< back to search

shield Security update for ovmf
SUSE-SLE-SERVER-12-SP4-2018-2989

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPEND_WRITE (bsc#1115916). - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c (bsc#1115917). - CVE-2017-5732: Fixed privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (bsc#1115917). - CVE-2017-5733: Fixed privilege escalation via heap-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5734: Fixed privilege escalation via stack-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5735: Fixed privilege escalation via heap-based buffer overflow in Decode() function (bsc#1115917). Non security issues fixed: - Fixed an issue with the default owner of PK/KEK/db/dbx and make the auto-enrollment only happen at the very first time. (bsc#1117998)

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64
  • Packages
    ovmf
    Open Virtual Machine Firmware
    2017+git1510945757.b2662641d5-3.5.1 lock rpm lock src
    ovmf-tools
    The BaseTools from edk2
    2017+git1510945757.b2662641d5-3.5.1 lock rpm
    qemu-uefi-aarch64
    UEFI QEMU rom image (AArch64)
    2017+git1510945757.b2662641d5-3.5.1 lock rpm
SUSE Linux Enterprise Server 12.4 x86_64
  • Packages
    ovmf
    Open Virtual Machine Firmware
    2017+git1510945757.b2662641d5-3.5.1 lock rpm lock src
    ovmf-tools
    The BaseTools from edk2
    2017+git1510945757.b2662641d5-3.5.1 lock rpm
    qemu-ovmf-x86_64
    Open Virtual Machine Firmware - QEMU rom images (x86_64)
    2017+git1510945757.b2662641d5-3.5.1 lock rpm