Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

SUSE: 2025:02001-1 important: pam environment security risk

suse
Calendar Grey June 18, 2025
Scroller Suse
Important security patch for SUSE enhances protection against threats in user configuration files and directory path management.
* bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018

Summary

## This update for pam fixes the following issues: * CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). * pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors instead of absolute path (bsc#1244509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2001=1 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2025-2001=1 ## Package List:

Topics%20covered

Topics Covered

security advisory security issue local privilege escalation important suse pam

References

* bsc#1243226

* bsc#1244509

Cross-

* CVE-2025-6018

CVSS scores:

* CVE-2025-6018 ( SUSE ): 8.6

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-6018 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that solves one vulnerability and has one security fix can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2025-6018.html

* https://bugzilla.suse.com/show_bug.cgi?id=1243226

* https://bugzilla.suse.com/show_bug.cgi?id=1244509

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:02001-1
Release Date: 2025-06-18T11:21:30Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue local privilege escalation important suse pam

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.