Описание
Security update for ovmf
This update for ovmf fixes the following issues:
Security issues fixed:
- CVE-2018-0739: Update openssl to 1.0.2o to limit ASN.1 constructed types recursive definition depth (bsc#1094291).
- CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation (bsc#1163959).
- CVE-2019-14559: Fixed a remotely exploitable memory leak in the ARP handling code (bsc#1163927).
- CVE-2019-14575: Fixed an insufficient signature check in the DxeImageVerificationHandler (bsc#1163969).
Bug fixes:
- Only use SLES-UEFI-CA-Certificate-2048.crt for the SUSE flavor to provide the better compatibility. (bsc#1077330)
Список пакетов
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server for SAP Applications 12 SP2
SUSE OpenStack Cloud 7
Ссылки
- Link for SUSE-SU-2020:0495-1
- E-Mail link for SUSE-SU-2020:0495-1
- SUSE Security Ratings
- SUSE Bug 1077330
- SUSE Bug 1094291
- SUSE Bug 1163927
- SUSE Bug 1163959
- SUSE Bug 1163969
- SUSE CVE CVE-2018-0739 page
- SUSE CVE CVE-2019-14559 page
- SUSE CVE CVE-2019-14563 page
- SUSE CVE CVE-2019-14575 page
Описание
Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
Затронутые продукты
Ссылки
- CVE-2018-0739
- SUSE Bug 1087102
- SUSE Bug 1089997
- SUSE Bug 1094291
- SUSE Bug 1108542
Описание
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access.
Затронутые продукты
Ссылки
- CVE-2019-14559
- SUSE Bug 1163927
Описание
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
Затронутые продукты
Ссылки
- CVE-2019-14563
- SUSE Bug 1163959
Описание
Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.
Затронутые продукты
Ссылки
- CVE-2019-14575
- SUSE Bug 1163969