ELSA-2025-15099

ELSA-2025-15099 - pam security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-09-03

Description

[1.5.1-26.0.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]

[1.5.1-26]
- pam_namespace: fix potential privilege escalation.
Resolves: CVE-2025-6020 and RHEL-96729

Related CVEs

CVE-2025-6020

CVE-2025-8941

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	pam-1.5.1-26.0.1.el9_6.src.rpm	3fb7b46be22cf13596f81ea1cf015e71fc52f65212bd2fce39aba45a7c4002c1	-	ol9_aarch64_appstream
	pam-1.5.1-26.0.1.el9_6.src.rpm	3fb7b46be22cf13596f81ea1cf015e71fc52f65212bd2fce39aba45a7c4002c1	-	ol9_aarch64_baseos_latest
	pam-1.5.1-26.0.1.el9_6.src.rpm	3fb7b46be22cf13596f81ea1cf015e71fc52f65212bd2fce39aba45a7c4002c1	-	ol9_aarch64_u6_baseos_patch
	pam-1.5.1-26.0.1.el9_6.aarch64.rpm	d7f53f8d41ab4c7b3b794a777fddf3958df9ff17e9148705b1aec31ab757c693	-	ol9_aarch64_baseos_latest
	pam-1.5.1-26.0.1.el9_6.aarch64.rpm	d7f53f8d41ab4c7b3b794a777fddf3958df9ff17e9148705b1aec31ab757c693	-	ol9_aarch64_u6_baseos_patch
	pam-devel-1.5.1-26.0.1.el9_6.aarch64.rpm	387270cac536ab79d095ee73dc82059fdad66d5b49c5d2de17b7720d5e8bbc31	-	ol9_aarch64_appstream
	pam-docs-1.5.1-26.0.1.el9_6.aarch64.rpm	7cf6a037b3fa901e88cc219dbc3668ed876d23cb4ac59c157e3093ab44a0f41f	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	pam-1.5.1-26.0.1.el9_6.src.rpm	3fb7b46be22cf13596f81ea1cf015e71fc52f65212bd2fce39aba45a7c4002c1	-	ol9_x86_64_appstream
	pam-1.5.1-26.0.1.el9_6.src.rpm	3fb7b46be22cf13596f81ea1cf015e71fc52f65212bd2fce39aba45a7c4002c1	-	ol9_x86_64_baseos_latest
	pam-1.5.1-26.0.1.el9_6.src.rpm	3fb7b46be22cf13596f81ea1cf015e71fc52f65212bd2fce39aba45a7c4002c1	-	ol9_x86_64_u6_baseos_patch
	pam-1.5.1-26.0.1.el9_6.i686.rpm	147bbf7240275f043611d2e489dd11c90ffffdd9fafa7c2381c9669f10cd64ec	-	ol9_x86_64_baseos_latest
	pam-1.5.1-26.0.1.el9_6.i686.rpm	147bbf7240275f043611d2e489dd11c90ffffdd9fafa7c2381c9669f10cd64ec	-	ol9_x86_64_u6_baseos_patch
	pam-1.5.1-26.0.1.el9_6.x86_64.rpm	2ae4f5a9793129d8f30e4a3f738f510c259b59b2ee3d057f0c1ac5b697a61041	-	ol9_x86_64_baseos_latest
	pam-1.5.1-26.0.1.el9_6.x86_64.rpm	2ae4f5a9793129d8f30e4a3f738f510c259b59b2ee3d057f0c1ac5b697a61041	-	ol9_x86_64_u6_baseos_patch
	pam-devel-1.5.1-26.0.1.el9_6.i686.rpm	7580600dbf626c098efa25d517d8913e0ffe8e92aea1b609c59eb317d9830054	-	ol9_x86_64_appstream
	pam-devel-1.5.1-26.0.1.el9_6.x86_64.rpm	4faf6deeae385d22123368e93546118d2815568cedf93c4be8175fdd6f98569a	-	ol9_x86_64_appstream
	pam-docs-1.5.1-26.0.1.el9_6.x86_64.rpm	763967b5df1a3ca702f3616e93ea796cf14c21716aa14fdbfa17edacddcacc4d	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team