shield Security update for ovmf

SUSE-SLE-Module-Server-Applications-15-SP1-2020-568

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation (bsc#1163959). - CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences (bsc#1153072). - CVE-2019-14559: Fixed a remotely exploitable memory leak in the ARP handling code (bsc#1163927). - CVE-2019-14575: Fixed an insufficient signature check in the DxeImageVerificationHandler (bsc#1163969). - Enabled HTTPS-over-IPv6 (bsc#1153072).

• Release Date
  Mar 3 2020
• References
  Bugzilla: 1153072, 1163927, 1163959, 1163969
  CVEs: CVE-2019-14553, CVE-2019-14559, CVE-2019-14563, CVE-2019-14575
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.1 x86_64

• Packages
  ovmf
  Open Virtual Machine Firmware

  2017+git1510945757.b2662641d5-5.29.3 lock rpm lock src

  ovmf-tools
  The BaseTools from edk2

  2017+git1510945757.b2662641d5-5.29.3 lock rpm

  qemu-ovmf-x86_64
  Open Virtual Machine Firmware - QEMU rom images (x86_64)

  2017+git1510945757.b2662641d5-5.29.3 lock rpm

Server Applications Module 15.1 aarch64

• Packages
  ovmf
  Open Virtual Machine Firmware

  2017+git1510945757.b2662641d5-5.29.3 lock rpm lock src

  ovmf-tools
  The BaseTools from edk2

  2017+git1510945757.b2662641d5-5.29.3 lock rpm

  qemu-uefi-aarch64
  UEFI QEMU rom image (AArch64)

  2017+git1510945757.b2662641d5-5.29.3 lock rpm