SUSE-SU-2024:4088-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889...

RHSA-2019:2125 Red Hat Security Advisory: ovmf security and enhancement update

Bulletin has no description...

RHSA-2019:0809 Red Hat Security Advisory: ovmf security update

Bulletin has no description...

RHSA-2018:3090 Red Hat Security Advisory: ovmf security, bug fix, and enhancement update

Bulletin has no description...

OPENSUSE-SU-2024:14336-1 ovmf-202405-1.1 on GA media

These are all security issues fixed in the ovmf-202405-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14199-1 ovmf-202402-1.1 on GA media

These are all security issues fixed in the ovmf-202402-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13807-1 ovmf-202308-7.1 on GA media

These are all security issues fixed in the ovmf-202308-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13949-1 ovmf-202308-9.1 on GA media

These are all security issues fixed in the ovmf-202308-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11134-1 ovmf-202105-3.4 on GA media

These are all security issues fixed in the ovmf-202105-3.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12542-1 ovmf-202211-1.1 on GA media

These are all security issues fixed in the ovmf-202211-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13451-1 ovmf-202308-3.1 on GA media

These are all security issues fixed in the ovmf-202308-3.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : ovmf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssl: AES OCB fails to encrypt some bytes CVE-2022-2097 - openssl: timing attack in RSA Decryption...

RHEL 5 : ovmf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssl: Malformed X.509 IPAdressFamily could cause OOB read CVE-2017-3735 - During key agreement in a TL...

RHEL 8 : ovmf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssl: 0-byte record padding oracle CVE-2019-1559 - openssl: timing attack in RSA Decryption...

SUSE CVE-2024-35800

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if getnextvariable is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware...

CVE-2024-35800

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if getnextvariable is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware...

CVE-2024-35800

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if getnextvariable is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware...

CVE-2024-35800

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if getnextvariable is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware...

CVE-2024-35800 efi: fix panic in kdump kernel

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if getnextvariable is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware...

CVE-2024-35800 efi: fix panic in kdump kernel

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if getnextvariable is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware...