< back to search

shield Security update for ovmf

SUSE-SLE-Module-Server-Applications-15-SP2-2021-972

This update for ovmf fixes the following issues: - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578) - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)

Release Date

Mar 29 2021
References

Bugzilla: 1183578, 1183579
CVEs: CVE-2021-28210, CVE-2021-28211
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.2 aarch64

Packages

ovmf
Open Virtual Machine Firmware

201911-7.11.1 lock rpm lock src

ovmf-tools
The BaseTools from edk2

201911-7.11.1 lock rpm

qemu-uefi-aarch64
UEFI QEMU rom image (AArch64)

201911-7.11.1 lock rpm

Server Applications Module 15.2 x86_64

Packages

ovmf
Open Virtual Machine Firmware

201911-7.11.1 lock rpm lock src

ovmf-tools
The BaseTools from edk2

201911-7.11.1 lock rpm

qemu-ovmf-x86_64
Open Virtual Machine Firmware - QEMU rom images (x86_64)

201911-7.11.1 lock rpm