SUSE-SU-2023:2084-1

Опубликовано: 02 мая 2023

Источник: suse-cvrf

Описание

Security update for shim

This update for shim fixes the following issues:

CVE-2022-28737 was missing as reference previously.
Upgrade shim-install for bsc#1210382

After closing Leap-gap project since Leap 15.3, openSUSE Leap direct uses shim from SLE. So the ca_string is 'SUSE Linux Enterprise Secure Boot CA1', not 'openSUSE Secure Boot CA1'. It causes that the update_boot=no, so all files in /boot/efi/EFI/boot are not updated.

Logic was added that is using ID field in os-release for checking Leap distro and set ca_string to 'SUSE Linux Enterprise Secure Boot CA1'. Then /boot/efi/EFI/boot/* can also be updated.

Список пакетов

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

shim-15.7-150300.4.16.1

Container suse/manager/5.0/x86_64/server:latest

shim-15.7-150300.4.16.1

Container suse/sle-micro-rancher/5.3:latest

shim-15.7-150300.4.16.1

Container suse/sle-micro-rancher/5.4:latest

shim-15.7-150300.4.16.1

Container suse/sle-micro/base-5.5:latest

shim-15.7-150300.4.16.1

Image SLES15-SP3-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-BYOS-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-CHOST-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-CHOST-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP3-CHOST-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

shim-15.7-150300.4.16.1

Image SLES15-SP3-HPC-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-HPC-BYOS-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-HPC-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-Micro-5-1-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-Micro-5-1-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-Micro-5-2-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-Micro-5-2-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAP-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAP-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAPCAL-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAPCAL-EC2-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP3-SAPCAL-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4

shim-15.7-150300.4.16.1

Image SLES15-SP4-Azure-Basic

shim-15.7-150300.4.16.1

Image SLES15-SP4-Azure-Standard

shim-15.7-150300.4.16.1

Image SLES15-SP4-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-CHOST-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-CHOST-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-CHOST-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

shim-15.7-150300.4.16.1

Image SLES15-SP4-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-HPC-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-Hardened-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-Hardened-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-Hardened-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-Hardened-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

shim-15.7-150300.4.16.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-3

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-3-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-3-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-Micro-5-4-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAP-Hardened-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAPCAL

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAPCAL-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAPCAL-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP4-SAPCAL-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-Azure-3P

shim-15.7-150300.4.16.1

Image SLES15-SP5-Azure-Basic

shim-15.7-150300.4.16.1

Image SLES15-SP5-Azure-Standard

shim-15.7-150300.4.16.1

Image SLES15-SP5-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-CHOST-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-CHOST-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-CHOST-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-CHOST-BYOS-GDC

shim-15.7-150300.4.16.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

shim-15.7-150300.4.16.1

Image SLES15-SP5-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-HPC-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-HPC-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-HPC-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-HPC-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-HPC-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-HPC-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-Hardened-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-Hardened-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-Hardened-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

shim-15.7-150300.4.16.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-Micro-5-5-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Azure-3P

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Hardened-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Hardened-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAP-Hardened-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAPCAL-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAPCAL-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP5-SAPCAL-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6

shim-15.7-150300.4.16.1

Image SLES15-SP6-Azure-Basic

shim-15.7-150300.4.16.1

Image SLES15-SP6-Azure-Standard

shim-15.7-150300.4.16.1

Image SLES15-SP6-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-CHOST-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-CHOST-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-CHOST-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-CHOST-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-CHOST-BYOS-GDC

shim-15.7-150300.4.16.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

shim-15.7-150300.4.16.1

Image SLES15-SP6-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-EC2-ECS-HVM

shim-15.7-150300.4.16.1

Image SLES15-SP6-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-HPC-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-Hardened-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-Hardened-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-Hardened-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-Hardened-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened-BYOS

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAP-Hardened-GCE

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAPCAL

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAPCAL-Azure

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAPCAL-EC2

shim-15.7-150300.4.16.1

Image SLES15-SP6-SAPCAL-GCE

shim-15.7-150300.4.16.1

Image server-image

shim-15.7-150300.4.16.1

SUSE Enterprise Storage 7.1

shim-15.7-150300.4.16.1

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

shim-15.7-150300.4.16.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Micro 5.1

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Micro 5.2

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Micro 5.3

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Micro 5.4

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Real Time 15 SP3

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Server 15 SP3-LTSS

shim-15.7-150300.4.16.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

shim-15.7-150300.4.16.1

SUSE Manager Proxy 4.2

shim-15.7-150300.4.16.1

SUSE Manager Server 4.2

shim-15.7-150300.4.16.1

openSUSE Leap 15.4

shim-15.7-150300.4.16.1

openSUSE Leap Micro 5.3

shim-15.7-150300.4.16.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20232084-1/
Link for SUSE-SU-2023:2084-1
https://lists.suse.com/pipermail/sle-security-updates/2023-May/014772.html
E-Mail link for SUSE-SU-2023:2084-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1210382
SUSE Bug 1210382
https://www.suse.com/security/cve/CVE-2022-28737/
SUSE CVE CVE-2022-28737 page

Описание

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.

Затронутые продукты

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:shim-15.7-150300.4.16.1

Container suse/manager/5.0/x86_64/server:latest:shim-15.7-150300.4.16.1

Container suse/sle-micro-rancher/5.3:latest:shim-15.7-150300.4.16.1

Container suse/sle-micro-rancher/5.4:latest:shim-15.7-150300.4.16.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-28737.html
CVE-2022-28737
https://bugzilla.suse.com/1198458
SUSE Bug 1198458
https://bugzilla.suse.com/1205065
SUSE Bug 1205065
https://bugzilla.suse.com/1205066
SUSE Bug 1205066
https://bugzilla.suse.com/1205831
SUSE Bug 1205831