Summary
This update for pam_pkcs11 fixes the following issues:
- Removes pam_env from auth stack for security reason [bsc#1243226]
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLE Micro 6.1 Linux Micro 6.1 | pam_pkcs11 | 0.6.12-slfo.1.1_4.1 |
Vulnerabilities 1
-
High 7.8CVE-2025-6018 Public exploit
Pam-config: lpe from unprivileged to allow_active in pam
A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges n…