<div class="container">
<h1>Security update for aaa_base</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2025:20844-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2025-10-09T14:42:20Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1159103">bsc#1159103</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211721">bsc#1211721</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1219038">bsc#1219038</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221763">bsc#1221763</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1227117">bsc#1227117</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-264">jsc#PED-264</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-266">jsc#PED-266</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Micro 6.0</li>
<li class="list-group-item">SUSE Linux Micro Extras 6.0</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains two features and has five fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for aaa_base fixes the following issues:</p>
<p>Update to version 84.87+git20240906.742565b:</p>
<ul>
<li>yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)</li>
<li>Avoid unnecessary /bin/bash dependency</li>
<li>sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)</li>
</ul>
<p>Update to version 84.87+git20240821.fbabe1d:</p>
<ul>
<li>Add helper service for soft-reboot</li>
</ul>
<p>Update to version 84.87+git20240809.5d13eb4:</p>
<ul>
<li>cleanup aaa_base.post and fold back into specfile</li>
</ul>
<p>Update to version 84.87+git20240805.7513b28:</p>
<ul>
<li>Remove obsolete resolv+ manual page</li>
<li>Remove obsolete defaultdomain.5 manual page</li>
<li>Move /etc/skel to /usr/etc/skel (hermetic-usr)</li>
<li>Remove obsolete refresh_initrd</li>
<li>Add deprecation notice for service [jsc#PED-266]</li>
</ul>
<p>Update to version 84.87+git20240801.75f05dd:</p>
<ul>
<li>sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117)</li>
</ul>
<p>Update to version 84.87+git20240620.57ee9e1:</p>
<ul>
<li>Remove legacy-actions support [jsc#PED-264]</li>
</ul>
<p>Update to version 84.87+git20240617.f5ff27f:</p>
<ul>
<li>add /usr/bin/nu to etc/shells for nushell</li>
</ul>
<p>Update to version 84.87+git20240614.332933e:</p>
<ul>
<li>Do not save/restore cursor for foot at status line</li>
<li>Add tmux and others to DIR_COLORS (Issue #116)</li>
<li>Remove kernel.pid_max limit (bsc#1219038)</li>
<li>Add subpackge to enable ptrace</li>
</ul>
<p>Update to version 84.87+git20240523.10a5692:</p>
<ul>
<li>Add tmpfiles.d/soft-reboot-cleanup.conf</li>
</ul>
<p>Update to version 84.87+git20240415.e6815bf:</p>
<ul>
<li>drop obsolete 50-default-s390.conf (bsc#1211721)</li>
<li>fix typo in alljava.csh and drop stderr redirection</li>
</ul>
<p>Update to version 84.87+git20240402.16596d1:</p>
<ul>
<li>add alacritty to DIR_COLORS</li>
<li>Make sure tput it present before resetting TERM</li>
<li>Add mc helpers for both tcsh and bash resources</li>
<li>Do not overwrite escape sequences for xterm like</li>
<li>Check for valid TERM</li>
</ul>
<p>Update to version 84.87+git20240202.9526d46:</p>
<ul>
<li>properly shorten the variable when setting JAVA_HOME and JRE_HOME</li>
<li>silence output of alljava</li>
<li>Restrict ptrace with Yama LSM by default</li>
<li>patch alljava.sh and alljava.csh, use the links from update alternatives</li>
</ul>
<p>Update to version 84.87+git20231023.f347d36:</p>
<ul>
<li>Remove %ghost lastlog entry, lastlog is long gone</li>
<li>Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103)</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Micro 6.0
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-6.0-485=1</code>
</li>
<li class="list-group-item">
SUSE Linux Micro Extras 6.0
<br/>
<code>zypper in -t patch SUSE-SLE-Micro-6.0-485=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Micro 6.0 (aarch64 s390x x86_64)
<ul>
<li>aaa_base-debugsource-84.87+git20240906.742565b-1.1</li>
<li>aaa_base-84.87+git20240906.742565b-1.1</li>
<li>aaa_base-debuginfo-84.87+git20240906.742565b-1.1</li>
</ul>
</li>
<li>
SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64)
<ul>
<li>aaa_base-debugsource-84.87+git20240906.742565b-1.1</li>
<li>aaa_base-malloccheck-84.87+git20240906.742565b-1.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1159103">https://bugzilla.suse.com/show_bug.cgi?id=1159103</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211721">https://bugzilla.suse.com/show_bug.cgi?id=1211721</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1219038">https://bugzilla.suse.com/show_bug.cgi?id=1219038</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1221763">https://bugzilla.suse.com/show_bug.cgi?id=1221763</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1227117">https://bugzilla.suse.com/show_bug.cgi?id=1227117</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-264">https://jira.suse.com/browse/PED-264</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-266">https://jira.suse.com/browse/PED-266</a>
</li>
</ul>
</div>