SUSE-SU-2025:20844-1
Security update for aaa_base
SUSE-SU-2025:20844-1 is a vulnerability with no CVSS score yet in aaa_base, published October 9, 2025. No source lists public exploit code. Fixed in aaa_base 84.87+git20240906.742565b-1.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
84.87+git20240906.742565b-1.1aaa_base
Description
This update for aaa_base fixes the following issues:
Update to version 84.87+git20240906.742565b:
- yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
- Avoid unnecessary /bin/bash dependency
- sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)
Update to version 84.87+git20240821.fbabe1d:
- Add helper service for soft-reboot
Update to version 84.87+git20240809.5d13eb4:
- cleanup aaa_base.post and fold back into specfile
Update to version 84.87+git20240805.7513b28:
- Remove obsolete resolv+ manual page
- Remove obsolete defaultdomain.5 manual page
- Move /etc/skel to /usr/etc/skel (hermetic-usr)
- Remove obsolete refresh_initrd
- Add deprecation notice for service [jsc#PED-266]
Update to version 84.87+git20240801.75f05dd:
- sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117)
Update to version 84.87+git20240620.57ee9e1:
- Remove legacy-actions support [jsc#PED-264]
Update to version 84.87+git20240617.f5ff27f:
- add /usr/bin/nu to etc/shells for nushell
Update to version 84.87+git20240614.332933e:
- Do not save/restore cursor for foot at status line
- Add tmux and others to DIR_COLORS (Issue #116)
- Remove kernel.pid_max limit (bsc#1219038)
- Add subpackge to enable ptrace
Update to version 84.87+git20240523.10a5692:
- Add tmpfiles.d/soft-reboot-cleanup.conf
Update to version 84.87+git20240415.e6815bf:
- drop obsolete 50-default-s390.conf (bsc#1211721)
- fix typo in alljava.csh and drop stderr redirection
Update to version 84.87+git20240402.16596d1:
- add alacritty to DIR_COLORS
- Make sure tput it present before resetting TERM
- Add mc helpers for both tcsh and bash resources
- Do not overwrite escape sequences for xterm like
- Check for valid TERM
Update to version 84.87+git20240202.9526d46:
- properly shorten the variable when setting JAVA_HOME and JRE_HOME
- silence output of alljava
- Restrict ptrace with Yama LSM by default
- patch alljava.sh and alljava.csh, use the links from update alternatives
Update to version 84.87+git20231023.f347d36:
- Remove %ghost lastlog entry, lastlog is long gone
- Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103)
Affected packages
| Package | Affected | Fixed |
|---|---|---|
aaa_baseSUSE:Linux Micro 6.0 | before 84.87+git20240906.742565b-1.1 | 84.87+git20240906.742565b-1.1 |
What each source reports
OSVNo score
Security update for aaa_base
This update for aaa_base fixes the following issues:
Update to version 84.87+git20240906.742565b:
- yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
- Avoid unnecessary /bin/bash dependency
- sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)
Update to version 84.87+git20240821.fbabe1d:
- Add helper service for soft-reboot
Update to version 84.87+git20240809.5d13eb4:
- cleanup aaa_base.post and fold back into specfile
Update to version 84.87+git20240805.7513b28:
- Remove obsolete resolv+ manual page
- Remove obsolete defaultdomain.5 manual page
- Move /etc/skel to /usr/etc/skel (hermetic-usr)
- Remove obsolete refresh_initrd
- Add deprecation notice for service [jsc#PED-266]
Update to version 84.87+git20240801.75f05dd:
- sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117)
Update to version 84.87+git20240620.57ee9e1:
- Remove legacy-actions support [jsc#PED-264]
Update to version 84.87+git20240617.f5ff27f:
- add /usr/bin/nu to etc/shells for nushell
Update to version 84.87+git20240614.332933e:
- Do not save/restore cursor for foot at status line
- Add tmux and others to DIR_COLORS (Issue #116)
- Remove kernel.pid_max limit (bsc#1219038)
- Add subpackge to enable ptrace
Update to version 84.87+git20240523.10a5692:
- Add tmpfiles.d/soft-reboot-cleanup.conf
Update to version 84.87+git20240415.e6815bf:
- drop obsolete 50-default-s390.conf (bsc#1211721)
- fix typo in alljava.csh and drop stderr redirection
Update to version 84.87+git20240402.16596d1:
- add alacritty to DIR_COLORS
- Make sure tput it present before resetting TERM
- Add mc helpers for both tcsh and bash resources
- Do not overwrite escape sequences for xterm like
- Check for valid TERM
Update to version 84.87+git20240202.9526d46:
- properly shorten the variable when setting JAVA_HOME and JRE_HOME
- silence output of alljava
- Restrict ptrace with Yama LSM by default
- patch alljava.sh and alljava.csh, use the links from update alternatives
Update to version 84.87+git20231023.f347d36:
- Remove %ghost lastlog entry, lastlog is long gone
- Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103)
- Record
SUSE-SU-2025:20844-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.