SUSE-SU-2022:2340-1 Security update for fwupdate

This update of fwupdate fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-37490

Name of the Vulnerable Software and Affected Versions oracleasm affected versions not specified Description The issue is related to the grub2 boothole 3 issues, which necessitated a rebuild of oracleasm with a new secure boot key. Recommendations At the moment, there is no information about a new...

PT-2022-37491

Name of the Vulnerable Software and Affected Versions fwupd affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitates a rebuild of fwupd with a new secure boot key. Recommendations At the moment, there is no information about a newer...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-1997)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-1967)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2022-1997)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged...

Rocky Linux 8 : grub2, mokutil, shim, and shim-unsigned-x64 (RLSA-2022:5095)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5095 advisory. - A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space...

EulerOS 2.0 SP9 : grub2 (EulerOS-SA-2022-1967)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged...

PT-2022-37489

Name of the Vulnerable Software and Affected Versions fwupdate affected versions not specified Description The issue is related to the grub2 boothole 3 issues, which necessitates a rebuild of fwupdate with a new secure boot key. Recommendations At the moment, there is no information about a newer...

SUSE-SU-2022:2322-1 Security update for fwupd

This update of fwupd fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2319-1 Security update for crash

This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2318-1 Security update for crash

This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-37483

Name of the Vulnerable Software and Affected Versions fwupd affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitates a rebuild of fwupd with a new secure boot key. Recommendations At the moment, there is no information about a newer...

PT-2022-37482

Name of the Vulnerable Software and Affected Versions crash affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitated a rebuild with a new secure boot key. Recommendations At the moment, there is no information about a newer version that...

PT-2022-37481

Name of the Vulnerable Software and Affected Versions crash affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitated a rebuild with a new secure boot key. Recommendations At the moment, there is no information about a newer version that...

Oracle Linux 9 : grub2 (ELSA-2022-5099)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5099 advisory. - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733 - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695 Tenable has extracted the preceding descripti...

openSUSE: Security Advisory for s390-tools (SUSE-SU-2022:2310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2316-1 Security update for oracleasm

This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2315-1 Security update for oracleasm

This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

CVE-2021-3695

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...