Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2234-1

Опубликовано: 17 мая 2023
Источник: suse-cvrf

Описание

Security update for ovmf

This update for ovmf fixes the following issues:

  • CVE-2021-38578: Fixed potential underflow in SmmEntryPointwhen computing BufferSize (bsc#1196741).
  • CVE-2019-14560: Fixed potential secure boot bypass caused by improper check of GetEfiGlobalVariable2() return value (bsc#1174246).
  • revert a patch to fix xen boot problems (bsc#1205613)

Список пакетов

SUSE Linux Enterprise Micro 5.3
qemu-ovmf-x86_64-202202-150400.5.10.1
qemu-uefi-aarch64-202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.4
qemu-ovmf-x86_64-202202-150400.5.10.1
qemu-uefi-aarch64-202202-150400.5.10.1
SUSE Linux Enterprise Module for Server Applications 15 SP4
ovmf-202202-150400.5.10.1
ovmf-tools-202202-150400.5.10.1
qemu-ovmf-x86_64-202202-150400.5.10.1
qemu-uefi-aarch64-202202-150400.5.10.1
openSUSE Leap 15.4
ovmf-202202-150400.5.10.1
ovmf-tools-202202-150400.5.10.1
qemu-ovmf-ia32-202202-150400.5.10.1
qemu-ovmf-x86_64-202202-150400.5.10.1
qemu-ovmf-x86_64-debug-202202-150400.5.10.1
qemu-uefi-aarch32-202202-150400.5.10.1
qemu-uefi-aarch64-202202-150400.5.10.1
openSUSE Leap Micro 5.3
qemu-ovmf-x86_64-202202-150400.5.10.1
qemu-uefi-aarch64-202202-150400.5.10.1

Ссылки

Описание

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.

Затронутые продукты
SUSE Linux Enterprise Micro 5.3:qemu-ovmf-x86_64-202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.3:qemu-uefi-aarch64-202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.4:qemu-ovmf-x86_64-202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.4:qemu-uefi-aarch64-202202-150400.5.10.1
Ссылки

Описание

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

Затронутые продукты
SUSE Linux Enterprise Micro 5.3:qemu-ovmf-x86_64-202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.3:qemu-uefi-aarch64-202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.4:qemu-ovmf-x86_64-202202-150400.5.10.1
SUSE Linux Enterprise Micro 5.4:qemu-uefi-aarch64-202202-150400.5.10.1
Ссылки