Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: 2025:20427-1 critical: pam vulnerability CVE-2025-6020 fix

suse
Calendar Grey June 26, 2025
Dist Suse Esm H88
Crucial patch for pam addressing CVE-2025-6020 vulnerabilities to enhance SUSE security and safeguard systems from threats
* bsc#1244509 Cross-References: * CVE-2025-6020

Summary

## This update for pam fixes the following issues: * CVE-2025-6020: pam_namespace: convert functions that may operate on a user- controlled path to operate on file descriptors instead of absolute path. And keep the bind-mount protection from protect_mount() as a defense in depthmeasure. (bsc#1244509) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-361=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * pam-1.6.0-5.1 * pam-debuginfo-1.6.0-5.1 * pam-debugsource-1.6.0-5.1

Topics%20covered

Topics Covered

security advisory threat vulnerability important suse pam

References

* bsc#1244509

Cross-

* CVE-2025-6020

CVSS scores:

* CVE-2025-6020 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Micro 6.0

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2025-6020.html

* https://bugzilla.suse.com/show_bug.cgi?id=1244509

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20427-1
Release Date: 2025-06-19T08:55:37Z
Rating: important

Topics%20covered

Topics Covered

security advisory threat vulnerability important suse pam

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here