CVE-2025-6020
Linux-pam: linux-pam directory traversal
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.8
Linux-pam: linux-pam directory traversal
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
CVE-2025-6020- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-06
EUVDEUVD-2025-19056
7.8
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
EUVD-2025-19056- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-06
NVD
7.8
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
CVE-2025-6020- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-06
OSV
7.8
Linux-pam: linux-pam directory traversal
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
CVE-2025-6020- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-22
- Updated
- 2026-11-07
OSVDEBIAN-CVE-2025-6020
7.8
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
DEBIAN-CVE-2025-6020- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1743
7.8
pam security update
PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.
Security Fix(es):
Linux-pam is a plug-in and unplugged system authentication software for Linux teams. There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)
- Record
OESA-2025-1743- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 46 moreShow less
OSVOESA-2025-1744
7.8
pam security update
PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.
Security Fix(es):
Linux-pam is a plug-in and unplugged system authentication software for Linux teams. There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)
- Record
OESA-2025-1744- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1745
7.8
pam security update
PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.
Security Fix(es):
Linux-pam is a plug-in and unplugged system authentication software for Linux teams. There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)
- Record
OESA-2025-1745- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1746
7.8
pam security update
PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.
Security Fix(es):
Linux-pam is a plug-in and unplugged system authentication software for Linux teams. There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)
- Record
OESA-2025-1746- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1830
7.8
pam security update
PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.
Security Fix(es):
A vulnerability was found in Linux-PAM up to 1.7.0 and classified as critical.Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Impacted is confidentiality, integrity, and availability.Upgrading to version 1.7.1 eliminates this vulnerability.(CVE-2025-6020)
- Record
OESA-2025-1830- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1831
7.8
pam security update
PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.
Security Fix(es):
A vulnerability was found in Linux-PAM up to 1.7.0 and classified as critical.Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Impacted is confidentiality, integrity, and availability.Upgrading to version 1.7.1 eliminates this vulnerability.(CVE-2025-6020)
- Record
OESA-2025-1831- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10024
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10024- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10027
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10027- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10180
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10180- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10354
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10354- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10357
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10357- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10358
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10358- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10359
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10359- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10361
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10361- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10362
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:10362- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:14557
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:14557- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:15099
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:15099- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:20181
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:20181- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:22019
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:22019- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:9526
7.8
Red Hat Security Advisory: pam security update
- Record
RHSA-2025:9526- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:10027
7.8
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:10027- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:14557
7.8
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:14557- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:15099
7.8
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
-
linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
-
linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:15099- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:20181
7.8
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.
- Record
RLSA-2025:20181- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:9526
7.8
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:9526- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-6020
7.8
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
UBUNTU-CVE-2025-6020- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2025:10027 No score
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:10027- Updated
- 2026-11-02
OSVALSA-2025:14557 No score
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:14557- Updated
- 2026-11-02
OSVALSA-2025:15099 No score
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
- linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:15099- Updated
- 2026-11-02
OSVALSA-2025:20181 No score
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2025:20181- Updated
- 2026-11-02
OSVALSA-2025:9526 No score
Important: pam security update
Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.
Security Fix(es):
- linux-pam: Linux-pam directory Traversal (CVE-2025-6020)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:9526- Updated
- 2026-11-02
OSVAZL-64113 No score
CVE-2025-6020 affecting package pam for versions less than 1.5.1-8
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
AZL-64113- Updated
- 2026-11-02
OSVAZL-64142 No score
CVE-2025-6020 affecting package pam for versions less than 1.5.3-5
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
- Record
AZL-64142- Updated
- 2026-11-05
OSVCLSA-2025-1752089633 No score
pam: Fix of CVE-2025-6020
- CVE-2025-6020: fix potential privilege escalationvia multiple symlink attacks and race conditions
- Record
CLSA-2025-1752089633- Updated
- 2026-11-02
OSVCLSA-2025-1753206847 No score
pam: Fix of CVE-2025-6020
- CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions
- Perform regression testing
- Record
CLSA-2025-1753206847- Updated
- 2026-11-02
OSVCLSA-2025-1753206853 No score
pam: Fix of CVE-2025-6020
- CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions
- Perform regression testing
- Record
CLSA-2025-1753206853- Updated
- 2026-11-02
OSVCLSA-2025-1753207513 No score
pam: Fix of CVE-2025-6020
- CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions
- Perform regression testing
- Record
CLSA-2025-1753207513- Updated
- 2026-11-02
OSVCLSA-2025-1757531273 No score
pam: Fix of CVE-2025-6020
- CVE-2025-6020: fix potential privilege escalation in pam_namspace
- Record
CLSA-2025-1757531273- Updated
- 2026-11-02
OSVCLSA-2025-1757532130 No score
pam: Fix of CVE-2025-6020
- CVE-2025-6020: fix potential privilege escalation in pam_namspace
- Record
CLSA-2025-1757532130- Updated
- 2026-11-02
OSVCLSA-2025-1757574151 No score
pam: Fix of CVE-2025-6020
- CVE-2025-6020: fix potential privilege escalation in pam_namspace
- Record
CLSA-2025-1757574151- Updated
- 2026-11-02
OSVCLSA-2025-1759864577 No score
Fix CVE(s): CVE-2025-6020
- SECURITY UPDATE: fix privilege escalation in pam_namespace
- debian/patches-applied/CVE-2025-6020-pre.patch: prerequisite changes
- debian/patches-applied/CVE-2025-6020.patch: enforce proper handling of instance directory symlinks to prevent mounting arbitrary paths
- CVE-2025-6020
- Record
CLSA-2025-1759864577- Updated
- 2026-11-02
OSVCLSA-2025-1759864776 No score
Fix CVE(s): CVE-2025-6020
- SECURITY UPDATE: fix privilege escalation in pam_namespace
- debian/patches-applied/CVE-2025-6020-pre.patch: prerequisite changes
- debian/patches-applied/CVE-2025-6020.patch: enforce proper handling of instance directory symlinks to prevent mounting arbitrary paths
- CVE-2025-6020
- Record
CLSA-2025-1759864776- Updated
- 2026-11-02
OSVCLSA-2025-1766137116 No score
Fix CVE(s): CVE-2025-6020
- Reworked CVE-2025-6020 patches to preserve ABI compatibility
- Add _pam_modutil_sanitize_helper_fds() as a static inline helper in the header for modules
- Keep the exported pam_modutil_sanitize_helper_fds() in libpam as a wrapper that calls the new helper
- Record
CLSA-2025-1766137116- Updated
- 2026-11-02
OSVCLSA-2026-1790600614 No score
pam: Fix of 3 CVEs
- Rebase onto the vendor's 1.1.8-23.0.3 sources
- CVE-2024-10041: fix possibility of leakage of secret information stored in memory
- CVE-2025-6020: take the vendor's fix and carry the parts of ours it omits: upstream 976c2007, namespace.init path-safety flags, helper fd sanitizing
- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped
- Record
CLSA-2026-1790600614- Updated
- 2026-11-02
OSVCLSA-2026-1790600758 No score
pam: Fix of 3 CVEs
- Rebase onto the vendor's 1.1.8-23.0.3 sources
- CVE-2024-10041: fix possibility of leakage of secret information stored in memory
- CVE-2025-6020: take the vendor's fix and carry the parts of ours it omits: upstream 976c2007, namespace.init path-safety flags, helper fd sanitizing
- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped
- Record
CLSA-2026-1790600758- Updated
- 2026-11-02
OSVCLSA-2026-1790601003 No score
pam: Fix of 3 CVEs
- Rebase onto the vendor's 1.1.8-23.0.3 sources
- CVE-2024-10041: fix possibility of leakage of secret information stored in memory
- CVE-2025-6020: take the vendor's fix and carry the parts of ours it omits: upstream 976c2007, namespace.init path-safety flags, helper fd sanitizing
- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped
- Record
CLSA-2026-1790601003- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15256-1 No score
pam-1.7.1-1.1 on GA media
These are all security issues fixed in the pam-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15256-1- Updated
- 2026-11-02
Affected products
- red hat cert-manager operator for red hat openshift 1.16
- red hat openshift compliance operator 1
- red hat discovery 2
- red hat enterprise linux 10
- red hat enterprise linux 10.0 extended update support
- red hat enterprise linux 7 extended lifecycle support
- red hat enterprise linux 8
- red hat enterprise linux 8.2 advanced update support
- red hat enterprise linux 8.4 advanced mission critical update support
- red hat enterprise linux 8.6 advanced mission critical update support
- red hat enterprise linux 8.6 telecommunications update service
- red hat enterprise linux 8.6 update services for sap solutions
Show 24 moreShow less
- red hat enterprise linux 8.8 telecommunications update service
- red hat enterprise linux 8.8 update services for sap solutions
- red hat enterprise linux 9
- red hat enterprise linux 9.0 update services for sap solutions
- red hat enterprise linux 9.2 update services for sap solutions
- red hat enterprise linux 9.4 extended update support
- red hat insights proxy 1.5
- red hat openshift distributed tracing 3.6.0
- red hat openshift sandboxed containers 1.10
- red hat web terminal 1.11 on rhel 9
- red hat web terminal 1.12 on rhel 9
- red hat rhel-8 based middleware containers
- red hat rhoss-1.36-rhel-8
- siemens ruggedcom rox mx5000
- siemens ruggedcom rox mx5000re
- siemens ruggedcom rox rx1400
- siemens ruggedcom rox rx1500
- siemens ruggedcom rox rx1501
- siemens ruggedcom rox rx1510
- siemens ruggedcom rox rx1511
- siemens ruggedcom rox rx1512
- siemens ruggedcom rox rx1524
- siemens ruggedcom rox rx1536
- siemens ruggedcom rox rx5000
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pamAlmaLinux:8 |
before 1.3.1-37.el8_10 | 1.3.1-37.el8_10 |
pam-develAlmaLinux:8 |
before 1.3.1-37.el8_10 | 1.3.1-37.el8_10 |
pamAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.3.1-38.el8_10 | 1.3.1-38.el8_10 |
pam-develAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.3.1-38.el8_10 | 1.3.1-38.el8_10 |
pamAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.5.1-26.el9_6 | 1.5.1-26.el9_6 |
pam-develAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.5.1-26.el9_6 | 1.5.1-26.el9_6 |
pam-docsAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.5.1-26.el9_6 | 1.5.1-26.el9_6 |
pamAlmaLinux:10 |
before 1.6.1-8.el10 | 1.6.1-8.el10 |
pam-develAlmaLinux:10 |
before 1.6.1-8.el10 | 1.6.1-8.el10 |
pam-libsAlmaLinux:10 |
before 1.6.1-8.el10 | 1.6.1-8.el10 |
Show 182 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pamAlmaLinux:9 |
before 1.5.1-25.el9_6 | 1.5.1-25.el9_6 |
pam-develAlmaLinux:9 |
before 1.5.1-25.el9_6 | 1.5.1-25.el9_6 |
pam-docsAlmaLinux:9 |
before 1.5.1-25.el9_6 | 1.5.1-25.el9_6 |
pamAzure Linux:2 |
before 1.5.1-8 | 1.5.1-8 |
pamAzure Linux:3 |
before 1.5.3-5 | 1.5.3-5 |
pamTuxCare:AlmaLinux:9.2 |
before 1.5.1-14.el9.tuxcare.els3 | 1.5.1-14.el9.tuxcare.els3 |
pam-develTuxCare:AlmaLinux:9.2 |
before 1.5.1-14.el9.tuxcare.els3 | 1.5.1-14.el9.tuxcare.els3 |
pam-docsTuxCare:AlmaLinux:9.2 |
before 1.5.1-14.el9.tuxcare.els3 | 1.5.1-14.el9.tuxcare.els3 |
pamTuxCare:CentOS:8.4 |
before 1.3.1-14.el8.tuxcare.els2 | 1.3.1-14.el8.tuxcare.els2 |
pam-develTuxCare:CentOS:8.4 |
before 1.3.1-14.el8.tuxcare.els2 | 1.3.1-14.el8.tuxcare.els2 |
pamTuxCare:CentOS-Stream:8 |
before 1.3.1-33.el8.tuxcare.els2 | 1.3.1-33.el8.tuxcare.els2 |
pam-develTuxCare:CentOS-Stream:8 |
before 1.3.1-33.el8.tuxcare.els2 | 1.3.1-33.el8.tuxcare.els2 |
pamTuxCare:CentOS:8.5 |
before 1.3.1-15.el8.tuxcare.els2 | 1.3.1-15.el8.tuxcare.els2 |
pam-develTuxCare:CentOS:8.5 |
before 1.3.1-15.el8.tuxcare.els2 | 1.3.1-15.el8.tuxcare.els2 |
pamTuxCare:OracleLinux:7 |
before 1.1.8-23.0.1.el7.tuxcare.els2 | 1.1.8-23.0.1.el7.tuxcare.els2 |
pam-develTuxCare:OracleLinux:7 |
before 1.1.8-23.0.1.el7.tuxcare.els2 | 1.1.8-23.0.1.el7.tuxcare.els2 |
pamTuxCare:CentOS:7 |
before 1.1.8-23.0.1.el7.tuxcare.els2 | 1.1.8-23.0.1.el7.tuxcare.els2 |
pam-develTuxCare:CentOS:7 |
before 1.1.8-23.0.1.el7.tuxcare.els2 | 1.1.8-23.0.1.el7.tuxcare.els2 |
pamTuxCare:RHEL:7 |
before 1.1.8-23.0.1.el7.tuxcare.els2 | 1.1.8-23.0.1.el7.tuxcare.els2 |
pam-develTuxCare:RHEL:7 |
before 1.1.8-23.0.1.el7.tuxcare.els2 | 1.1.8-23.0.1.el7.tuxcare.els2 |
libpam-cracklibTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 |
libpam-docTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 |
libpam-modulesTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 |
libpam-modules-binTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 |
libpam-runtimeTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 |
libpam0gTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 |
libpam0g-devTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2 |
libpam-cracklibTuxCare:Ubuntu:16.04 |
before 1.1.8-3.2ubuntu2.3+tuxcare.els3 | 1.1.8-3.2ubuntu2.3+tuxcare.els3 |
libpam-docTuxCare:Ubuntu:16.04 |
before 1.1.8-3.2ubuntu2.3+tuxcare.els3 | 1.1.8-3.2ubuntu2.3+tuxcare.els3 |
libpam-modulesTuxCare:Ubuntu:16.04 |
before 1.1.8-3.2ubuntu2.3+tuxcare.els3 | 1.1.8-3.2ubuntu2.3+tuxcare.els3 |
libpam-modules-binTuxCare:Ubuntu:16.04 |
before 1.1.8-3.2ubuntu2.3+tuxcare.els3 | 1.1.8-3.2ubuntu2.3+tuxcare.els3 |
libpam-runtimeTuxCare:Ubuntu:16.04 |
before 1.1.8-3.2ubuntu2.3+tuxcare.els3 | 1.1.8-3.2ubuntu2.3+tuxcare.els3 |
libpam0gTuxCare:Ubuntu:16.04 |
before 1.1.8-3.2ubuntu2.3+tuxcare.els3 | 1.1.8-3.2ubuntu2.3+tuxcare.els3 |
libpam0g-devTuxCare:Ubuntu:16.04 |
before 1.1.8-3.2ubuntu2.3+tuxcare.els3 | 1.1.8-3.2ubuntu2.3+tuxcare.els3 |
libpam-cracklibTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 |
libpam-docTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 |
libpam-modulesTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 |
libpam-modules-binTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 |
libpam-runtimeTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 |
libpam0gTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 |
libpam0g-devTuxCare:Ubuntu:18.04 |
before 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 | 1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3 |
pamTuxCare:RHEL:7 From an advisory covering 3 CVEs |
before 1.1.8-23.0.3.el7.tuxcare.els1 | 1.1.8-23.0.3.el7.tuxcare.els1 |
pam-develTuxCare:RHEL:7 From an advisory covering 3 CVEs |
before 1.1.8-23.0.3.el7.tuxcare.els1 | 1.1.8-23.0.3.el7.tuxcare.els1 |
pamTuxCare:OracleLinux:7 From an advisory covering 3 CVEs |
before 1.1.8-23.0.3.el7.tuxcare.els1 | 1.1.8-23.0.3.el7.tuxcare.els1 |
pam-develTuxCare:OracleLinux:7 From an advisory covering 3 CVEs |
before 1.1.8-23.0.3.el7.tuxcare.els1 | 1.1.8-23.0.3.el7.tuxcare.els1 |
pamTuxCare:CentOS:7 From an advisory covering 3 CVEs |
before 1.1.8-23.0.3.el7.tuxcare.els1 | 1.1.8-23.0.3.el7.tuxcare.els1 |
pam-develTuxCare:CentOS:7 From an advisory covering 3 CVEs |
before 1.1.8-23.0.3.el7.tuxcare.els1 | 1.1.8-23.0.3.el7.tuxcare.els1 |
pamDebian:12 |
before 1.5.2-6+deb12u2, plus listed versions 1.5.2-61.5.2-6+deb12u1 |
1.5.2-6+deb12u2 |
pamDebian:13 |
before 1.7.0-5 | 1.7.0-5 |
pamDebian:14 |
before 1.7.0-5 | 1.7.0-5 |
pamDebian:11 From an advisory covering 2 CVEs |
before 1.4.0-9+deb11u2, plus listed versions 1.4.0-91.4.0-9+deb11u1 |
1.4.0-9+deb11u2 |
pamopenEuler:22.03-LTS-SP3 |
before 1.5.2-13.oe2203sp3 | 1.5.2-13.oe2203sp3 |
pamopenEuler:22.03-LTS-SP4 |
before 1.5.2-13.oe2203sp4 | 1.5.2-13.oe2203sp4 |
pamopenEuler:24.03-LTS |
before 1.5.3-9.oe2403 | 1.5.3-9.oe2403 |
pamopenEuler:24.03-LTS-SP1 |
before 1.5.3-9.oe2403sp1 | 1.5.3-9.oe2403sp1 |
pamopenEuler:24.03-LTS-SP2 |
before 1.5.3-9.oe2403sp2 | 1.5.3-9.oe2403sp2 |
pamopenEuler:20.03-LTS-SP4 |
before 1.4.0-16.oe2003sp4 | 1.4.0-16.oe2003sp4 |
pam-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:1.5.1-24.el9_4 | 0:1.5.1-24.el9_4 |
pam-debugsourceRed Hat:rhel_eus:9.4::appstream |
before 0:1.5.1-24.el9_4 | 0:1.5.1-24.el9_4 |
pam-develRed Hat:rhel_eus:9.4::appstream |
before 0:1.5.1-24.el9_4 | 0:1.5.1-24.el9_4 |
pam-docsRed Hat:rhel_eus:9.4::appstream |
before 0:1.5.1-24.el9_4 | 0:1.5.1-24.el9_4 |
pamRed Hat:rhel_eus:9.4::baseos |
before 0:1.5.1-24.el9_4 | 0:1.5.1-24.el9_4 |
pam-debuginfoRed Hat:rhel_eus:9.4::baseos |
before 0:1.5.1-24.el9_4 | 0:1.5.1-24.el9_4 |
pam-debugsourceRed Hat:rhel_eus:9.4::baseos |
before 0:1.5.1-24.el9_4 | 0:1.5.1-24.el9_4 |
pamRed Hat:enterprise_linux:8::baseos |
before 0:1.3.1-37.el8_10 | 0:1.3.1-37.el8_10 |
pam-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:1.3.1-37.el8_10 | 0:1.3.1-37.el8_10 |
pam-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:1.3.1-37.el8_10 | 0:1.3.1-37.el8_10 |
pam-develRed Hat:enterprise_linux:8::baseos |
before 0:1.3.1-37.el8_10 | 0:1.3.1-37.el8_10 |
pam-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:1.5.1-15.el9_2.1 | 0:1.5.1-15.el9_2.1 |
pam-debugsourceRed Hat:rhel_e4s:9.2::appstream |
before 0:1.5.1-15.el9_2.1 | 0:1.5.1-15.el9_2.1 |
pam-develRed Hat:rhel_e4s:9.2::appstream |
before 0:1.5.1-15.el9_2.1 | 0:1.5.1-15.el9_2.1 |
pam-docsRed Hat:rhel_e4s:9.2::appstream |
before 0:1.5.1-15.el9_2.1 | 0:1.5.1-15.el9_2.1 |
pamRed Hat:rhel_e4s:9.2::baseos |
before 0:1.5.1-15.el9_2.1 | 0:1.5.1-15.el9_2.1 |
pam-debuginfoRed Hat:rhel_e4s:9.2::baseos |
before 0:1.5.1-15.el9_2.1 | 0:1.5.1-15.el9_2.1 |
pam-debugsourceRed Hat:rhel_e4s:9.2::baseos |
before 0:1.5.1-15.el9_2.1 | 0:1.5.1-15.el9_2.1 |
pam-debuginfoRed Hat:rhel_e4s:9.0::appstream |
before 0:1.5.1-9.el9_0.2 | 0:1.5.1-9.el9_0.2 |
pam-debugsourceRed Hat:rhel_e4s:9.0::appstream |
before 0:1.5.1-9.el9_0.2 | 0:1.5.1-9.el9_0.2 |
pam-develRed Hat:rhel_e4s:9.0::appstream |
before 0:1.5.1-9.el9_0.2 | 0:1.5.1-9.el9_0.2 |
pam-docsRed Hat:rhel_e4s:9.0::appstream |
before 0:1.5.1-9.el9_0.2 | 0:1.5.1-9.el9_0.2 |
pamRed Hat:rhel_e4s:9.0::baseos |
before 0:1.5.1-9.el9_0.2 | 0:1.5.1-9.el9_0.2 |
pam-debuginfoRed Hat:rhel_e4s:9.0::baseos |
before 0:1.5.1-9.el9_0.2 | 0:1.5.1-9.el9_0.2 |
pam-debugsourceRed Hat:rhel_e4s:9.0::baseos |
before 0:1.5.1-9.el9_0.2 | 0:1.5.1-9.el9_0.2 |
pamRed Hat:rhel_els:7 |
before 0:1.1.8-23.el7_9.1 | 0:1.1.8-23.el7_9.1 |
pam-debuginfoRed Hat:rhel_els:7 |
before 0:1.1.8-23.el7_9.1 | 0:1.1.8-23.el7_9.1 |
pam-develRed Hat:rhel_els:7 |
before 0:1.1.8-23.el7_9.1 | 0:1.1.8-23.el7_9.1 |
pamRed Hat:rhel_e4s:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pam-debuginfoRed Hat:rhel_e4s:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pam-debugsourceRed Hat:rhel_e4s:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pam-develRed Hat:rhel_e4s:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pamRed Hat:rhel_tus:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pam-debuginfoRed Hat:rhel_tus:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pam-debugsourceRed Hat:rhel_tus:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pam-develRed Hat:rhel_tus:8.8::baseos |
before 0:1.3.1-26.el8_8.1 | 0:1.3.1-26.el8_8.1 |
pamRed Hat:rhel_aus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-debuginfoRed Hat:rhel_aus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-debugsourceRed Hat:rhel_aus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-develRed Hat:rhel_aus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pamRed Hat:rhel_e4s:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-debuginfoRed Hat:rhel_e4s:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-debugsourceRed Hat:rhel_e4s:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-develRed Hat:rhel_e4s:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pamRed Hat:rhel_tus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-debuginfoRed Hat:rhel_tus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-debugsourceRed Hat:rhel_tus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pam-develRed Hat:rhel_tus:8.6::baseos |
before 0:1.3.1-16.el8_6.2 | 0:1.3.1-16.el8_6.2 |
pamRed Hat:rhel_aus:8.4::baseos |
before 0:1.3.1-14.el8_4.1 | 0:1.3.1-14.el8_4.1 |
pam-debuginfoRed Hat:rhel_aus:8.4::baseos |
before 0:1.3.1-14.el8_4.1 | 0:1.3.1-14.el8_4.1 |
pam-debugsourceRed Hat:rhel_aus:8.4::baseos |
before 0:1.3.1-14.el8_4.1 | 0:1.3.1-14.el8_4.1 |
pam-develRed Hat:rhel_aus:8.4::baseos |
before 0:1.3.1-14.el8_4.1 | 0:1.3.1-14.el8_4.1 |
pamRed Hat:rhel_aus:8.2::baseos |
before 0:1.3.1-8.el8_2.1 | 0:1.3.1-8.el8_2.1 |
pam-debuginfoRed Hat:rhel_aus:8.2::baseos |
before 0:1.3.1-8.el8_2.1 | 0:1.3.1-8.el8_2.1 |
pam-debugsourceRed Hat:rhel_aus:8.2::baseos |
before 0:1.3.1-8.el8_2.1 | 0:1.3.1-8.el8_2.1 |
pam-develRed Hat:rhel_aus:8.2::baseos |
before 0:1.3.1-8.el8_2.1 | 0:1.3.1-8.el8_2.1 |
pamRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:1.3.1-38.el8_10 | 0:1.3.1-38.el8_10 |
pam-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:1.3.1-38.el8_10 | 0:1.3.1-38.el8_10 |
pam-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:1.3.1-38.el8_10 | 0:1.3.1-38.el8_10 |
pam-develRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:1.3.1-38.el8_10 | 0:1.3.1-38.el8_10 |
pam-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pam-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pam-develRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pam-docsRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pamRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pam-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pam-debugsourceRed Hat:enterprise_linux:9::baseos From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pam-debuginfoRed Hat:enterprise_linux:10.1 |
before 0:1.6.1-8.el10 | 0:1.6.1-8.el10 |
pam-debugsourceRed Hat:enterprise_linux:10.1 |
before 0:1.6.1-8.el10 | 0:1.6.1-8.el10 |
pam-develRed Hat:enterprise_linux:10.1 |
before 0:1.6.1-8.el10 | 0:1.6.1-8.el10 |
pam-libs-debuginfoRed Hat:enterprise_linux:10.1 |
before 0:1.6.1-8.el10 | 0:1.6.1-8.el10 |
pamRed Hat:enterprise_linux:10.1 |
before 0:1.6.1-8.el10 | 0:1.6.1-8.el10 |
pam-libsRed Hat:enterprise_linux:10.1 |
before 0:1.6.1-8.el10 | 0:1.6.1-8.el10 |
pam-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.6.1-8.el10_0 | 0:1.6.1-8.el10_0 |
pam-debugsourceRed Hat:enterprise_linux_eus:10.0 |
before 0:1.6.1-8.el10_0 | 0:1.6.1-8.el10_0 |
pam-develRed Hat:enterprise_linux_eus:10.0 |
before 0:1.6.1-8.el10_0 | 0:1.6.1-8.el10_0 |
pam-libs-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.6.1-8.el10_0 | 0:1.6.1-8.el10_0 |
pamRed Hat:enterprise_linux_eus:10.0 |
before 0:1.6.1-8.el10_0 | 0:1.6.1-8.el10_0 |
pam-libsRed Hat:enterprise_linux_eus:10.0 |
before 0:1.6.1-8.el10_0 | 0:1.6.1-8.el10_0 |
pam-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pam-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pam-develRed Hat:enterprise_linux:9::appstream |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pam-docsRed Hat:enterprise_linux:9::appstream |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pamRed Hat:enterprise_linux:9::baseos |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pam-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pam-debugsourceRed Hat:enterprise_linux:9::baseos |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pamRocky Linux:8 |
before 0:1.3.1-37.el8_10 | 0:1.3.1-37.el8_10 |
pamRocky Linux:8 From an advisory covering 2 CVEs |
before 0:1.3.1-38.el8_10 | 0:1.3.1-38.el8_10 |
pamRocky Linux:9 From an advisory covering 2 CVEs |
before 0:1.5.1-26.el9_6 | 0:1.5.1-26.el9_6 |
pamRocky Linux:10 |
before 0:1.6.1-8.el10 | 0:1.6.1-8.el10 |
pamRocky Linux:9 |
before 0:1.5.1-25.el9_6 | 0:1.5.1-25.el9_6 |
pamSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Manager Proxy 4.3 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Manager Server 4.3 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Micro 5.1 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamopenSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 1.3.0-150000.6.83.1 | 1.3.0-150000.6.83.1 |
pamSUSE:Linux Micro 6.0 |
before 1.6.0-5.1 | 1.6.0-5.1 |
pamSUSE:Linux Micro 6.1 |
before 1.6.1-slfo.1.1_3.1 | 1.6.1-slfo.1.1_3.1 |
pamUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.1.3-8ubuntu31.1.3-10ubuntu11.1.3-11ubuntu11.1.8-1ubuntu11.1.8-1ubuntu2 Show 5 moreShow less1.1.8-1ubuntu2.11.1.8-1ubuntu2.21.1.8-1ubuntu2.2+esm11.1.8-1ubuntu2.2+esm31.1.8-1ubuntu2.2+esm4 |
None known |
pamUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.1.8-3.1ubuntu31.1.8-3.2ubuntu21.1.8-3.2ubuntu2.11.1.8-3.2ubuntu2.31.1.8-3.2ubuntu2.3+esm11.1.8-3.2ubuntu2.3+esm21.1.8-3.2ubuntu2.3+esm41.1.8-3.2ubuntu2.3+esm5 |
None known |
pamUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.1.8-3.2ubuntu31.1.8-3.2ubuntu41.1.8-3.6ubuntu11.1.8-3.6ubuntu21.1.8-3.6ubuntu2.18.04.1 Show 6 moreShow less1.1.8-3.6ubuntu2.18.04.21.1.8-3.6ubuntu2.18.04.31.1.8-3.6ubuntu2.18.04.41.1.8-3.6ubuntu2.18.04.61.1.8-3.6ubuntu2.18.04.6+esm11.1.8-3.6ubuntu2.18.04.6+esm2 |
None known |
pamUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.3.1-5ubuntu11.3.1-5ubuntu31.3.1-5ubuntu41.3.1-5ubuntu4.11.3.1-5ubuntu4.2 Show 5 moreShow less1.3.1-5ubuntu4.31.3.1-5ubuntu4.41.3.1-5ubuntu4.61.3.1-5ubuntu4.71.3.1-5ubuntu4.7+esm1 |
None known |
pamUbuntu:22.04:LTS |
before 1.4.0-11ubuntu2.6, plus listed versions 1.3.1-5ubuntu111.4.0-10ubuntu11.4.0-10ubuntu21.4.0-11ubuntu11.4.0-11ubuntu2 Show 4 moreShow less1.4.0-11ubuntu2.11.4.0-11ubuntu2.31.4.0-11ubuntu2.41.4.0-11ubuntu2.5 |
1.4.0-11ubuntu2.6 |
pamUbuntu:24.04:LTS |
before 1.5.3-5ubuntu5.4, plus listed versions 1.5.2-6ubuntu11.5.2-9.1ubuntu11.5.2-9.1ubuntu21.5.2-9.1ubuntu31.5.3-5ubuntu31.5.3-5ubuntu41.5.3-5ubuntu51.5.3-5ubuntu5.1 |
1.5.3-5ubuntu5.4 |
pamUbuntu:25.10 |
before 1.5.3-7ubuntu6, plus listed versions 1.5.3-7ubuntu41.5.3-7ubuntu5 |
1.5.3-7ubuntu6 |
pamopenSUSE:Tumbleweed |
before 1.7.1-1.1 | 1.7.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | NVD | |
| products | CVE List | |
| products | EUVD, OSV | |
| facts | CVE List | |
| affected | ||
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-6020 is a high vulnerability (CVSS 7.8) in Red Hat Cert-manager Operator For Red Hat Openshift 1.16, published June 17, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. Fixed in pam 1.3.1-37.el8_10.
References
access.redhat.com/errata/RHSA-2025:10024
access.redhat.com/errata/RHSA-2025:10027
access.redhat.com/errata/RHSA-2025:10180
access.redhat.com/errata/RHSA-2025:10354
access.redhat.com/errata/RHSA-2025:10357
access.redhat.com/errata/RHSA-2025:10358
Show 95 moreShow less
access.redhat.com/errata/RHSA-2025:10359
access.redhat.com/errata/RHSA-2025:10361
access.redhat.com/errata/RHSA-2025:10362
access.redhat.com/errata/RHSA-2025:10735
access.redhat.com/errata/RHSA-2025:10823
access.redhat.com/errata/RHSA-2025:11386
access.redhat.com/errata/RHSA-2025:11487
access.redhat.com/errata/RHSA-2025:14557
access.redhat.com/errata/RHSA-2025:15099
access.redhat.com/errata/RHSA-2025:15709
access.redhat.com/errata/RHSA-2025:15827
access.redhat.com/errata/RHSA-2025:15828
access.redhat.com/errata/RHSA-2025:16524
access.redhat.com/errata/RHSA-2025:17181
access.redhat.com/errata/RHSA-2025:18219
access.redhat.com/errata/RHSA-2025:20181
access.redhat.com/errata/RHSA-2025:21885
access.redhat.com/errata/RHSA-2025:22019
access.redhat.com/errata/RHSA-2025:9526
access.redhat.com/errata/RHSA-2026:0934
access.redhat.com/security/cve/CVE-2025-6020
bugzilla.redhat.com/show_bug.cgi?id=2372512
github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx
openwall.com/lists/oss-security/2025/06/17/1
lists.debian.org/debian-lts-announce/2025/09/msg00021.html
cert-portal.siemens.com/productcert/html/ssa-577017.html
bugzilla.redhat.com/2372512
errata.almalinux.org/8/ALSA-2025-10027.html
errata.almalinux.org/8/ALSA-2025-14557.html
redhat.com/security/data/cve/CVE-2025-6020.html
redhat.com/security/data/cve/CVE-2025-8941.html
access.redhat.com/security/cve/CVE-2025-8941
bugzilla.redhat.com/2388220
errata.almalinux.org/9/ALSA-2025-15099.html
errata.almalinux.org/10/ALSA-2025-20181.html
errata.almalinux.org/9/ALSA-2025-9526.html
nvd.nist.gov/vuln/detail/CVE-2025-6020
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1752089633.html
errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1753206847.html
errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1753206853.html
errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1753207513.html
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1757531273.html
errata.tuxcare.com/els_os/centos7els/CLSA-2025-1757532130.html
errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1757574151.html
errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1759864577.html
errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1759864776.html
errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1766137116.html
errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600614.html
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790600758.html
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790601003.html
access.redhat.com/downloads/content/package-browser
catalog.redhat.com/software/containers
github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6020.json
github.com/linux-pam/linux-pam
security-tracker.debian.org/tracker/CVE-2025-6020
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1743
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1744
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1745
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1746
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1830
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1831
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10024.json
cve.org/CVERecord?id=CVE-2025-6020
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10027.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10180.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10354.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10357.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10358.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10359.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10361.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10362.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14557.json
bugzilla.redhat.com/show_bug.cgi?id=2388220
cve.org/CVERecord?id=CVE-2025-8941
nvd.nist.gov/vuln/detail/CVE-2025-8941
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15099.json
docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.1_release_notes/index
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20181.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22019.json
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9526.json
errata.rockylinux.org/RLSA-2025:10027
errata.rockylinux.org/RLSA-2025:14557
errata.rockylinux.org/RLSA-2025:15099
errata.rockylinux.org/RLSA-2025:20181
errata.rockylinux.org/RLSA-2025:9526
suse.com/support/update/announcement/2025/suse-su-202502013-1
bugzilla.suse.com/1243226
bugzilla.suse.com/1244509
suse.com/security/cve/CVE-2025-6018
suse.com/security/cve/CVE-2025-6020
suse.com/support/update/announcement/2025/suse-su-202520427-1
suse.com/support/update/announcement/2025/suse-su-202520441-1
ubuntu.com/security/CVE-2025-6020
ubuntu.com/security/notices/USN-7580-1
Left out on purpose, here and in the API, to keep responses small: 6 source records.