Amazon Linux 2023 Security Advisory: ALAS2023-2025-1121
Advisory Released Date: 2025-08-08
Advisory Updated Date: 2025-08-08
Severity:
Medium
Issue Overview:
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions. (CVE-2025-6020)
Affected Packages:
pam
Issue Correction:
Run dnf update pam --releasever 2023.8.20250808 or dnf update --advisory ALAS2023-2025-1121 --releasever 2023.8.20250808 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
pam-docs-1.5.1-8.amzn2023.0.6.aarch64
pam-devel-1.5.1-8.amzn2023.0.6.aarch64
pam-debugsource-1.5.1-8.amzn2023.0.6.aarch64
pam-debuginfo-1.5.1-8.amzn2023.0.6.aarch64
pam-1.5.1-8.amzn2023.0.6.aarch64
src:
pam-1.5.1-8.amzn2023.0.6.src
x86_64:
pam-docs-1.5.1-8.amzn2023.0.6.x86_64
pam-devel-1.5.1-8.amzn2023.0.6.x86_64
pam-debugsource-1.5.1-8.amzn2023.0.6.x86_64
pam-debuginfo-1.5.1-8.amzn2023.0.6.x86_64
pam-1.5.1-8.amzn2023.0.6.x86_64