SUSE-SU-2022:2343-1 Security update for oracleasm

This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2340-1 Security update for fwupdate

This update of fwupdate fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-37491

Name of the Vulnerable Software and Affected Versions fwupd affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitates a rebuild of fwupd with a new secure boot key. Recommendations At the moment, there is no information about a newer...

openSUSE: Security Advisory for fwupd (SUSE-SU-2022:2322-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2318-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-37489

Name of the Vulnerable Software and Affected Versions fwupdate affected versions not specified Description The issue is related to the grub2 boothole 3 issues, which necessitates a rebuild of fwupdate with a new secure boot key. Recommendations At the moment, there is no information about a newer...

Rocky Linux 8 : grub2, mokutil, shim, and shim-unsigned-x64 (RLSA-2022:5095)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5095 advisory. - A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space...

SUSE-SU-2022:2322-1 Security update for fwupd

This update of fwupd fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2319-1 Security update for crash

This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2318-1 Security update for crash

This update of crash fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

PT-2022-37483

Name of the Vulnerable Software and Affected Versions fwupd affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitates a rebuild of fwupd with a new secure boot key. Recommendations At the moment, there is no information about a newer...

PT-2022-37481

Name of the Vulnerable Software and Affected Versions crash affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitated a rebuild with a new secure boot key. Recommendations At the moment, there is no information about a newer version that...

openSUSE: Security Advisory for s390-tools (SUSE-SU-2022:2310-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2287-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2316-1 Security update for oracleasm

This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

SUSE-SU-2022:2315-1 Security update for oracleasm

This update of oracleasm fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...

CVE-2021-3697

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...

CVE-2021-3695

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...

AZL-31034 CVE-2021-3695 affecting package grub2 for versions less than 2.06-12

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...

AZL-34785 CVE-2021-3697 affecting package grub2 for versions less than 2.06-14

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...