Every CVESearch/Get API key

SUSE-SU-2021:1564-1

Security update for shim

No scoreFix available

SUSE-SU-2021:1564-1 is a vulnerability with no CVSS score yet in shim, published May 11, 2021. No source lists public exploit code. Fixed in shim 15.4-3.20.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
15.4-3.20.1shim +10 more

Description

This update for shim fixes the following issues:

  • Update to the unified shim binary for SBAT support (bsc#1182057)
    • Merged EKU codesign check (bsc#1177315)
  • shim-install: Always assume 'removable' for Azure to avoid the endless reset loop (bsc#1185464).

Affected packages

Affected packages
PackageAffectedFixed
shim
SUSE:Linux Enterprise Module for Basesystem 15 SP2
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Linux Enterprise Server 15 SP1-BCL
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Linux Enterprise Server 15 SP1-LTSS
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Manager Proxy 4.0
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Manager Retail Branch Server 4.0
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Manager Server 4.0
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Linux Enterprise Micro 5.0
before 15.4-3.20.1
15.4-3.20.1
shim
SUSE:Enterprise Storage 6
before 15.4-3.20.1
15.4-3.20.1

What each source reports

OSVNo score

Security update for shim

This update for shim fixes the following issues:

  • Update to the unified shim binary for SBAT support (bsc#1182057)
    • Merged EKU codesign check (bsc#1177315)
  • shim-install: Always assume 'removable' for Azure to avoid the endless reset loop (bsc#1185464).
Record
SUSE-SU-2021:1564-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open