SUSE-SU-2020:2305-1

Опубликовано: 25 авг. 2020

Источник: suse-cvrf

Описание

Security update for grub2

This update for grub2 fixes the following issues:

CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421).
Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745).

Список пакетов

Image SLES12-SP4-Azure-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-EC2-HVM-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP4-GCE-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-OCI-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-SAP-Azure

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-SAP-Azure-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-SAP-EC2-HVM

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP4-SAP-EC2-HVM-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP4-SAP-GCE

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-SAP-GCE-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-SAP-OCI-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-Azure-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-Azure-Basic-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-Azure-HPC-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-Azure-HPC-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-Azure-SAP-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-Azure-SAP-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-Azure-Standard-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-EC2-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP5-EC2-ECS-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP5-EC2-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP5-EC2-SAP-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP5-EC2-SAP-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Image SLES12-SP5-GCE-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-GCE-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-GCE-SAP-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-GCE-SAP-On-Demand

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-OCI-BYOS-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

SUSE Linux Enterprise Server 12 SP4-LTSS

grub2-2.02-12.39.1

grub2-arm64-efi-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-powerpc-ieee1275-2.02-12.39.1

grub2-s390x-emu-2.02-12.39.1

grub2-snapper-plugin-2.02-12.39.1

grub2-systemd-sleep-plugin-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

SUSE Linux Enterprise Server 12 SP5

grub2-2.02-12.39.1

grub2-arm64-efi-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-powerpc-ieee1275-2.02-12.39.1

grub2-s390x-emu-2.02-12.39.1

grub2-snapper-plugin-2.02-12.39.1

grub2-systemd-sleep-plugin-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-powerpc-ieee1275-2.02-12.39.1

grub2-snapper-plugin-2.02-12.39.1

grub2-systemd-sleep-plugin-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

grub2-2.02-12.39.1

grub2-arm64-efi-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-powerpc-ieee1275-2.02-12.39.1

grub2-s390x-emu-2.02-12.39.1

grub2-snapper-plugin-2.02-12.39.1

grub2-systemd-sleep-plugin-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

SUSE OpenStack Cloud 9

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-snapper-plugin-2.02-12.39.1

grub2-systemd-sleep-plugin-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

SUSE OpenStack Cloud Crowbar 9

grub2-2.02-12.39.1

grub2-i386-pc-2.02-12.39.1

grub2-snapper-plugin-2.02-12.39.1

grub2-systemd-sleep-plugin-2.02-12.39.1

grub2-x86_64-efi-2.02-12.39.1

grub2-x86_64-xen-2.02-12.39.1

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20202305-1/
Link for SUSE-SU-2020:2305-1
https://lists.suse.com/pipermail/sle-security-updates/2020-August/007298.html
E-Mail link for SUSE-SU-2020:2305-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1172745
SUSE Bug 1172745
https://bugzilla.suse.com/1174421
SUSE Bug 1174421
https://www.suse.com/security/cve/CVE-2020-15705/
SUSE CVE CVE-2020-15705 page

Описание

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.

Затронутые продукты

Image SLES12-SP4-Azure-BYOS:grub2-2.02-12.39.1

Image SLES12-SP4-Azure-BYOS:grub2-i386-pc-2.02-12.39.1

Image SLES12-SP4-Azure-BYOS:grub2-x86_64-efi-2.02-12.39.1

Image SLES12-SP4-EC2-HVM-BYOS:grub2-2.02-12.39.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-15705.html
CVE-2020-15705
https://bugzilla.suse.com/1174421
SUSE Bug 1174421
https://bugzilla.suse.com/1182890
SUSE Bug 1182890

SUSE-SU-2020:2305-1

Описание

Список пакетов

Image SLES12-SP4-Azure-BYOS

Image SLES12-SP4-EC2-HVM-BYOS

Image SLES12-SP4-GCE-BYOS

Image SLES12-SP4-OCI-BYOS

Image SLES12-SP4-SAP-Azure

Image SLES12-SP4-SAP-Azure-BYOS

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES12-SP4-SAP-EC2-HVM

Image SLES12-SP4-SAP-EC2-HVM-BYOS

Image SLES12-SP4-SAP-GCE

Image SLES12-SP4-SAP-GCE-BYOS

Image SLES12-SP4-SAP-OCI-BYOS

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-OCI-BYOS-BYOS

Image SLES12-SP5-OCI-BYOS-SAP-BYOS

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2020-15705

Описание

Затронутые продукты

Ссылки