gpp_maybe
Security update for pcr-oracle, shim
SUSE-SLE-Micro-6.0-225
This update for pcr-oracle, shim fixes the following issues: pcr-oracle: - predict SbatLevelRT for the next boot (bsc#1230316) shim was updated to version 15.8: - Update shim-install to use the 'removable' way for encrypted SL-Micro images (bsc#1230316) * Always use the removable way for SL-Micro * Limit the removable option to encrypted SL-Micro Security issues fixed: - mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546) - avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547) - Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548) - Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549) - pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550) - pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)
-
Release DateMar 7 2025
-
ReferencesBugzilla: 1215098, 1215099, 1215100, 1215101, 1215102, 1215103, 1230316
CVEs: CVE-2023-40546, CVE-2023-40547, CVE-2023-40548, CVE-2023-40549, CVE-2023-40550, CVE-2023-40551 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Micro 6.0 aarch64
-
Packages
SUSE Linux Micro 6.0 x86_64
-
Packages