Configuration in tftpboot-installation-SLE-Micro-5.3-s390x - #VU76656

Vulnerability identifier: #VU76656

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-16

Exploitation vector: Local access

Exploit availability: No public exploit available

The issue may allow a local user to bypass implemented security restrictions.

The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.

tftpboot-installation-SLE-Micro-5.3-s390x
tftpboot-installation-SLE-Micro-5.3-x86_64
tftpboot-installation-SLE-Micro-5.3-aarch64
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher

Install updates from vendor's website.

tftpboot-installation-SLE-Micro-5.3-s390x - update to 16.57.21-150400.3.2.1
tftpboot-installation-SLE-Micro-5.3-x86_64 - update to 16.57.21-150400.3.2.1
tftpboot-installation-SLE-Micro-5.3-aarch64 - update to 16.57.21-150400.3.2.1

• https://www.suse.com/support/update/announcement/2023/suse-su-20232315-1/
• https://bugzilla.suse.com/show_bug.cgi?id=1209188

• SUSE update for installation-images