Описание
Security update for ovmf
This update for ovmf fixes the following issues:
- CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Список пакетов
openSUSE Leap 15.2
ovmf-201911-lp152.6.8.1
ovmf-tools-201911-lp152.6.8.1
qemu-ovmf-ia32-201911-lp152.6.8.1
qemu-ovmf-x86_64-201911-lp152.6.8.1
qemu-ovmf-x86_64-debug-201911-lp152.6.8.1
Ссылки
- E-Mail link for openSUSE-SU-2020:2314-1
- SUSE Security Ratings
- SUSE Bug 1177789
- SUSE CVE CVE-2019-14584 page
Описание
Null pointer dereference in Tianocore EDK2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Затронутые продукты
openSUSE Leap 15.2:ovmf-201911-lp152.6.8.1
openSUSE Leap 15.2:ovmf-tools-201911-lp152.6.8.1
openSUSE Leap 15.2:qemu-ovmf-ia32-201911-lp152.6.8.1
openSUSE Leap 15.2:qemu-ovmf-x86_64-201911-lp152.6.8.1
Ссылки
- CVE-2019-14584
- SUSE Bug 1177789