shield Security update for ovmf

SUSE-SLE-SERVER-12-SP3-2018-3010

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPEND_WRITE (bsc#1115916). - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c (bsc#1115917). - CVE-2017-5732: Fixed privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (bsc#1115917). - CVE-2017-5733: Fixed privilege escalation via heap-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5734: Fixed privilege escalation via stack-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5735: Fixed privilege escalation via heap-based buffer overflow in Decode() function (bsc#1115917).

• Release Date
  Dec 20 2018
• References
  Bugzilla: 1115917, 1115916
  CVEs: CVE-2017-5733, CVE-2017-5732, CVE-2017-5731, CVE-2017-5735, CVE-2017-5734, CVE-2018-3613
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  ovmf
  Open Virtual Machine Firmware

  2017+git1492060560.b6d11d7c46-4.17.1 lock rpm lock src

  ovmf-tools
  The BaseTools from edk2

  2017+git1492060560.b6d11d7c46-4.17.1 lock rpm

  qemu-uefi-aarch64
  UEFI QEMU rom image (AArch64)

  2017+git1492060560.b6d11d7c46-4.17.1 lock rpm

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  ovmf
  Open Virtual Machine Firmware

  2017+git1492060560.b6d11d7c46-4.17.1 lock rpm lock src

  ovmf-tools
  The BaseTools from edk2

  2017+git1492060560.b6d11d7c46-4.17.1 lock rpm

  qemu-ovmf-x86_64
  Open Virtual Machine Firmware - QEMU rom images (x86_64)

  2017+git1492060560.b6d11d7c46-4.17.1 lock rpm