Security update for shim SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:1702-1 Final 1 1 2023-03-30T13:23:29Z current 2023-03-30T13:23:29Z 2023-03-30T13:23:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for shim This update for shim fixes the following issues: - Updated shim signature after shim 15.7 be signed back: signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458) - Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to disable the NX compatibility flag when using post-process-pe because grub2 is not ready. (bsc#1205588) - Enable the NX compatibility flag by default. (jsc#PED-127) Update to 15.7 (bsc#1198458) (jsc#PED-127): - Make SBAT variable payload introspectable - Reference MokListRT instead of MokList - Add a link to the test plan in the readme. - [V3] Enable TDX measurement to RTMR register - Discard load-options that start with a NUL - Fixed load_cert_file bugs - Add -malign-double to IA32 compiler flags - pe: Fix image section entry-point validation - make-archive: Build reproducible tarball - mok: remove MokListTrusted from PCR 7 Other fixes: - Support enhance shim measurement to TD RTMR. (jsc#PED-1273) - shim-install: ensure grub.cfg created is not overwritten after installing grub related files - Add logic to shim.spec to only set sbat policy when efivarfs is writeable. (bsc#1201066) - Add logic to shim.spec for detecting --set-sbat-policy option before using mokutil to set sbat policy. (bsc#1202120) - Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282) Update to 15.6 (bsc#1198458): - MokManager: removed Locate graphic output protocol fail error message - shim: implement SBAT verification for the shim_lock protocol - post-process-pe: Fix a missing return code check - Update github actions matrix to be more useful - post-process-pe: Fix format string warnings on 32-bit platforms - Allow MokListTrusted to be enabled by default - Re-add ARM AArch64 support - Use ASCII as fallback if Unicode Box Drawing characters fail - make: don't treat cert.S specially - shim: use SHIM_DEVEL_VERBOSE when built in devel mode - Break out of the inner sbat loop if we find the entry. - Support loading additional certificates - Add support for NX (W^X) mitigations. - Fix preserve_sbat_uefi_variable() logic - SBAT Policy latest should be a one-shot - pe: Fix a buffer overflow when SizeOfRawData > VirtualSize - pe: Perform image verification earlier when loading grub - Update advertised sbat generation number for shim - Update SBAT generation requirements for 05/24/22 - Also avoid CVE-2022-28737 in verify_image() by @vathpela Update to 15.5 (bsc#1198458): - Broken ia32 relocs and an unimportant submodule change. - mok: allocate MOK config table as BootServicesData - Don't call QueryVariableInfo() on EFI 1.10 machines (bsc#1187260) - Relax the check for import_mok_state() (bsc#1185261) - SBAT.md: trivial changes - shim: another attempt to fix load options handling - Add tests for our load options parsing. - arm/aa64: fix the size of .rela* sections - mok: fix potential buffer overrun in import_mok_state - mok: relax the maximum variable size check - Don't unhook ExitBootServices when EBS protection is disabled - fallback: find_boot_option() needs to return the index for the boot entry in optnum - httpboot: Ignore case when checking HTTP headers - Fallback allocation errors - shim: avoid BOOTx64.EFI in message on other architectures - str: remove duplicate parameter check - fallback: add compile option FALLBACK_NONINTERACTIVE - Test mok mirror - Modify sbat.md to help with readability. - csv: detect end of csv file correctly - Specify that the .sbat section is ASCII not UTF-8 - tests: add 'include-fixed' GCC directory to include directories - pe: simplify generate_hash() - Don't make shim abort when TPM log event fails (RHBZ #2002265) - Fallback to default loader if parsed one does not exist - fallback: Fix for BootOrder crash when index returned - Better console checks - docs: update SBAT UEFI variable name - Don't parse load options if invoked from removable media path - fallback: fix fallback not passing arguments of the first boot option - shim: Don't stop forever at 'Secure Boot not enabled' notification - Allocate mokvar table in runtime memory. - Remove post-process-pe on 'make clean' - pe: missing perror argument - CVE-2022-28737: Fixed a buffer overflow when SizeOfRawData > VirtualSize (bsc#1198458) - Add mokutil command to post script for setting sbat policy to latest mode when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created. (bsc#1198458) - Updated vendor dbx binary and script (bsc#1198458) - Updated dbx-cert.tar.xz and vendor-dbx-sles.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list. - Updated dbx-cert.tar.xz and vendor-dbx-opensuse.bin for adding openSUSE-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list. - Updated vendor-dbx.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt and openSUSE-UEFI-SIGN-Certificate-2021-05.crt for testing environment. - Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin file which includes all .der for testing environment. - avoid buffer overflow when copying data to the MOK config table (bsc#1185232) - Disable exporting vendor-dbx to MokListXRT since writing a large RT variable could crash some machines (bsc#1185261) - ignore the odd LoadOptions length (bsc#1185232) - shim-install: reset def_shim_efi to 'shim.efi' if the given file doesn't exist - relax the maximum variable size check for u-boot (bsc#1185621) - handle ignore_db and user_insecure_mode correctly (bsc#1185441, bsc#1187071) - Split the keys in vendor-dbx.bin to vendor-dbx-sles and vendor-dbx-opensuse for shim-sles and shim-opensuse to reduce the size of MokListXRT (bsc#1185261) + Also update generate-vendor-dbx.sh in dbx-cert.tar.xz The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.3:latest-2023-1702,Container suse/sle-micro-rancher/5.4:latest-2023-1702,Image SLES15-SP3-CHOST-BYOS-Azure-2023-1702,Image SLES15-SP3-CHOST-BYOS-EC2-2023-1702,Image SLES15-SP3-CHOST-BYOS-GCE-2023-1702,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2023-1702,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure-2023-1702,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM-2023-1702,Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE-2023-1702,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2023-1702,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2023-1702,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2023-1702,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2023-1702,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2023-1702,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2023-1702,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2023-1702,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2023-1702,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2023-1702,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2023-1702,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2023-1702,Image SLES15-SP4-2023-1702,Image SLES15-SP4-Azure-Basic-2023-1702,Image SLES15-SP4-Azure-Standard-2023-1702,Image SLES15-SP4-BYOS-2023-1702,Image SLES15-SP4-BYOS-Azure-2023-1702,Image SLES15-SP4-BYOS-EC2-2023-1702,Image SLES15-SP4-BYOS-GCE-2023-1702,Image SLES15-SP4-CHOST-BYOS-Azure-2023-1702,Image SLES15-SP4-CHOST-BYOS-EC2-2023-1702,Image SLES15-SP4-CHOST-BYOS-GCE-2023-1702,Image SLES15-SP4-CHOST-BYOS-SAP-CCloud-2023-1702,Image SLES15-SP4-EC2-2023-1702,Image SLES15-SP4-GCE-2023-1702,Image SLES15-SP4-HPC-2023-1702,Image SLES15-SP4-HPC-Azure-2023-1702,Image SLES15-SP4-HPC-BYOS-2023-1702,Image SLES15-SP4-HPC-BYOS-Azure-2023-1702,Image SLES15-SP4-HPC-BYOS-EC2-2023-1702,Image SLES15-SP4-HPC-BYOS-GCE-2023-1702,Image SLES15-SP4-HPC-EC2-2023-1702,Image SLES15-SP4-HPC-GCE-2023-1702,Image SLES15-SP4-Hardened-BYOS-2023-1702,Image SLES15-SP4-Hardened-BYOS-Azure-2023-1702,Image SLES15-SP4-Hardened-BYOS-EC2-2023-1702,Image SLES15-SP4-Hardened-BYOS-GCE-2023-1702,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-2023-1702,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure-2023-1702,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2-2023-1702,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE-2023-1702,Image SLES15-SP4-Manager-Server-4-3-BYOS-2023-1702,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2023-1702,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2023-1702,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2023-1702,Image SLES15-SP4-Micro-5-3-2023-1702,Image SLES15-SP4-Micro-5-3-Azure-2023-1702,Image SLES15-SP4-Micro-5-3-BYOS-2023-1702,Image SLES15-SP4-Micro-5-3-BYOS-Azure-2023-1702,Image SLES15-SP4-Micro-5-3-BYOS-EC2-2023-1702,Image SLES15-SP4-Micro-5-3-BYOS-GCE-2023-1702,Image SLES15-SP4-Micro-5-3-EC2-2023-1702,Image SLES15-SP4-Micro-5-3-GCE-2023-1702,Image SLES15-SP4-Micro-5-4-2023-1702,Image SLES15-SP4-Micro-5-4-Azure-2023-1702,Image SLES15-SP4-Micro-5-4-BYOS-2023-1702,Image SLES15-SP4-Micro-5-4-BYOS-Azure-2023-1702,Image SLES15-SP4-Micro-5-4-BYOS-EC2-2023-1702,Image SLES15-SP4-Micro-5-4-BYOS-GCE-2023-1702,Image SLES15-SP4-Micro-5-4-EC2-2023-1702,Image SLES15-SP4-Micro-5-4-GCE-2023-1702,Image SLES15-SP4-SAP-2023-1702,Image SLES15-SP4-SAP-Azure-2023-1702,Image SLES15-SP4-SAP-Azure-LI-BYOS-2023-1702,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2023-1702,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2023-1702,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2023-1702,Image SLES15-SP4-SAP-BYOS-2023-1702,Image SLES15-SP4-SAP-BYOS-Azure-2023-1702,Image SLES15-SP4-SAP-BYOS-EC2-2023-1702,Image SLES15-SP4-SAP-BYOS-GCE-2023-1702,Image SLES15-SP4-SAP-EC2-2023-1702,Image SLES15-SP4-SAP-GCE-2023-1702,Image SLES15-SP4-SAP-Hardened-2023-1702,Image SLES15-SP4-SAP-Hardened-Azure-2023-1702,Image SLES15-SP4-SAP-Hardened-BYOS-2023-1702,Image SLES15-SP4-SAP-Hardened-BYOS-Azure-2023-1702,Image SLES15-SP4-SAP-Hardened-BYOS-EC2-2023-1702,Image SLES15-SP4-SAP-Hardened-BYOS-GCE-2023-1702,Image SLES15-SP4-SAP-Hardened-EC2-2023-1702,Image SLES15-SP4-SAP-Hardened-GCE-2023-1702,Image SLES15-SP4-SAPCAL-2023-1702,Image SLES15-SP4-SAPCAL-Azure-2023-1702,Image SLES15-SP4-SAPCAL-EC2-2023-1702,Image SLES15-SP4-SAPCAL-GCE-2023-1702,Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-2023-1702,Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2-2023-1702,Image SLES15-SP5-Azure-Basic-2023-1702,Image SLES15-SP5-Azure-Standard-2023-1702,Image SLES15-SP5-BYOS-Azure-2023-1702,Image SLES15-SP5-BYOS-EC2-2023-1702,Image SLES15-SP5-BYOS-GCE-2023-1702,Image SLES15-SP5-CHOST-BYOS-Azure-2023-1702,Image SLES15-SP5-CHOST-BYOS-EC2-2023-1702,Image SLES15-SP5-CHOST-BYOS-GCE-2023-1702,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2023-1702,Image SLES15-SP5-EC2-2023-1702,Image SLES15-SP5-GCE-2023-1702,Image SLES15-SP5-HPC-Azure-2023-1702,Image SLES15-SP5-HPC-BYOS-Azure-2023-1702,Image SLES15-SP5-HPC-BYOS-EC2-2023-1702,Image SLES15-SP5-HPC-BYOS-GCE-2023-1702,Image SLES15-SP5-HPC-EC2-2023-1702,Image SLES15-SP5-HPC-GCE-2023-1702,Image SLES15-SP5-Hardened-BYOS-Azure-2023-1702,Image SLES15-SP5-Hardened-BYOS-EC2-2023-1702,Image SLES15-SP5-Hardened-BYOS-GCE-2023-1702,Image SLES15-SP5-Micro-5-5-2023-1702,Image SLES15-SP5-Micro-5-5-Azure-2023-1702,Image SLES15-SP5-Micro-5-5-BYOS-2023-1702,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2023-1702,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2023-1702,Image SLES15-SP5-Micro-5-5-BYOS-GCE-2023-1702,Image SLES15-SP5-Micro-5-5-EC2-2023-1702,Image SLES15-SP5-Micro-5-5-GCE-2023-1702,Image SLES15-SP5-SAP-Azure-2023-1702,Image SLES15-SP5-SAP-Azure-LI-BYOS-2023-1702,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2023-1702,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2023-1702,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2023-1702,Image SLES15-SP5-SAP-BYOS-Azure-2023-1702,Image SLES15-SP5-SAP-BYOS-EC2-2023-1702,Image SLES15-SP5-SAP-BYOS-GCE-2023-1702,Image SLES15-SP5-SAP-EC2-2023-1702,Image SLES15-SP5-SAP-GCE-2023-1702,Image SLES15-SP5-SAP-Hardened-Azure-2023-1702,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2023-1702,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2023-1702,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2023-1702,Image SLES15-SP5-SAP-Hardened-EC2-2023-1702,Image SLES15-SP5-SAP-Hardened-GCE-2023-1702,Image SLES15-SP5-SAPCAL-Azure-2023-1702,Image SLES15-SP5-SAPCAL-EC2-2023-1702,Image SLES15-SP5-SAPCAL-GCE-2023-1702,SUSE-2023-1702,SUSE-SLE-Micro-5.3-2023-1702,SUSE-SLE-Micro-5.4-2023-1702,SUSE-SLE-Module-Basesystem-15-SP4-2023-1702,SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-1702,SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-1702,SUSE-SLE-Product-RT-15-SP3-2023-1702,SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-1702,SUSE-SLE-Product-SLES_SAP-15-SP3-2023-1702,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-1702,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-1702,SUSE-SUSE-MicroOS-5.1-2023-1702,SUSE-SUSE-MicroOS-5.2-2023-1702,SUSE-Storage-7.1-2023-1702,openSUSE-Leap-Micro-5.3-2023-1702,openSUSE-SLE-15.4-2023-1702 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20231702-1/ Link for SUSE-SU-2023:1702-1 https://lists.suse.com/pipermail/sle-updates/2023-March/028509.html E-Mail link for SUSE-SU-2023:1702-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1185232 SUSE Bug 1185232 https://bugzilla.suse.com/1185261 SUSE Bug 1185261 https://bugzilla.suse.com/1185441 SUSE Bug 1185441 https://bugzilla.suse.com/1185621 SUSE Bug 1185621 https://bugzilla.suse.com/1187071 SUSE Bug 1187071 https://bugzilla.suse.com/1187260 SUSE Bug 1187260 https://bugzilla.suse.com/1193282 SUSE Bug 1193282 https://bugzilla.suse.com/1198458 SUSE Bug 1198458 https://bugzilla.suse.com/1201066 SUSE Bug 1201066 https://bugzilla.suse.com/1202120 SUSE Bug 1202120 https://bugzilla.suse.com/1205588 SUSE Bug 1205588 https://www.suse.com/security/cve/CVE-2022-28737/ SUSE CVE CVE-2022-28737 page Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4 Image SLES15-SP4-Azure-Basic Image SLES15-SP4-Azure-Standard Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-Azure Image SLES15-SP4-CHOST-BYOS-EC2 Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP4-EC2 Image SLES15-SP4-GCE Image SLES15-SP4-HPC Image SLES15-SP4-HPC-Azure Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-Azure Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-3-GCE Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-Azure Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-EC2 Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP4-SUSE-Rancher-Setup-BYOS Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2 Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-HPC-EC2 Image SLES15-SP5-HPC-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-EC2 Image SLES15-SP5-SAP-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-EC2 Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 shim-15.7-150300.4.11.1 shim-15.7-150300.4.11.1 as a component of Container suse/sle-micro-rancher/5.3:latest shim-15.7-150300.4.11.1 as a component of Container suse/sle-micro-rancher/5.4:latest shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production shim-15.7-150300.4.11.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Azure-Basic shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Azure-Standard shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-CHOST-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-CHOST-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-CHOST-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-CHOST-BYOS-SAP-CCloud shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-HPC-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Hardened-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Hardened-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Hardened-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Hardened-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-3-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-Micro-5-4-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAP-Hardened-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAPCAL shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAPCAL-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAPCAL-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SAPCAL-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SUSE-Rancher-Setup-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Azure-Basic shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Azure-Standard shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-CHOST-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-CHOST-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-CHOST-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-HPC-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-HPC-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-HPC-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-HPC-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-Micro-5-5-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Hardened-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAPCAL-Azure shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAPCAL-EC2 shim-15.7-150300.4.11.1 as a component of Image SLES15-SP5-SAPCAL-GCE shim-15.7-150300.4.11.1 as a component of SUSE Enterprise Storage 7.1 shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Micro 5.1 shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Micro 5.2 shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Micro 5.3 shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Micro 5.4 shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS shim-15.7-150300.4.11.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 shim-15.7-150300.4.11.1 as a component of SUSE Manager Proxy 4.2 shim-15.7-150300.4.11.1 as a component of SUSE Manager Server 4.2 shim-15.7-150300.4.11.1 as a component of openSUSE Leap 15.4 shim-15.7-150300.4.11.1 as a component of openSUSE Leap Micro 5.3 There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario. CVE-2022-28737 Container suse/sle-micro-rancher/5.3:latest:shim-15.7-150300.4.11.1 Container suse/sle-micro-rancher/5.4:latest:shim-15.7-150300.4.11.1 Image SLES15-SP3-CHOST-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP3-CHOST-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP3-CHOST-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:shim-15.7-150300.4.11.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM:shim-15.7-150300.4.11.1 Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:shim-15.7-150300.4.11.1 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:shim-15.7-150300.4.11.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:shim-15.7-150300.4.11.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:shim-15.7-150300.4.11.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:shim-15.7-150300.4.11.1 Image SLES15-SP4-Azure-Basic:shim-15.7-150300.4.11.1 Image SLES15-SP4-Azure-Standard:shim-15.7-150300.4.11.1 Image SLES15-SP4-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-CHOST-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-CHOST-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-CHOST-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:shim-15.7-150300.4.11.1 Image SLES15-SP4-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-HPC:shim-15.7-150300.4.11.1 Image SLES15-SP4-Hardened-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-Hardened-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-Hardened-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-Hardened-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-3:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-Micro-5-4:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP-Hardened:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAP:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAPCAL-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAPCAL-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAPCAL-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP4-SAPCAL:shim-15.7-150300.4.11.1 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP4-SUSE-Rancher-Setup-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP4:shim-15.7-150300.4.11.1 Image SLES15-SP5-Azure-Basic:shim-15.7-150300.4.11.1 Image SLES15-SP5-Azure-Standard:shim-15.7-150300.4.11.1 Image SLES15-SP5-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-CHOST-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-CHOST-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-CHOST-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:shim-15.7-150300.4.11.1 Image SLES15-SP5-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-HPC-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-HPC-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-HPC-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-HPC-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-HPC-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-HPC-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-Hardened-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-Hardened-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-Hardened-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-Micro-5-5:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Hardened-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Hardened-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAP-Hardened-GCE:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAPCAL-Azure:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAPCAL-EC2:shim-15.7-150300.4.11.1 Image SLES15-SP5-SAPCAL-GCE:shim-15.7-150300.4.11.1 SUSE Enterprise Storage 7.1:shim-15.7-150300.4.11.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:shim-15.7-150300.4.11.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Micro 5.1:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Micro 5.2:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Micro 5.3:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Micro 5.4:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Real Time 15 SP3:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Server 15 SP3-LTSS:shim-15.7-150300.4.11.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:shim-15.7-150300.4.11.1 SUSE Manager Proxy 4.2:shim-15.7-150300.4.11.1 SUSE Manager Server 4.2:shim-15.7-150300.4.11.1 openSUSE Leap 15.4:shim-15.7-150300.4.11.1 openSUSE Leap Micro 5.3:shim-15.7-150300.4.11.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231702-1/ https://www.suse.com/security/cve/CVE-2022-28737.html CVE-2022-28737 https://bugzilla.suse.com/1198458 SUSE Bug 1198458 https://bugzilla.suse.com/1205065 SUSE Bug 1205065 https://bugzilla.suse.com/1205066 SUSE Bug 1205066 https://bugzilla.suse.com/1205831 SUSE Bug 1205831