dee67c7bc9be5cab68aa8	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team