Configuration in s390-tools - #VU75560

Vulnerability identifier: #VU75560

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-16

Exploitation vector: Local access

Exploit availability: No public exploit available

The issue may allow a local user to bypass implemented security restrictions.

The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.

s390-tools
s390-tools-zdsfs-debuginfo
s390-tools-debuginfo
libekmfweb1-devel
osasnmpd
s390-tools-hmcdrvfs
s390-tools-hmcdrvfs-debuginfo
s390-tools-zdsfs
osasnmpd-debuginfo
libekmfweb1-debuginfo
libekmfweb1
s390-tools-debugsource
SUSE Linux Enterprise Server 15
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Server 15 SP3 LTSS

Install updates from vendor's website.

s390-tools - update to 2.15.1-150300.8.32.1
s390-tools-zdsfs-debuginfo - update to 2.15.1-150300.8.32.1
s390-tools-debuginfo - update to 2.15.1-150300.8.32.1
libekmfweb1-devel - update to 2.15.1-150300.8.32.1
osasnmpd - update to 2.15.1-150300.8.32.1
s390-tools-hmcdrvfs - update to 2.15.1-150300.8.32.1
s390-tools-hmcdrvfs-debuginfo - update to 2.15.1-150300.8.32.1
s390-tools-zdsfs - update to 2.15.1-150300.8.32.1
osasnmpd-debuginfo - update to 2.15.1-150300.8.32.1
libekmfweb1-debuginfo - update to 2.15.1-150300.8.32.1
libekmfweb1 - update to 2.15.1-150300.8.32.1
s390-tools-debugsource - update to 2.15.1-150300.8.32.1

• https://www.suse.com/support/update/announcement/2023/suse-su-20231961-1/
• https://bugzilla.suse.com/show_bug.cgi?id=1209188

• SUSE update for s390-tools