Описание
Security update for ovmf
This update for ovmf fixes the following issues:
- CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
- Use openSUSE CA for the opensuse flavor (bsc#1175674)
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
ovmf-2017+git1510945757.b2662641d5-lp151.11.9.1
ovmf-tools-2017+git1510945757.b2662641d5-lp151.11.9.1
qemu-ovmf-ia32-2017+git1510945757.b2662641d5-lp151.11.9.1
qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-lp151.11.9.1
qemu-ovmf-x86_64-debug-2017+git1510945757.b2662641d5-lp151.11.9.1
Ссылки
- E-Mail link for openSUSE-SU-2020:1535-1
- SUSE Security Ratings
- SUSE Bug 1175476
- SUSE Bug 1175674
- SUSE CVE CVE-2019-14562 page
Описание
Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.
Затронутые продукты
openSUSE Leap 15.1:ovmf-2017+git1510945757.b2662641d5-lp151.11.9.1
openSUSE Leap 15.1:ovmf-tools-2017+git1510945757.b2662641d5-lp151.11.9.1
openSUSE Leap 15.1:qemu-ovmf-ia32-2017+git1510945757.b2662641d5-lp151.11.9.1
openSUSE Leap 15.1:qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-lp151.11.9.1
Ссылки
- CVE-2019-14562
- SUSE Bug 1175476