RLSA-2025:20145

Synopsis

Low: shadow-utils security update

Description

The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts.

Security Fix(es):

* shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise (CVE-2024-56433)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2334165

CVEs

CVE-2024-56433

Affected packages

Rocky Linux 10 aarch64 - BaseOS

shadow-utils-2:4.15.0-8.el10.aarch64.rpm shadow-utils-2:4.15.0-8.el10.src.rpm shadow-utils-debuginfo-2:4.15.0-8.el10.aarch64.rpm shadow-utils-debugsource-2:4.15.0-8.el10.aarch64.rpm shadow-utils-subid-2:4.15.0-8.el10.aarch64.rpm shadow-utils-subid-debuginfo-2:4.15.0-8.el10.aarch64.rpm

Rocky Linux 10 ppc64le - BaseOS

shadow-utils-2:4.15.0-8.el10.ppc64le.rpm shadow-utils-2:4.15.0-8.el10.src.rpm shadow-utils-debuginfo-2:4.15.0-8.el10.ppc64le.rpm shadow-utils-debugsource-2:4.15.0-8.el10.ppc64le.rpm shadow-utils-subid-2:4.15.0-8.el10.ppc64le.rpm shadow-utils-subid-debuginfo-2:4.15.0-8.el10.ppc64le.rpm

Rocky Linux 10 s390x - BaseOS

shadow-utils-2:4.15.0-8.el10.s390x.rpm shadow-utils-2:4.15.0-8.el10.src.rpm shadow-utils-debuginfo-2:4.15.0-8.el10.s390x.rpm shadow-utils-debugsource-2:4.15.0-8.el10.s390x.rpm shadow-utils-subid-2:4.15.0-8.el10.s390x.rpm shadow-utils-subid-debuginfo-2:4.15.0-8.el10.s390x.rpm

Rocky Linux 10 x86_64 - BaseOS

shadow-utils-2:4.15.0-8.el10.src.rpm shadow-utils-2:4.15.0-8.el10.x86_64.rpm shadow-utils-debuginfo-2:4.15.0-8.el10.x86_64.rpm shadow-utils-debugsource-2:4.15.0-8.el10.x86_64.rpm shadow-utils-subid-2:4.15.0-8.el10.x86_64.rpm shadow-utils-subid-debuginfo-2:4.15.0-8.el10.x86_64.rpm

Rocky Linux 10 aarch64 - CRB

shadow-utils-subid-devel-2:4.15.0-8.el10.aarch64.rpm

Rocky Linux 10 ppc64le - CRB

shadow-utils-subid-devel-2:4.15.0-8.el10.ppc64le.rpm

Rocky Linux 10 s390x - CRB

shadow-utils-subid-devel-2:4.15.0-8.el10.s390x.rpm

Rocky Linux 10 x86_64 - CRB

shadow-utils-subid-devel-2:4.15.0-8.el10.x86_64.rpm