Oracle Linux Security Advisory ELSA-2025-10027 http://linux.oracle.com/errata/ELSA-2025-10027.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: pam-1.3.1-37.0.1.el8_10.i686.rpm pam-1.3.1-37.0.1.el8_10.x86_64.rpm pam-devel-1.3.1-37.0.1.el8_10.i686.rpm pam-devel-1.3.1-37.0.1.el8_10.x86_64.rpm aarch64: pam-1.3.1-37.0.1.el8_10.aarch64.rpm pam-devel-1.3.1-37.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/pam-1.3.1-37.0.1.el8_10.src.rpm Related CVEs: CVE-2025-6020 Description of changes: [1.3.1-37.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36272695] [1.3.1-37] - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata
