PAM & Debian Security Advisory DSA 5907-1

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

In April 2025, Debian released the DSA 5907-1 Linux Security Update which addressed a list of vulnerabilities with the 6.1.135-1 kernel update. Is this kernel update included in any PAM version?

Resolution

The PAM 4.2.3 release update the kernel to 6.1.141, addressing the DSA 5907-1 security update.

# cat /var/uag/config/uagversion
4.2.3.60
# uname -a
Linux pam-demo1 6.1.141+pam01 #1 SMP Fri Jun  6 11:24:11 PDT 2025 x86_64 GNU/Linux

As KB143290 - Can I access, configure or upgrade PAM or the underlying OS? states, it is not possible to upgrade the kernel for a PAM appliance aside from applying the PAM upgrade patch. In order to address DSA 5907-1, upgrade to the 4.2.3 release.