ELSA-2025-9526

ELSA-2025-9526 - pam security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-06-24

Description

[1.5.1-25.0.1]
- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]

[1.5.1-25]
- pam_namespace: fix potential privilege escalation.
Resolves: CVE-2025-6020 and RHEL-96729

Related CVEs

CVE-2025-6020

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	pam-1.5.1-25.0.1.el9_6.src.rpm	4b4a2667f5d5b45415374026801576d44dc720fe2083e946d79e97beddc5b3b6	-	ol9_aarch64_appstream
	pam-1.5.1-25.0.1.el9_6.src.rpm	4b4a2667f5d5b45415374026801576d44dc720fe2083e946d79e97beddc5b3b6	-	ol9_aarch64_baseos_latest
	pam-1.5.1-25.0.1.el9_6.src.rpm	4b4a2667f5d5b45415374026801576d44dc720fe2083e946d79e97beddc5b3b6	-	ol9_aarch64_u6_baseos_patch
	pam-1.5.1-25.0.1.el9_6.aarch64.rpm	184128ba8fba77ab7f08e7fba376214e44f3a48aba2f1082d7affc18fcc2a170	-	ol9_aarch64_baseos_latest
	pam-1.5.1-25.0.1.el9_6.aarch64.rpm	184128ba8fba77ab7f08e7fba376214e44f3a48aba2f1082d7affc18fcc2a170	-	ol9_aarch64_u6_baseos_patch
	pam-devel-1.5.1-25.0.1.el9_6.aarch64.rpm	809745e56337c0ab586f81b19af571b45da5925a99f4cda68ea2999cfbea1a3a	-	ol9_aarch64_appstream
	pam-docs-1.5.1-25.0.1.el9_6.aarch64.rpm	a5636b4591fe31eb14582789478d1760b378a2a27c5f2214c1acb1fc08d3fc28	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	pam-1.5.1-25.0.1.el9_6.src.rpm	4b4a2667f5d5b45415374026801576d44dc720fe2083e946d79e97beddc5b3b6	-	ol9_x86_64_appstream
	pam-1.5.1-25.0.1.el9_6.src.rpm	4b4a2667f5d5b45415374026801576d44dc720fe2083e946d79e97beddc5b3b6	-	ol9_x86_64_baseos_latest
	pam-1.5.1-25.0.1.el9_6.src.rpm	4b4a2667f5d5b45415374026801576d44dc720fe2083e946d79e97beddc5b3b6	-	ol9_x86_64_u6_baseos_patch
	pam-1.5.1-25.0.1.el9_6.i686.rpm	ab8e5c0e6deaf46aac2b402d78a3b94d4f046215f8582c396923ca8213a13e7a	-	ol9_x86_64_baseos_latest
	pam-1.5.1-25.0.1.el9_6.i686.rpm	ab8e5c0e6deaf46aac2b402d78a3b94d4f046215f8582c396923ca8213a13e7a	-	ol9_x86_64_u6_baseos_patch
	pam-1.5.1-25.0.1.el9_6.x86_64.rpm	6271844febebc1487dfd7f616f5128bd68b827793de7d925b9efb8cc788ceaa1	-	ol9_x86_64_baseos_latest
	pam-1.5.1-25.0.1.el9_6.x86_64.rpm	6271844febebc1487dfd7f616f5128bd68b827793de7d925b9efb8cc788ceaa1	-	ol9_x86_64_u6_baseos_patch
	pam-devel-1.5.1-25.0.1.el9_6.i686.rpm	762af1ffe01342b5305735f1b20fb1375beb638893beb4cace3e10b95fc564ac	-	ol9_x86_64_appstream
	pam-devel-1.5.1-25.0.1.el9_6.x86_64.rpm	6146e0444d989f0d7ecc2c2bbd803add093da4796f8d6474b001c25fb41661dc	-	ol9_x86_64_appstream
	pam-docs-1.5.1-25.0.1.el9_6.x86_64.rpm	093961116d4051d29fa0de0ba3bb6cebfb79d9f36147a1b75cbd32ccd5c21704	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team