Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE Linux Micro 6.0: 2025:20136-1 important: pcr-oracle, shim

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
Crucial announcement from SUSE regarding the resolution of various security vulnerabilities identified in pcr-oracle and shim, improving overall system security.
* bsc#1215098 * bsc#1215099 * bsc#1215100 * bsc#1215101 * bsc#1215102

Summary

## This update for pcr-oracle, shim fixes the following issues: pcr-oracle: * predict SbatLevelRT for the next boot (bsc#1230316) shim was updated to version 15.8: * Update shim-install to use the 'removable' way for encrypted SL-Micro images (bsc#1230316) * Always use the removable way for SL-Micro * Limit the removable option to encrypted SL-Micro Security issues fixed: * mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546) * avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547) * Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548) * Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549) * pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)

Topics%20covered

Topics Covered

security advisory update issue important shim pcr-oracle

References

* bsc#1215098

* bsc#1215099

* bsc#1215100

* bsc#1215101

* bsc#1215102

* bsc#1215103

* bsc#1230316

Cross-

* CVE-2023-40546

* CVE-2023-40547

* CVE-2023-40548

* CVE-2023-40549

* CVE-2023-40550

* CVE-2023-40551

CVSS scores:

* CVE-2023-40546 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-40546 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-40546 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-40547 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

* CVE-2023-40547 ( NVD ): 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

* CVE-2023-40547 ( NVD ): 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

* CVE-2023-40548 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20136-1
Release Date: 2025-03-07T15:31:39Z
Rating: important

Topics%20covered

Topics Covered

security advisory update issue important shim pcr-oracle

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here