< back to search

gpp_maybe Security update for ovmf

SUSE-SLE-Micro-5.4-2023-2234

This update for ovmf fixes the following issues: - CVE-2021-38578: Fixed potential underflow in SmmEntryPointwhen computing BufferSize (bsc#1196741). - CVE-2019-14560: Fixed potential secure boot bypass caused by improper check of GetEfiGlobalVariable2() return value (bsc#1174246). - revert a patch to fix xen boot problems (bsc#1205613)

Release Date

May 17 2023
References

Bugzilla: 1196741, 1174246, 1205613
CVEs: CVE-2019-14560, CVE-2021-38578
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.4 aarch64

Packages

ovmf
Open Virtual Machine Firmware

202202-150400.5.10.1 lock src

qemu-uefi-aarch64
UEFI QEMU rom image (AArch64)

202202-150400.5.10.1 lock rpm

SUSE Linux Enterprise Micro 5.4 x86_64

Packages

ovmf
Open Virtual Machine Firmware

202202-150400.5.10.1 lock src

qemu-ovmf-x86_64
Open Virtual Machine Firmware - QEMU rom images (x86_64)

202202-150400.5.10.1 lock rpm