{"id":"CVE-2025-6020","aliases":["ALSA-2025:10027","ALSA-2025:14557","ALSA-2025:15099","ALSA-2025:20181","ALSA-2025:9526","AZL-64113","AZL-64142","CLSA-2025-1752089633","CLSA-2025-1753206847","CLSA-2025-1753206853","CLSA-2025-1753207513","CLSA-2025-1757531273","CLSA-2025-1757532130","CLSA-2025-1757574151","CLSA-2025-1759864577","CLSA-2025-1759864776","CLSA-2025-1766137116","CLSA-2026-1790600614","CLSA-2026-1790600758","CLSA-2026-1790601003","DEBIAN-CVE-2025-6020","DLA-4306-1","EUVD-2025-19056","GHSA-f9p8-gjr4-j9gx","OESA-2025-1743","OESA-2025-1744","OESA-2025-1745","OESA-2025-1746","OESA-2025-1830","OESA-2025-1831","RHSA-2025:10024","RHSA-2025:10027","RHSA-2025:10180","RHSA-2025:10354","RHSA-2025:10357","RHSA-2025:10358","RHSA-2025:10359","RHSA-2025:10361","RHSA-2025:10362","RHSA-2025:14557","RHSA-2025:15099","RHSA-2025:20181","RHSA-2025:22019","RHSA-2025:9526","RLSA-2025:10027","RLSA-2025:14557","RLSA-2025:15099","RLSA-2025:20181","RLSA-2025:9526","ROOT-OS-DEBIAN-11-CVE-2025-6020","ROOT-OS-DEBIAN-12-CVE-2025-6020","SUSE-SU-2025:02013-1","SUSE-SU-2025:20427-1","SUSE-SU-2025:20441-1","UBUNTU-CVE-2025-6020","USN-7580-1","openSUSE-SU-2025:15256-1"],"status":"published","title":"Linux-pam: linux-pam directory traversal","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00472,"percentile":0.41101,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2025-06-17T10:00:00Z","modified":"2026-11-06T01:17:47Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"pam","fixed_in":["1.3.1-37.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pam-devel","fixed_in":["1.3.1-37.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"pam","fixed_in":["1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"pam-devel","fixed_in":["1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"pam-libs","fixed_in":["1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam","fixed_in":["1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam-devel","fixed_in":["1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pam-docs","fixed_in":["1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"pam","fixed_in":["1.5.1-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"pam","fixed_in":["1.5.3-5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam","fixed_in":["1.5.1-14.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-devel","fixed_in":["1.5.1-14.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-docs","fixed_in":["1.5.1-14.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"pam","fixed_in":["1.3.1-14.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"pam-devel","fixed_in":["1.3.1-14.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"pam","fixed_in":["1.3.1-33.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"pam-devel","fixed_in":["1.3.1-33.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"pam","fixed_in":["1.3.1-15.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"pam-devel","fixed_in":["1.3.1-15.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"pam","fixed_in":["1.1.8-23.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"pam-devel","fixed_in":["1.1.8-23.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"pam","fixed_in":["1.1.8-23.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"pam-devel","fixed_in":["1.1.8-23.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"pam","fixed_in":["1.1.8-23.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"pam-devel","fixed_in":["1.1.8-23.0.1.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cracklib","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2","1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-doc","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2","1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2","1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules-bin","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2","1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-runtime","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2","1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2","1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g-dev","fixed_in":["1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2","1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cracklib","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-doc","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules-bin","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-runtime","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g-dev","fixed_in":["1.1.8-3.2ubuntu2.3+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pam","fixed_in":["1.5.2-6+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pam","fixed_in":["1.7.0-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pam","fixed_in":["1.7.0-5"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"pam","fixed_in":["1.5.2-13.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"pam","fixed_in":["1.5.2-13.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"pam","fixed_in":["1.5.3-9.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"pam","fixed_in":["1.5.3-9.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"pam","fixed_in":["1.5.3-9.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"pam","fixed_in":["1.4.0-16.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debuginfo","fixed_in":["0:1.5.1-24.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debugsource","fixed_in":["0:1.5.1-24.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-devel","fixed_in":["0:1.5.1-24.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-docs","fixed_in":["0:1.5.1-24.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam","fixed_in":["0:1.5.1-24.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debuginfo","fixed_in":["0:1.5.1-24.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debugsource","fixed_in":["0:1.5.1-24.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam","fixed_in":["0:1.3.1-37.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-37.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-37.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-devel","fixed_in":["0:1.3.1-37.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-debuginfo","fixed_in":["0:1.5.1-15.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-debugsource","fixed_in":["0:1.5.1-15.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-devel","fixed_in":["0:1.5.1-15.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-docs","fixed_in":["0:1.5.1-15.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"pam","fixed_in":["0:1.5.1-15.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"pam-debuginfo","fixed_in":["0:1.5.1-15.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"pam-debugsource","fixed_in":["0:1.5.1-15.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-debuginfo","fixed_in":["0:1.5.1-9.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-debugsource","fixed_in":["0:1.5.1-9.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-devel","fixed_in":["0:1.5.1-9.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-docs","fixed_in":["0:1.5.1-9.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"pam","fixed_in":["0:1.5.1-9.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"pam-debuginfo","fixed_in":["0:1.5.1-9.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"pam-debugsource","fixed_in":["0:1.5.1-9.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"pam","fixed_in":["0:1.1.8-23.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"pam-debuginfo","fixed_in":["0:1.1.8-23.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"pam-devel","fixed_in":["0:1.1.8-23.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam-devel","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam-devel","fixed_in":["0:1.3.1-26.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam-devel","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam-devel","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam-devel","fixed_in":["0:1.3.1-16.el8_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam","fixed_in":["0:1.3.1-14.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-14.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-14.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam-devel","fixed_in":["0:1.3.1-14.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam","fixed_in":["0:1.3.1-8.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam-debuginfo","fixed_in":["0:1.3.1-8.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam-debugsource","fixed_in":["0:1.3.1-8.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam-devel","fixed_in":["0:1.3.1-8.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-debuginfo","fixed_in":["0:1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-debugsource","fixed_in":["0:1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-devel","fixed_in":["0:1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-libs-debuginfo","fixed_in":["0:1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam","fixed_in":["0:1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-libs","fixed_in":["0:1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-debuginfo","fixed_in":["0:1.6.1-8.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-debugsource","fixed_in":["0:1.6.1-8.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-devel","fixed_in":["0:1.6.1-8.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-libs-debuginfo","fixed_in":["0:1.6.1-8.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam","fixed_in":["0:1.6.1-8.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-libs","fixed_in":["0:1.6.1-8.el10_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debuginfo","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debugsource","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-devel","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-docs","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debuginfo","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debugsource","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"pam","fixed_in":["0:1.3.1-37.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"pam","fixed_in":["0:1.6.1-8.el10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"pam","fixed_in":["0:1.5.1-25.el9_6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"pam","fixed_in":["1.6.0-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"pam","fixed_in":["1.6.1-slfo.1.1_3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"pam","fixed_in":["1.4.0-11ubuntu2.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"pam","fixed_in":["1.5.3-5ubuntu5.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"pam","fixed_in":["1.5.3-7ubuntu6"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pam","fixed_in":["1.7.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-37.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-37.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-38.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-38.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"pam-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-14.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-14.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-14.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-33.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-33.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-15.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-15.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.1.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cracklib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cracklib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-modules-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam0g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.2ubuntu2.3+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cracklib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-modules-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam0g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-3.6ubuntu2.18.04.6+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.8-23.0.3.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-6+deb12u2"}]}],"versions":["1.5.2-6","1.5.2-6+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-5"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-9+deb11u2"}]}],"versions":["1.4.0-9","1.4.0-9+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-13.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-13.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-9.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-9.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-9.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-16.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-24.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-24.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-24.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-24.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-24.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-24.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-24.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-37.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-37.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-37.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-37.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-15.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-15.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-15.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-15.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-15.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-15.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-15.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-9.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-9.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-9.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-9.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-9.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-9.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-9.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-23.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-23.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-23.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-26.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-16.el8_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-14.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-14.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-14.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-14.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-8.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-8.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-8.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-8.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-38.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-38.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-38.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-38.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"pam-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"pam-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"pam-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-37.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-38.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-26.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-8.el10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-25.el9_6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.6.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-slfo.1.1_3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.3-8ubuntu3","1.1.3-10ubuntu1","1.1.3-11ubuntu1","1.1.8-1ubuntu1","1.1.8-1ubuntu2","1.1.8-1ubuntu2.1","1.1.8-1ubuntu2.2","1.1.8-1ubuntu2.2+esm1","1.1.8-1ubuntu2.2+esm3","1.1.8-1ubuntu2.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.8-3.1ubuntu3","1.1.8-3.2ubuntu2","1.1.8-3.2ubuntu2.1","1.1.8-3.2ubuntu2.3","1.1.8-3.2ubuntu2.3+esm1","1.1.8-3.2ubuntu2.3+esm2","1.1.8-3.2ubuntu2.3+esm4","1.1.8-3.2ubuntu2.3+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.8-3.2ubuntu3","1.1.8-3.2ubuntu4","1.1.8-3.6ubuntu1","1.1.8-3.6ubuntu2","1.1.8-3.6ubuntu2.18.04.1","1.1.8-3.6ubuntu2.18.04.2","1.1.8-3.6ubuntu2.18.04.3","1.1.8-3.6ubuntu2.18.04.4","1.1.8-3.6ubuntu2.18.04.6","1.1.8-3.6ubuntu2.18.04.6+esm1","1.1.8-3.6ubuntu2.18.04.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-5ubuntu1","1.3.1-5ubuntu3","1.3.1-5ubuntu4","1.3.1-5ubuntu4.1","1.3.1-5ubuntu4.2","1.3.1-5ubuntu4.3","1.3.1-5ubuntu4.4","1.3.1-5ubuntu4.6","1.3.1-5ubuntu4.7","1.3.1-5ubuntu4.7+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-11ubuntu2.6"}]}],"versions":["1.3.1-5ubuntu11","1.4.0-10ubuntu1","1.4.0-10ubuntu2","1.4.0-11ubuntu1","1.4.0-11ubuntu2","1.4.0-11ubuntu2.1","1.4.0-11ubuntu2.3","1.4.0-11ubuntu2.4","1.4.0-11ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-5ubuntu5.4"}]}],"versions":["1.5.2-6ubuntu1","1.5.2-9.1ubuntu1","1.5.2-9.1ubuntu2","1.5.2-9.1ubuntu3","1.5.3-5ubuntu3","1.5.3-5ubuntu4","1.5.3-5ubuntu5","1.5.3-5ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-7ubuntu6"}]}],"versions":["1.5.3-7ubuntu4","1.5.3-7ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-11ubuntu2.6"}]}],"versions":["1.3.1-5ubuntu11","1.4.0-10ubuntu1","1.4.0-10ubuntu2","1.4.0-11ubuntu1","1.4.0-11ubuntu2","1.4.0-11ubuntu2.1","1.4.0-11ubuntu2.3","1.4.0-11ubuntu2.4","1.4.0-11ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-5ubuntu5.4"}]}],"versions":["1.5.2-6ubuntu1","1.5.2-9.1ubuntu1","1.5.2-9.1ubuntu2","1.5.2-9.1ubuntu3","1.5.3-5ubuntu3","1.5.3-5ubuntu4","1.5.3-5ubuntu5","1.5.3-5ubuntu5.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-1.1"}]}]}],"products":[{"vendor":"red hat","product":"cert-manager operator for red hat openshift 1.16"},{"vendor":"red hat","product":"openshift compliance operator 1"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat insights proxy 1.5"},{"vendor":"red hat","product":"red hat openshift distributed tracing 3.6.0"},{"vendor":"red hat","product":"red hat openshift sandboxed containers 1.10"},{"vendor":"red hat","product":"red hat web terminal 1.11 on rhel 9"},{"vendor":"red hat","product":"red hat web terminal 1.12 on rhel 9"},{"vendor":"red hat","product":"rhel-8 based middleware containers"},{"vendor":"red hat","product":"rhoss-1.36-rhel-8"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:10024","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10027","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10180","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10354","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10357","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10358","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10359","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10361","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10362","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10735","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10823","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11386","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11487","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:14557","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:15099","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:15709","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:15827","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:15828","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:16524","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:17181","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:18219","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:20181","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21885","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22019","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9526","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0934","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-6020","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372512","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx","tags":["advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2025/06/17/1","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html","tags":["web"]},{"url":"https://bugzilla.redhat.com/2372512","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10027.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-14557.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-6020.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-8941.html","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-8941","tags":["report"]},{"url":"https://bugzilla.redhat.com/2388220","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-15099.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-20181.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-9526.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6020","tags":["web","advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1752089633.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1753206847.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1753206853.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1753207513.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1757531273.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1757532130.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1757574151.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1759864577.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1759864776.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1766137116.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600614.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790600758.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790601003.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6020.json","tags":["advisory"]},{"url":"https://github.com/linux-pam/linux-pam","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-6020","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1743","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1744","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1745","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1746","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1830","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1831","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10024.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6020","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10027.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10180.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10354.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10357.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10358.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10359.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10361.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10362.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14557.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2388220","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-8941","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8941","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15099.json","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.1_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_20181.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22019.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9526.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10027","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:14557","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:15099","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:20181","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9526","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502013-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243226","tags":["report"]},{"url":"https://bugzilla.suse.com/1244509","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6020","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520427-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520441-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-6020","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/06/17/1","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7580-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-6020","title":"Linux-pam: linux-pam directory traversal","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T12:44:08.646Z","modified":"2026-11-06T01:00:32.143Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-06T02:55:55.947181Z"}],"euvd":[{"id":"EUVD-2025-19056","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T12:44:08Z","modified":"2026-11-06T01:00:32Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-06T02:02:53.341523Z"}],"nvd":[{"id":"CVE-2025-6020","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T13:15:21.66Z","modified":"2026-11-06T01:17:47.313Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-06T06:59:03.087435Z"}],"osv":[{"id":"CVE-2025-6020","title":"Linux-pam: linux-pam directory traversal","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T12:44:08.646Z","modified":"2026-11-07T02:30:44.098126951Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-07T03:07:57.874008Z"},{"id":"DEBIAN-CVE-2025-6020","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T13:15:21.66Z","modified":"2026-10-13T09:47:43.546544677Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2025-1743","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\n\nLinux-pam is a plug-in and unplugged system authentication software for Linux teams.\n There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.514080753Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1744","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\n\nLinux-pam is a plug-in and unplugged system authentication software for Linux teams.\n There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)","status":"published","published":"2025-07-04T11:08:50Z","modified":"2026-08-18T01:18:01.822331745Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1745","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\n\nLinux-pam is a plug-in and unplugged system authentication software for Linux teams.\n There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)","status":"published","published":"2025-07-04T11:08:50Z","modified":"2026-08-18T01:18:52.717256248Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1746","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\n\nLinux-pam is a plug-in and unplugged system authentication software for Linux teams.\n There is a security vulnerability in Linux-pam. This vulnerability originates from insufficient protection when using user control paths by the pam_namespace module, which may cause local users to be elevated to root permissions through symbolic link attacks and race conditions.(CVE-2025-6020)","status":"published","published":"2025-07-04T11:08:50Z","modified":"2026-08-18T01:18:52.700499202Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1830","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Linux-PAM up to 1.7.0 and classified as critical.Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Impacted is confidentiality, integrity, and availability.Upgrading to version 1.7.1 eliminates this vulnerability.(CVE-2025-6020)","status":"published","published":"2025-07-11T11:08:55Z","modified":"2026-08-18T01:18:53.858691083Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1831","title":"pam security update","description":"PAM (Pluggable Authentication Modules) is a system of libraries that handle the authentication tasks of applications (services) on the system.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in Linux-PAM up to 1.7.0 and classified as critical.Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Impacted is confidentiality, integrity, and availability.Upgrading to version 1.7.1 eliminates this vulnerability.(CVE-2025-6020)","status":"published","published":"2025-07-11T11:08:55Z","modified":"2026-08-18T01:18:53.812707819Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:10024","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-02T10:03:20Z","modified":"2026-10-14T10:06:23Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10027","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-02T10:03:21Z","modified":"2026-10-14T10:06:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10180","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-02T10:03:44Z","modified":"2026-10-14T10:06:30Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10354","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-07T10:02:45Z","modified":"2026-10-14T10:06:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10357","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-07T10:02:47Z","modified":"2026-10-14T10:06:35Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10358","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-07T10:02:47Z","modified":"2026-10-14T10:06:35Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10359","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-07T10:02:48Z","modified":"2026-10-14T10:06:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10361","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-07T10:02:49Z","modified":"2026-10-14T10:06:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10362","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-07-07T10:02:49Z","modified":"2026-10-14T10:06:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:14557","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-08-26T10:03:07Z","modified":"2026-10-14T10:07:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:15099","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-09-03T10:03:18Z","modified":"2026-10-14T10:07:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:20181","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-11-12T10:27:42Z","modified":"2026-10-14T10:08:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22019","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-11-26T10:17:15Z","modified":"2026-10-14T10:09:06Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:9526","title":"Red Hat Security Advisory: pam security update","status":"published","published":"2025-06-25T10:06:32Z","modified":"2026-10-14T10:11:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:10027","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:26.98262Z","modified":"2025-07-29T14:59:56.997091Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:14557","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-09-08T14:19:01.104171Z","modified":"2025-09-08T15:03:16.901931Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:15099","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\n* linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-10T05:50:32.805683Z","modified":"2025-10-10T06:32:25.805244Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:20181","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.","status":"published","published":"2026-01-14T09:14:26.918311Z","modified":"2026-01-14T10:00:04.44319Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:9526","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.\n\nSecurity Fix(es):\n\n* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:56.619015Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-6020","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T10:00:00Z","modified":"2026-08-31T17:15:47.680627297Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"ALSA-2025:10027","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  \n\nSecurity Fix(es):  \n\n  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:02:22.188792285Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:14557","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  \n\nSecurity Fix(es):  \n\n  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-08-26T00:00:00Z","modified":"2026-10-29T11:12:04.97584095Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:15099","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  \n\nSecurity Fix(es):  \n\n  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n  * linux-pam: Incomplete fix for CVE-2025-6020 (CVE-2025-8941)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-09-03T00:00:00Z","modified":"2026-10-29T11:32:27.930894804Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:20181","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  \n\nSecurity Fix(es):  \n\n  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2025-11-11T00:00:00Z","modified":"2026-10-29T11:58:15.464285Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:9526","title":"Important: pam security update","description":"Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.  \n\nSecurity Fix(es):  \n\n  * linux-pam: Linux-pam directory Traversal (CVE-2025-6020)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-24T00:00:00Z","modified":"2026-10-29T11:32:14.255010444Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-64113","title":"CVE-2025-6020 affecting package pam for versions less than 1.5.1-8","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T13:15:21Z","modified":"2026-04-21T04:32:18.051359Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"AZL-64142","title":"CVE-2025-6020 affecting package pam for versions less than 1.5.3-5","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.","status":"published","published":"2025-06-17T13:15:21Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"CLSA-2025-1752089633","title":"pam: Fix of CVE-2025-6020","description":"- CVE-2025-6020: fix potential privilege escalationvia multiple symlink attacks\n  and race conditions","status":"published","published":"2025-07-09T19:33:58Z","modified":"2026-06-01T00:31:08.878904189Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1753206847","title":"pam: Fix of CVE-2025-6020","description":"- CVE-2025-6020: privilege elevation to root via multiple symlink attacks\n  and race conditions\n- Perform regression testing","status":"published","published":"2025-07-22T17:54:12Z","modified":"2026-06-01T00:33:21.244318619Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1753206853","title":"pam: Fix of CVE-2025-6020","description":"- CVE-2025-6020: privilege elevation to root via multiple symlink attacks\n  and race conditions\n- Perform regression testing","status":"published","published":"2025-07-22T17:54:18Z","modified":"2026-06-01T00:32:59.249218651Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1753207513","title":"pam: Fix of CVE-2025-6020","description":"- CVE-2025-6020: privilege elevation to root via multiple symlink attacks\n  and race conditions\n- Perform regression testing","status":"published","published":"2025-07-22T18:05:17Z","modified":"2026-06-01T00:33:13.378919783Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1757531273","title":"pam: Fix of CVE-2025-6020","description":"- CVE-2025-6020: fix potential privilege escalation in pam_namspace","status":"published","published":"2025-09-10T19:07:56Z","modified":"2026-06-01T00:33:26.468345616Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1757532130","title":"pam: Fix of CVE-2025-6020","description":"- CVE-2025-6020: fix potential privilege escalation in pam_namspace","status":"published","published":"2025-09-10T19:22:13Z","modified":"2026-06-01T00:33:18.131062391Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1757574151","title":"pam: Fix of CVE-2025-6020","description":"- CVE-2025-6020: fix potential privilege escalation in pam_namspace","status":"published","published":"2025-09-11T07:02:35Z","modified":"2026-06-01T00:33:27.625023712Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1759864577","title":"Fix CVE(s): CVE-2025-6020","description":"   * SECURITY UPDATE: fix privilege escalation in pam_namespace\n     - debian/patches-applied/CVE-2025-6020-pre.patch: prerequisite changes\n     - debian/patches-applied/CVE-2025-6020.patch: enforce proper handling of\n       instance directory symlinks to prevent mounting arbitrary paths\n     - CVE-2025-6020","status":"published","published":"2025-10-07T19:16:21Z","modified":"2026-06-04T10:03:42.295818Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1759864776","title":"Fix CVE(s): CVE-2025-6020","description":"   * SECURITY UPDATE: fix privilege escalation in pam_namespace\n     - debian/patches-applied/CVE-2025-6020-pre.patch: prerequisite changes\n     - debian/patches-applied/CVE-2025-6020.patch: enforce proper handling of\n       instance directory symlinks to prevent mounting arbitrary paths\n     - CVE-2025-6020","status":"published","published":"2025-10-07T19:19:40Z","modified":"2026-06-04T10:03:17.920134Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1766137116","title":"Fix CVE(s): CVE-2025-6020","description":"   * Reworked CVE-2025-6020 patches to preserve ABI compatibility\n     - Add _pam_modutil_sanitize_helper_fds() as a static inline helper\n       in the header for modules\n     - Keep the exported pam_modutil_sanitize_helper_fds() in libpam as a wrapper\n       that calls the new helper","status":"published","published":"2025-12-19T09:38:40Z","modified":"2026-06-04T10:03:56.262151Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1790600614","title":"pam: Fix of 3 CVEs","description":"- Rebase onto the vendor's 1.1.8-23.0.3 sources\n- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2025-6020: take the vendor's fix and carry the parts of ours it\n  omits: upstream 976c2007, namespace.init path-safety flags, helper fd\n  sanitizing\n- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which\n  replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped","status":"published","published":"2026-09-28T13:03:43Z","modified":"2026-10-26T09:43:55.799826458Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790600758","title":"pam: Fix of 3 CVEs","description":"- Rebase onto the vendor's 1.1.8-23.0.3 sources\n- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2025-6020: take the vendor's fix and carry the parts of ours it\n  omits: upstream 976c2007, namespace.init path-safety flags, helper fd\n  sanitizing\n- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which\n  replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped","status":"published","published":"2026-09-28T13:06:06Z","modified":"2026-10-26T09:43:12.384792553Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790601003","title":"pam: Fix of 3 CVEs","description":"- Rebase onto the vendor's 1.1.8-23.0.3 sources\n- CVE-2024-10041: fix possibility of leakage of secret information\n  stored in memory\n- CVE-2025-6020: take the vendor's fix and carry the parts of ours it\n  omits: upstream 976c2007, namespace.init path-safety flags, helper fd\n  sanitizing\n- CVE-2024-22365 is now fixed by the vendor's pam_namespace rewrite, which\n  replaces protect_dir() with secure_opendir(); the TuxCare duplicate is dropped","status":"published","published":"2026-09-30T16:33:34Z","modified":"2026-10-26T09:43:55.560524321Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"DLA-4306-1","title":"pam - security update","status":"published","published":"2025-09-21T00:00:00Z","modified":"2026-03-09T02:10:58.676646Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2025:15256-1","title":"pam-1.7.1-1.1 on GA media","description":"These are all security issues fixed in the pam-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:33.326572Z","updated_at":"2026-11-02T16:58:37.399567Z"}]},"sources_more":{"osv":6}}