SUSE-SU-2025:1517-1

Add dacreadsearch capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)

References

Affected packages

SUSE:Linux Enterprise Server 12 SP5-LTSS / apparmor

Package

Name: apparmor
Purl: pkg:rpm/suse/apparmor&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.2-56.26.1

Ecosystem specific

{
    "binaries": [
        {
            "libapparmor1-32bit": "2.8.2-56.26.1",
            "apparmor-parser": "2.8.2-56.26.1",
            "apache2-mod_apparmor": "2.8.2-56.26.1",
            "apparmor-docs": "2.8.2-56.26.1",
            "pam_apparmor": "2.8.2-56.26.1",
            "libapparmor1": "2.8.2-56.26.1",
            "pam_apparmor-32bit": "2.8.2-56.26.1",
            "apparmor-utils": "2.8.2-56.26.1",
            "apparmor-profiles": "2.8.2-56.26.1",
            "libapparmor-devel": "2.8.2-56.26.1",
            "perl-apparmor": "2.8.2-56.26.1"
        }
    ]
}

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / apparmor

Package

Name: apparmor
Purl: pkg:rpm/suse/apparmor&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.2-56.26.1

Ecosystem specific

{
    "binaries": [
        {
            "libapparmor1-32bit": "2.8.2-56.26.1",
            "apparmor-parser": "2.8.2-56.26.1",
            "apache2-mod_apparmor": "2.8.2-56.26.1",
            "apparmor-docs": "2.8.2-56.26.1",
            "pam_apparmor": "2.8.2-56.26.1",
            "libapparmor1": "2.8.2-56.26.1",
            "pam_apparmor-32bit": "2.8.2-56.26.1",
            "apparmor-utils": "2.8.2-56.26.1",
            "apparmor-profiles": "2.8.2-56.26.1",
            "libapparmor-devel": "2.8.2-56.26.1",
            "perl-apparmor": "2.8.2-56.26.1"
        }
    ]
}