SUSE-SU-2025:1517-1

Source
https://www.suse.com/support/update/announcement/2025/suse-su-20251517-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:1517-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2025:1517-1
Upstream
Related
Published
2025-05-08T19:35:48Z
Modified
2026-02-04T02:39:44Z
Summary
Security update for apparmor
Details

This update for apparmor fixes the following issues:

  • Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)
References

Affected packages

SUSE:Linux Enterprise Server 12 SP5-LTSS / apparmor

Package

Name
apparmor
Purl
pkg:rpm/suse/apparmor&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-56.26.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2-mod_apparmor":  "2.8.2-56.26.1",
            "apparmor-docs":  "2.8.2-56.26.1",
            "apparmor-parser":  "2.8.2-56.26.1",
            "apparmor-profiles":  "2.8.2-56.26.1",
            "apparmor-utils":  "2.8.2-56.26.1",
            "libapparmor-devel":  "2.8.2-56.26.1",
            "libapparmor1":  "2.8.2-56.26.1",
            "libapparmor1-32bit":  "2.8.2-56.26.1",
            "pam_apparmor":  "2.8.2-56.26.1",
            "pam_apparmor-32bit":  "2.8.2-56.26.1",
            "perl-apparmor":  "2.8.2-56.26.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:1517-1.json"

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / apparmor

Package

Name
apparmor
Purl
pkg:rpm/suse/apparmor&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.2-56.26.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2-mod_apparmor":  "2.8.2-56.26.1",
            "apparmor-docs":  "2.8.2-56.26.1",
            "apparmor-parser":  "2.8.2-56.26.1",
            "apparmor-profiles":  "2.8.2-56.26.1",
            "apparmor-utils":  "2.8.2-56.26.1",
            "libapparmor-devel":  "2.8.2-56.26.1",
            "libapparmor1":  "2.8.2-56.26.1",
            "libapparmor1-32bit":  "2.8.2-56.26.1",
            "pam_apparmor":  "2.8.2-56.26.1",
            "pam_apparmor-32bit":  "2.8.2-56.26.1",
            "perl-apparmor":  "2.8.2-56.26.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:1517-1.json"