Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 499
Alerts This Week
Warning Icon 1 499

openSUSE: 2025:1135-1 moderate: apparmor execution issue

opensuse
Calendar Grey April 3, 2025
Scroller Opensuse
New release for openSUSE fixes an apparmor vulnerability permitting direct execution from /sbin directory.
An update that has one security fix can now be installed.

Description

This update for apparmor fixes the following issue:

* Allow dovecot-auth to execute unix check password from /sbin, not only from

/usr/bin (bsc#1234452).

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.3

zypper in -t patch SUSE-2025-1135=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3

zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1135=1

* SUSE Linux Enterprise Server 15 SP3 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1135=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP3

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1135=1

* SUSE Enterprise Storage 7.1

zypper in -t patch SUSE-Storage-7.1-2025-1135=1

* SUSE Linux Enterprise Micro 5.1

zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-1135=1

* SUSE Linux Enterprise Micro 5.2

zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1135=1

* SUSE Linux Enterprise Micro for Rancher 5.2

zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1135=1

Package List

* openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586)

* pam_apparmor-debuginfo-2.13.6-150300.3.18.2

* perl-apparmor-debuginfo-2.13.6-150300.3.18.2

* apache2-mod_apparmor-debuginfo-2.13.6-150300.3.18.2

* libapparmor-devel-2.13.6-150300.3.18.2

* apparmor-debugsource-2.13.6-150300.3.18.2

* python3-apparmor-2.13.6-150300.3.18.2

* apache2-mod_apparmor-2.13.6-150300.3.18.2

* perl-apparmor-2.13.6-150300.3.18.2

* ruby-apparmor-debuginfo-2.13.6-150300.3.18.2

* apparmor-parser-2.13.6-150300.3.18.2

* libapparmor-debugsource-2.13.6-150300.3.18.2

* ruby-apparmor-2.13.6-150300.3.18.2

* libapparmor1-debuginfo-2.13.6-150300.3.18.2

* libapparmor1-2.13.6-150300.3.18.2

* pam_apparmor-2.13.6-150300.3.18.2

* python3-apparmor-debuginfo-2.13.6-150300.3.18.2

* apparmor-parser-debuginfo-2.13.6-150300.3.18.2

* openSUSE Leap 15.3 (noarch)

* apparmor-profiles-2.13.6-150300.3.18.2

* apparmor-abstractions-2.13.6-150300.3.18.2

* apparmor-docs-2.13.6-150300.3.18.2

* apparmor-utils-lang-2.13.6-150300.3.18.2

*...

Read the Full Advisory

References

* bsc#1234452

## References:

* https://bugzilla.suse.com/show_bug.cgi?id=1234452

Announcement ID: SUSE-SU-2025:1135-1
Release Date: 2025-04-03T14:18:32Z
Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.