gpp_maybe Security update for grub2

SUSE-SLE-SAP-12-SP2-2020-2076

This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data - Use gcc-9 compiler for overflow check builtins - Backport gcc-9 build fixes - Fix packed-not-aligned error on GCC 8 (bsc#1084632) - Backport gcc-7 build fixes

• Release Date
  Jul 29 2020
• References
  Bugzilla: 1174570, 1168994, 1174463, 1173812, 1084632
  CVEs: CVE-2020-14308, CVE-2020-10713, CVE-2020-14311, CVE-2020-14310, CVE-2020-14309, CVE-2020-15706, CVE-2020-15707
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  grub2
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-115.49.1 lock rpm lock src

  grub2-powerpc-ieee1275
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-115.49.1 lock rpm

  grub2-snapper-plugin
  Grub2's snapper plugin

  2.02~beta2-115.49.1 lock rpm

  grub2-systemd-sleep-plugin
  Grub2's systemd-sleep plugin

  2.02~beta2-115.49.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

• Packages
  grub2
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-115.49.1 lock rpm lock src

  grub2-i386-pc
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-115.49.1 lock rpm

  grub2-snapper-plugin
  Grub2's snapper plugin

  2.02~beta2-115.49.1 lock rpm

  grub2-systemd-sleep-plugin
  Grub2's systemd-sleep plugin

  2.02~beta2-115.49.1 lock rpm

  grub2-x86_64-efi
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-115.49.1 lock rpm

  grub2-x86_64-xen
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-115.49.1 lock rpm