gpp_maybe Security update for grub2

SUSE-SLE-SAP-12-SP3-2020-2079

This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data - Use grub_calloc for overflow check and return NULL when it would occur - Use gcc-9 compiler for overflow check builtins - Backport gcc-9 build fixes - Fix packed-not-aligned error on GCC 8 (bsc#1084632)

• Release Date
  Jul 29 2020
• References
  Bugzilla: 1174463, 1174570, 1173812, 1084632, 1168994
  CVEs: CVE-2020-10713, CVE-2020-14310, CVE-2020-15706, CVE-2020-14308, CVE-2020-14309, CVE-2020-14311, CVE-2020-15707
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  grub2
  Bootloader with support for Linux, Multiboot and more

  2.02-4.53.1

  lock rpm

  lock src

  grub2-powerpc-ieee1275
  Bootloader with support for Linux, Multiboot and more

  2.02-4.53.1

  lock rpm

  grub2-snapper-plugin
  Grub2's snapper plugin

  2.02-4.53.1

  lock rpm

  grub2-systemd-sleep-plugin
  Grub2's systemd-sleep plugin

  2.02-4.53.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.3 x86_64

• Packages
  grub2
  Bootloader with support for Linux, Multiboot and more

  2.02-4.53.1

  lock rpm

  lock src

  grub2-i386-pc
  Bootloader with support for Linux, Multiboot and more

  2.02-4.53.1

  lock rpm

  grub2-snapper-plugin
  Grub2's snapper plugin

  2.02-4.53.1

  lock rpm

  grub2-systemd-sleep-plugin
  Grub2's systemd-sleep plugin

  2.02-4.53.1

  lock rpm

  grub2-x86_64-efi
  Bootloader with support for Linux, Multiboot and more

  2.02-4.53.1

  lock rpm

  grub2-x86_64-xen
  Bootloader with support for Linux, Multiboot and more

  2.02-4.53.1

  lock rpm