This update for shim fixes the following issues:
- Updated openSUSE x86 signature
- Avoid the error message during linux system boot (boo#1184454)
- Prevent the build id being added to the binary. That can cause issues
with the signature
Update to 15.4 (boo#1182057)
+ Rename the SBAT variable and fix the self-check of SBAT
+ sbat: add more dprint()
+ arm/aa64: Swizzle some sections to make old sbsign happier
+ arm/aa64 targets: put .rel* and .dyn* in .rodata
- Change the SBAT variable name and enhance the handling of SBAT
(boo#1182057)
Update to 15.3 for SBAT support (boo#1182057)
+ Drop gnu-efi from BuildRequires since upstream pull it into the
- Generate vender-specific SBAT metadata
+ Add dos2unix to BuildRequires since Makefile requires it for vendor
SBAT
- Update dbx-cert.tar.xz and vendor-dbx.bin to block the following sign
keys:
+ SLES-UEFI-SIGN-Certificate-2020-07.crt
+...
Read the Full AdvisoryPatch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.2:
zypper in -t patch openSUSE-2021-598=1
- openSUSE Leap 15.2 (x86_64):
shim-15.4-lp152.4.8.1
shim-debuginfo-15.4-lp152.4.8.1
shim-debugsource-15.4-lp152.4.8.1
https://www.suse.com/security/cve/CVE-2019-14584.html
https://bugzilla.suse.com/1173411
https://bugzilla.suse.com/1174512
https://bugzilla.suse.com/1175509
https://bugzilla.suse.com/1177315
https://bugzilla.suse.com/1177404
https://bugzilla.suse.com/1177789
https://bugzilla.suse.com/1182057
https://bugzilla.suse.com/1184454
Get the latest Linux and open source security news straight to your inbox.