SUSE-SU-2025:03096-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2023-45229: Fixed integer underflow when processing IANA/IATA options in a DHCPv6 Advertise message bsc1218879 - CVE-2023-45230: Fixed buffer overflow in the DHCPv6 client via a long Server ID option bsc1218880...

SUSE-SU-2025:0503-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2024-1298: potential division-by-zero crash in edk2 due to UINT32 overflow in S3 ResumeCount. bsc1225889 - CVE-2023-45229: out-of-bounds read in edk2 when processing IANA/IATA options in DHCPv6 Advertise messages. bsc1218879 - CVE-2023-45230:...

SUSE-SU-2025:0421-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2023-45229: out-of-bounds read in edk2 when processing IANA/IATA options in DHCPv6 Advertise messages. bsc1218879 - CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. bsc1218880 - CVE-2023-45231:...

SUSE-SU-2024:4357-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2024-1298: MdeModulePkg: Potential UINT32 overflow in S3 ResumeCount bsc1225889...

SUSE-SU-2023:2234-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2021-38578: Fixed potential underflow in SmmEntryPointwhen computing BufferSize bsc1196741. - CVE-2019-14560: Fixed potential secure boot bypass caused by improper check of GetEfiGlobalVariable2 return value bsc1174246. - revert a patch to fi...

SUSE-SU-2023:1968-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE-SU-2023:1941-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE-SU-2023:1921-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 bsc1174246. - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd bsc1196741...

SUSE-SU-2023:0004-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-11098: Fixed insufficient input validation in MdeModulePkg bsc1188371...

SUSE-SU-2021:2161-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579...

OPENSUSE-SU-2021:0918-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151 This update was imported from the SUSE:SLE-15-SP2:Update update project...

SUSE-SU-2021:2152-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151...

SUSE-SU-2021:2151-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151...

OPENSUSE-SU-2021:0495-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579 This update was imported from the SUSE:SLE-15-SP2:Update update project...

SUSE-SU-2021:0987-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579...

SUSE-SU-2020:3885-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789...

SUSE-SU-2020:3883-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789...

SUSE-SU-2020:3126-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927...

OPENSUSE-SU-2020:1535-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Use openSUSE CA for the opensuse flavor bsc1175674 This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2020:2691-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. - Support more SCSI drivers PvScsi, MptScsi and LsiScsi. bsc1119454 - Enable LsiScsi explicitly since it's disabled by default...