An AlmaLinux security update has been released for AlmaLinux 8. The update addresses a security vulnerability in Pluggable Authentication Modules (PAM) known as Linux-PAM directory traversal (CVE-2025-6020). This issue affects the linux-pam package, and users are advised to refer to the CVE page listed in the References section for more information on the security issue's impact.

ALSA-2025:14557: pam security update (Important)

ALSA-2025:14557: pam security update (Important)

Hi,

You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux.

AlmaLinux: 8
Type: Security
Severity: Important
Release date: 2025-09-04

Summary:

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.

Security Fix(es):

* linux-pam: Linux-pam directory Traversal (CVE-2025-6020)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2025-14557.html

This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/.
Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org.

Kind regards,
AlmaLinux Team