Anders Heimer 251d8b676e libpam: mark CVE-2025-6018 as not applicable ...

CVE-2025-6018 is a local privilege escalation in PAM that requires
`user_readenv=1` to be enabled in the PAM configuration. The default
configuration does not enable reading user environment files (user_readenv
is 0 by default). Hence this vulnerability cannot be exploited using the
default configuration.

(From OE-Core rev: 3f2a9ad03326dc87681cf47ed5f73712ebaa624c)

Signed-off-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-11-03 07:17:01 -08:00

..

libpam

libpam: fix CVE-2024-10963

2025-09-09 09:08:09 -07:00

libpam_1.5.3.bb

libpam: mark CVE-2025-6018 as not applicable

2025-11-03 07:17:01 -08:00