diff options
| author | Anders Heimer <anders.heimer@est.tech> | 2025-10-21 15:59:22 +0200 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-11-03 07:17:01 -0800 |
| commit | 251d8b676e98fee2b2a9dc0dda2caede9f5acb19 (patch) | |
| tree | 4b31d09a2e04d345ad3c252e509bcd1623c71566 | |
| parent | ad597f4a54ec5b51677160d537b87b1b7e3828db (diff) | |
| download | poky-251d8b676e98fee2b2a9dc0dda2caede9f5acb19.tar.gz | |
libpam: mark CVE-2025-6018 as not applicable
CVE-2025-6018 is a local privilege escalation in PAM that requires
`user_readenv=1` to be enabled in the PAM configuration. The default
configuration does not enable reading user environment files (user_readenv
is 0 by default). Hence this vulnerability cannot be exploited using the
default configuration.
(From OE-Core rev: 3f2a9ad03326dc87681cf47ed5f73712ebaa624c)
Signed-off-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-extended/pam/libpam_1.5.3.bb | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/meta/recipes-extended/pam/libpam_1.5.3.bb b/meta/recipes-extended/pam/libpam_1.5.3.bb index 4c27767ab1..79a0e9f694 100644 --- a/meta/recipes-extended/pam/libpam_1.5.3.bb +++ b/meta/recipes-extended/pam/libpam_1.5.3.bb | |||
| @@ -39,6 +39,8 @@ SRC_URI = "${GITHUB_BASE_URI}/download/v${PV}/Linux-PAM-${PV}.tar.xz \ | |||
| 39 | 39 | ||
| 40 | SRC_URI[sha256sum] = "7ac4b50feee004a9fa88f1dfd2d2fa738a82896763050cd773b3c54b0a818283" | 40 | SRC_URI[sha256sum] = "7ac4b50feee004a9fa88f1dfd2d2fa738a82896763050cd773b3c54b0a818283" |
| 41 | 41 | ||
| 42 | CVE_STATUS[CVE-2025-6018] = "not-applicable-config: Default PAM config does not use user_readenv=1" | ||
| 43 | |||
| 42 | DEPENDS = "bison-native flex-native libxml2-native virtual/crypt" | 44 | DEPENDS = "bison-native flex-native libxml2-native virtual/crypt" |
| 43 | 45 | ||
| 44 | EXTRA_OECONF = "--includedir=${includedir}/security \ | 46 | EXTRA_OECONF = "--includedir=${includedir}/security \ |