{"id":"openSUSE-SU-2026:20878-1","summary":"Security update for sdbootutil","details":"This update for sdbootutil fixes the following issues\n\nSecurity issue:\n\n- CVE-2026-25701: use of fixed directory /tmp/pcrlock.d.back in sdbootutil-update-predictions.service (bsc#1258241).\n\nNon security issues:\n\nUpdate to version 1+git20260506.25d47bf:\n- TPM based system does not auto-unlock encryption (bsc#1257612).\n- openQA test fails in reboot_after_installation - sdbootutil does not honor timeout set by user\n  (bsc#1258944).\n- Installation with Systemd-boot fails when Turkish language is selected (bsc#1253652).\n- armv7 installer requires sdbootutil and shim on armv7 (bsc#1254865).\n- sdbootutil default entry not updated after update from 20250411 to 20250522 (bsc#1243889).\n- sdbootutil: consistent naming conventions used for key/pin ? (bsc#1252871).\n- UPDATE_NVRAM is NO when BLS bootloader is used (bsc#1247952).\n- Use tmpfiles.d for /var directories (jsc#PED-14900).\n- yast reports \"Cannot enroll authentication\" during fresh install of tumbleweed (bsc#1256775).\n","modified":"2026-06-04T09:00:10.999981022Z","published":"2026-06-02T09:18:14Z","related":["CVE-2026-25701"],"upstream":["CVE-2026-25701"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1243889"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247952"},{"type":"REPORT","url":"https://bugzilla.suse.com/1252871"},{"type":"REPORT","url":"https://bugzilla.suse.com/1253652"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254317"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254534"},{"type":"REPORT","url":"https://bugzilla.suse.com/1254865"},{"type":"REPORT","url":"https://bugzilla.suse.com/1256775"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257612"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258241"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258944"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-25701"}],"schema_version":"1.7.5"}