OESA-2022-1799 shim security update

Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments. Security Fixes: No description is available for this CVE.CVE-2022-28737...

PT-2022-37514 · Fwupd · Fwupd

Name of the Vulnerable Software and Affected Versions: fwupd affected versions not specified Description: The issue with fwupd involves ignoring non-PCI NVMe devices, such as NVMe-over-Fabrics, when probing. Additionally, the package was rebuilt with a new UEFI secure boot key. Recommendations: A...

openSUSE: Security Advisory for drbd (SUSE-SU-2022:2656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2656-1 Security update for drbd

This update of drbd fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-37513 · Oracle · Oracleasm

Name of the Vulnerable Software and Affected Versions: oracleasm affected versions not specified Description: The issue is related to the grub2 boothole 3 problem, which necessitates a rebuild with a new secure boot key. Recommendations: At the moment, there is no information about a newer versio...

PT-2022-37508 · Mokutil · Mokutil

Name of the Vulnerable Software and Affected Versions: mokutil affected versions not specified Description: The issue concerns the addition of SBAT revocation support to mokutil. New options have been added to the mokutil command, including mokutil --sbat to list all entries in SBAT, mokutil...

SUSE-SU-2022:2629-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information...

SUSE-SU-2022:2622-1 Security update for drbd

This update of drbd fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2617-1 Security update for oracleasm

This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-37504 · Oracle · Oracleasm

Name of the Vulnerable Software and Affected Versions: oracleasm affected versions not specified Description: The issue is related to the grub2 boothole 3 problem, which necessitates a rebuild with a new secure boot key. Recommendations: At the moment, there is no information about a newer versio...

OESA-2022-1794 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfbread function. The vulnerability could result in local attackers being able to crash the kernel.CVE-2022-2380 In USB...

SUSE-SU-2022:2578-1 Security update for crash

This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2577-1 Security update for crash

This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2575-1 Security update for crash

This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE: Security Advisory (SUSE-SU-2022:2578-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2543-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for s390-tools (SUSE-SU-2022:2543-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2543-1 Security update for s390-tools

This update of s390-tools fixes the following issues: - Fixed KMIP plugin failing to connection to KMIP server. When a zkey key repository is bound to the KMIP plugin, and the connection to the KMIP server is to be configired using command 'zkey kms configure --kmip-server ', it fails to connect ...

HP PC UEFI Secure Boot Database Update July 2022

Potential vulnerabilities have been identified in certain UEFI applications signed by HP which may allow local arbitrary code execution. HP is providing a standalone Secure Boot Update Utility SBUU for identified HP PC products to update the secure boot database so that these vulnerable UEFI...

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...