Configuration in tftpboot-installation-SLE-Micro-5.2-s390x - #VU77288

Vulnerability identifier: #VU77288

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-16

Exploitation vector: Local access

Exploit availability: No public exploit available

The issue may allow a local user to bypass implemented security restrictions.

The issue exists due to the possibility to bypass implemented security restrictions, related to secure boot. it was addressed by rebuilding the package with the new secure boot key.

tftpboot-installation-SLE-Micro-5.2-s390x
tftpboot-installation-SLE-Micro-5.2-aarch64
tftpboot-installation-SLE-Micro-5.2-x86_64
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher

Install updates from vendor's website.

tftpboot-installation-SLE-Micro-5.2-s390x - update to 16.56.14-150300.3.2.1
tftpboot-installation-SLE-Micro-5.2-aarch64 - update to 16.56.14-150300.3.2.1
tftpboot-installation-SLE-Micro-5.2-x86_64 - update to 16.56.14-150300.3.2.1

• https://www.suse.com/support/update/announcement/2023/suse-su-20232351-1/
• https://bugzilla.suse.com/show_bug.cgi?id=1209188

• SUSE update for installation-images