Description
A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | SUSE Linux Enterprise Desktop 15 SP5 | ? – < 3.7.3-150500.3.5.1 | 3.7.3-150500.3.5.1 |
| SUSE | SUSE Linux Enterprise High Performance Computing 15 SP5 | ? – < 3.7.3-150500.3.5.1 | 3.7.3-150500.3.5.1 |
| SUSE | openSUSE Leap 15.5 | ? – < 3.7.3-150500.3.5.1 | 3.7.3-150500.3.5.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | postfix +1 | 3.7.3-150500.3.5.1 | SUSE-SU-2023:3394-1 |
| SLES 15 SP4 | postfix +1 | 3.5.9-150300.5.12.2 | SUSE-SU-2023:3945-1 |
| SLES 12 SP5 | postfix | 3.2.10-3.27.2 | SUSE-SU-2023:3732-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | postfix | 3.2.10-3.27.2 | SUSE-SU-2023:3732-1 |
| SUSE Manager Server 4.2 | postfix | 3.5.9-150300.5.12.2 | SUSE-SU-2023:3945-1 |
| SUSE Manager Proxy 4.2 | postfix | 3.5.9-150300.5.12.2 | SUSE-SU-2023:3945-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | postfix | 3.8.3-1.1 | openSUSE-SU-2024:13416-1 |
| openSUSE Leap 15.5 | postfix +1 | 3.7.3-150500.3.5.1 | SUSE-SU-2023:3394-1 |
| openSUSE Leap 15.4 | postfix | 3.4.7-150200.3.12.2 | SUSE-SU-2023:3945-1, SUSE-SU-2023:3791-1 |
| openSUSE Leap 15.4 | postfix-bdb | 3.5.9-150300.5.12.2 | SUSE-SU-2023:3945-1 |
Advisories 6
- SUSE-SU-2023:3732-1 Security update for postfix SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3945-1 Security update for postfix SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3791-1 Security update for postfix SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13416-1 postfix-3.8.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:3394-1 Security update for postfix SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2023-2122 SUSE Linux: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Oct 3, 2023