Announcement ID: | SUSE-SU-2024:1368-1 |
---|---|
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves seven vulnerabilities, contains one feature and has five security fixes can now be installed.
This update for shim fixes the following issues:
Update to version 15.8:
Security issues fixed:
The NX flag is disable which is same as the default value of shim-15.8, hence, not need to enable it by this patch now.
Adopt the macros from fde-tpm-helper-macros to update the signature in the sealed key after a bootloader upgrade
Update shim-install to amend full disk encryption support
Do not use tpm_record_pcrs unless the command is in command.lst
Removed POST_PROCESS_PE_FLAGS=-N from the build command in shim.spec to enable the NX compatibility flag when using post-process-pe after discussed with grub2 experts in mail. It's useful for further development and testing. (bsc#1205588)
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch SUSE-2024-1368=1
zypper in -t patch openSUSE-Leap-Micro-5.3-2024-1368=1
zypper in -t patch openSUSE-Leap-Micro-5.4-2024-1368=1
zypper in -t patch openSUSE-SLE-15.5-2024-1368=1
zypper in -t patch SUSE-SLE-Micro-5.3-2024-1368=1
zypper in -t patch SUSE-SLE-Micro-5.3-2024-1368=1
zypper in -t patch SUSE-SLE-Micro-5.4-2024-1368=1
zypper in -t patch SUSE-SLE-Micro-5.4-2024-1368=1
zypper in -t patch SUSE-SLE-Micro-5.5-2024-1368=1
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1368=1
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1368=1
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-1368=1
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-1368=1
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-1368=1
zypper in -t patch SUSE-Storage-7.1-2024-1368=1
zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-1368=1
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1368=1
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-1368=1