Security update for apparmor

🗓️ 29 May 2025 09:40:04Reported by SuseType

suse🔗 www.suse.com👁 4 Views

AppArmor update adds dac_read_search for unix_chkpwd to read the shadow file after the PAM fix.

Reporter	Title	Published	Views	Family All 183
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2025.	5 May 202516:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in PAM affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	28 Mar 202515:53	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	17 Apr 202513:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to PAM, go-git and Golang.org/X/Crypto	27 Feb 202503:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Base OS issues	2 Apr 202517:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2025	28 May 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	17 Oct 202515:08	–	ibm
ATTACKERKB	CVE-2024-10041	23 Oct 202414:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : pam, pam-devel (ALAS2023-2025-1132)	4 Aug 202500:00	–	nessus

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
suse	www.suse.com/security/cve/CVE-2024-10041.html
suse	www.suse.com/security/cve/CVE-2024-10041.html
bugzilla	www.bugzilla.suse.com/show_bug.cgi

29 May 2025 09:40Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14.7

CVSS 45.7

EPSS0.00265

dac read search unix chkpwd shadow file shadow permissions zero security update