SUSE-SU-2022:2543-1 Security update for s390-tools
An update fixes a KMIP connection failure and rebuilds with a new secure boot key to address the Grub2 BootHole vulnerability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is SUSE-SU-2022:2543-1?
SUSE-SU-2022:2543-1 is a vulnerability in s390-tools, published on 25 Jul 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
This update of s390-tools fixes the following issues:
Fixed KMIP plugin failing to connection to KMIP server.
When a zkey key repository is bound to the KMIP plugin, and the connection to the KMIP server is to be configired using command 'zkey kms configure –kmip-server <server>', it fails to connect to the specified KMIP server. (bsc#1199649)
rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
Which versions are affected by SUSE-SU-2022:2543-1?
Linux distribution packages (2)
s390-tools SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 2.19.0-150400.7.4.1 |
s390-tools openSUSE:Leap 15.4 | All versions | 2.19.0-150400.7.4.1 |
How do I fix SUSE-SU-2022:2543-1?
Apply the vendor's patch.
Is SUSE-SU-2022:2543-1 being exploited?
There is no known exploitation of SUSE-SU-2022:2543-1 in the wild and no public exploit code.