shield Security update for ovmf

SUSE-SLE-SERVER-12-SP5-2021-987

This update for ovmf fixes the following issues: - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578) - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)

• Release Date
  Mar 30 2021
• References
  Bugzilla: 1183578, 1183579
  CVEs: CVE-2021-28211, CVE-2021-28210
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  ovmf
  Open Virtual Machine Firmware

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm

  lock src

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm

  lock src

  ovmf-tools
  The BaseTools from edk2

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm

  qemu-uefi-aarch64
  UEFI QEMU rom image (AArch64)

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  ovmf
  Open Virtual Machine Firmware

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm

  lock src

  ovmf-tools
  The BaseTools from edk2

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm

  qemu-ovmf-x86_64
  Open Virtual Machine Firmware - QEMU rom images (x86_64)

  2017+git1510945757.b2662641d5-3.35.1

  lock rpm