SUSE-SU-2026:22459-1

Security update for pcr-oracle

No scoreFix available

SUSE-SU-2026:22459-1 is a vulnerability with no CVSS score yet in pcr-oracle, published June 30, 2026. No source lists public exploit code. Fixed in pcr-oracle 0.6.3-slfo.1.1_1.1.

What does this mean?

Severity: UnratedNo CVSS score yet
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 0.6.3-slfo.1.1_1.1pcr-oracle

Description

This update for pcr-oracle fixes the following issues

Update to 0.6.3:

Security issue:

integer underflow vulnerability in parse_sbatlevel_section() (bsc#1265042).

Non security issue:

Lockout Authorization error for libvirt-emulated TPM (bsc#1265871).

Changes for pcr-oracle:

Relax TPM self-test attribute checks (bsc#1265871)
Update the SBAT offset boundary check (bsc#1265042)
Advance the comparison event pointer after comparison
Partially support shim extra files
Locate shim extra files
Synthesize shim extra events
Fix various issues from review by Claude Code and introduce adversarial testing

Affected packages

Affected packages
Package	Affected	Fixed
`pcr-oracle` SUSE:Linux Micro 6.1	before 0.6.3-slfo.1.1_1.1	0.6.3-slfo.1.1_1.1

What each source reports

OSVNo score

Security update for pcr-oracle