Red Hat Security Advisory

RHSA-2025:20559

shadow-utils security update

Released 2025-11-11 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) shadow-utils-2:4.9-15.el9, shadow-utils-subid-2:4.9-15.el9
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) shadow-utils-subid-devel-2:4.9-15.el9

Fixes 1 record

TI-2024-37351 CVE-2024-56433 · GHSA-7683-vm2j-m4cc

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior…

LOW 18

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on local…

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00426 Published 2024-12-26 Partial fix CWE-1188