{"id":"SUSE-SU-2025:20844-1","aliases":[],"status":"published","title":"Security update for aaa_base","description":"This update for aaa_base fixes the following issues:\n\nUpdate to version 84.87+git20240906.742565b:\n\n  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)\n  * Avoid unnecessary /bin/bash dependency\n  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)\n\nUpdate to version 84.87+git20240821.fbabe1d:\n\n  * Add helper service for soft-reboot\n\nUpdate to version 84.87+git20240809.5d13eb4:\n\n  * cleanup aaa_base.post and fold back into specfile\n\nUpdate to version 84.87+git20240805.7513b28:\n\n  * Remove obsolete resolv+ manual page\n  * Remove obsolete defaultdomain.5 manual page\n  * Move /etc/skel to /usr/etc/skel (hermetic-usr)\n  * Remove obsolete refresh_initrd\n  * Add deprecation notice for service [jsc#PED-266]\n\nUpdate to version 84.87+git20240801.75f05dd:\n\n  * sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117)\n\nUpdate to version 84.87+git20240620.57ee9e1:\n\n  * Remove legacy-actions support [jsc#PED-264]\n\nUpdate to version 84.87+git20240617.f5ff27f:\n\n  * add /usr/bin/nu to etc/shells for nushell\n\nUpdate to version 84.87+git20240614.332933e:\n\n  * Do not save/restore cursor for foot at status line\n  * Add tmux and others to DIR_COLORS (Issue #116)\n  * Remove kernel.pid_max limit (bsc#1219038)\n  * Add subpackge to enable ptrace\n\nUpdate to version 84.87+git20240523.10a5692:\n\n  * Add tmpfiles.d/soft-reboot-cleanup.conf\n\nUpdate to version 84.87+git20240415.e6815bf:\n\n  * drop obsolete 50-default-s390.conf (bsc#1211721)\n  * fix typo in alljava.csh and drop stderr redirection\n\nUpdate to version 84.87+git20240402.16596d1:\n\n  * add alacritty to DIR_COLORS\n  * Make sure tput it present before resetting TERM\n  * Add mc helpers for both tcsh and bash resources\n  * Do not overwrite escape sequences for xterm like\n  * Check for valid TERM\n\nUpdate to version 84.87+git20240202.9526d46:\n\n  * properly shorten the variable when setting JAVA_HOME and JRE_HOME\n  * silence output of alljava\n  * Restrict ptrace with Yama LSM by default\n  * patch alljava.sh and alljava.csh, use the links from update alternatives\n\nUpdate to version 84.87+git20231023.f347d36:\n\n  * Remove %ghost lastlog entry, lastlog is long gone\n  * Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-10-09T14:42:20Z","modified":"2026-03-23T04:47:09Z","fixes":[{"ecosystem":"SUSE:Linux Micro 6.0","package":"aaa_base","fixed_in":["84.87+git20240906.742565b-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"aaa_base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"84.87+git20240906.742565b-1.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520844-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1159103","tags":["report"]},{"url":"https://bugzilla.suse.com/1211721","tags":["report"]},{"url":"https://bugzilla.suse.com/1219038","tags":["report"]},{"url":"https://bugzilla.suse.com/1221763","tags":["report"]},{"url":"https://bugzilla.suse.com/1227117","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2025:20844-1","title":"Security update for aaa_base","description":"This update for aaa_base fixes the following issues:\n\nUpdate to version 84.87+git20240906.742565b:\n\n  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)\n  * Avoid unnecessary /bin/bash dependency\n  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)\n\nUpdate to version 84.87+git20240821.fbabe1d:\n\n  * Add helper service for soft-reboot\n\nUpdate to version 84.87+git20240809.5d13eb4:\n\n  * cleanup aaa_base.post and fold back into specfile\n\nUpdate to version 84.87+git20240805.7513b28:\n\n  * Remove obsolete resolv+ manual page\n  * Remove obsolete defaultdomain.5 manual page\n  * Move /etc/skel to /usr/etc/skel (hermetic-usr)\n  * Remove obsolete refresh_initrd\n  * Add deprecation notice for service [jsc#PED-266]\n\nUpdate to version 84.87+git20240801.75f05dd:\n\n  * sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117)\n\nUpdate to version 84.87+git20240620.57ee9e1:\n\n  * Remove legacy-actions support [jsc#PED-264]\n\nUpdate to version 84.87+git20240617.f5ff27f:\n\n  * add /usr/bin/nu to etc/shells for nushell\n\nUpdate to version 84.87+git20240614.332933e:\n\n  * Do not save/restore cursor for foot at status line\n  * Add tmux and others to DIR_COLORS (Issue #116)\n  * Remove kernel.pid_max limit (bsc#1219038)\n  * Add subpackge to enable ptrace\n\nUpdate to version 84.87+git20240523.10a5692:\n\n  * Add tmpfiles.d/soft-reboot-cleanup.conf\n\nUpdate to version 84.87+git20240415.e6815bf:\n\n  * drop obsolete 50-default-s390.conf (bsc#1211721)\n  * fix typo in alljava.csh and drop stderr redirection\n\nUpdate to version 84.87+git20240402.16596d1:\n\n  * add alacritty to DIR_COLORS\n  * Make sure tput it present before resetting TERM\n  * Add mc helpers for both tcsh and bash resources\n  * Do not overwrite escape sequences for xterm like\n  * Check for valid TERM\n\nUpdate to version 84.87+git20240202.9526d46:\n\n  * properly shorten the variable when setting JAVA_HOME and JRE_HOME\n  * silence output of alljava\n  * Restrict ptrace with Yama LSM by default\n  * patch alljava.sh and alljava.csh, use the links from update alternatives\n\nUpdate to version 84.87+git20231023.f347d36:\n\n  * Remove %ghost lastlog entry, lastlog is long gone\n  * Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103)\n\n","status":"published","published":"2025-10-09T14:42:20Z","modified":"2026-03-23T04:47:09.446287Z","updated_at":"2026-11-02T15:53:59.92114Z"}]}}