Revision Date: | 2021-03-02 | Version: | 1 |
Title: | Security update for grub2 (Important) |
Description: |
This update for grub2 fixes the following issues:
grub2 implements the new 'SBAT' method for SHIM based secure boot revocation. (bsc#1182057)
- CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711) - CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883) - CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264) - CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970) - CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262) - CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263)
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1175970 1176711 1177883 1179264 1179265 1182057 1182262 1182263 CVE-2009-1885 CVE-2010-2252 CVE-2010-4000 CVE-2011-1000 CVE-2011-1526 CVE-2011-4862 CVE-2012-2369 CVE-2012-4929 CVE-2013-1431 CVE-2013-2142 CVE-2013-7447 CVE-2013-7447 CVE-2014-0250 CVE-2014-0791 CVE-2014-2977 CVE-2014-2978 CVE-2014-4877 CVE-2014-5044 CVE-2014-8104 CVE-2015-0252 CVE-2015-2059 CVE-2015-5276 CVE-2015-8833 CVE-2016-0729 CVE-2016-1856 CVE-2016-1857 CVE-2016-2099 CVE-2016-4463 CVE-2016-4590 CVE-2016-4591 CVE-2016-4622 CVE-2016-4624 CVE-2016-4971 CVE-2016-5104 CVE-2016-5180 CVE-2016-6329 CVE-2016-6855 CVE-2016-7098 CVE-2017-11671 CVE-2017-2834 CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 CVE-2017-6508 CVE-2017-7478 CVE-2017-7479 CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233
|
Platform(s): | openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise for SAP 12 SP2 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4
| Product(s): | |
Definition Synopsis |
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information
python-glanceclient-0.15.0-3.1 is installed
OR python-keystoneclient-1.0.0-19.1 is installed
OR python-keystoneclient-doc-1.0.0-19.1 is installed
OR python-keystonemiddleware-1.2.0-4.1 is installed
OR python-novaclient-2.20.0-6.1 is installed
OR python-novaclient-doc-2.20.0-6.1 is installed
OR python-swiftclient-2.3.1-3.1 is installed
OR python-swiftclient-doc-2.3.1-3.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Build System Kit 12 is installed
AND Package Information
libreoffice-4.3.5.2-10 is installed
OR libreoffice-sdk-4.3.5.2-10 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Build System Kit 12 SP1 is installed
AND kernel-zfcpdump-3.12.62-60.62 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Build System Kit 12 SP2 is installed
AND kernel-zfcpdump-4.4.59-92.24 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Build System Kit 12 SP3 is installed
AND kernel-zfcpdump-4.4.82-6.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Build System Kit 12 SP4 is installed
AND Package Information
cups-1.7.5-20.20 is installed
OR cups-ddk-1.7.5-20.20 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 is installed
AND telepathy-gabble-0.18.1-3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
DirectFB-1.7.1-4 is installed
OR lib++dfb-1_7-1-1.7.1-4 is installed
OR libdirectfb-1_7-1-1.7.1-4 is installed
OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
gnome-shell-3.20.4-76 is installed
OR gnome-shell-browser-plugin-3.20.4-76 is installed
OR gnome-shell-calendar-3.20.4-76 is installed
OR gnome-shell-lang-3.20.4-76 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
cpp48-4.8.5-31.17 is installed
OR gcc48-4.8.5-31.17 is installed
OR gcc48-32bit-4.8.5-31.17 is installed
OR gcc48-c++-4.8.5-31.17 is installed
OR gcc48-gij-4.8.5-31.17 is installed
OR gcc48-gij-32bit-4.8.5-31.17 is installed
OR gcc48-info-4.8.5-31.17 is installed
OR libasan0-4.8.5-31.17 is installed
OR libasan0-32bit-4.8.5-31.17 is installed
OR libgcj48-4.8.5-31.17 is installed
OR libgcj48-32bit-4.8.5-31.17 is installed
OR libgcj48-jar-4.8.5-31.17 is installed
OR libgcj_bc1-4.8.5-31.17 is installed
OR libstdc++48-devel-4.8.5-31.17 is installed
OR libstdc++48-devel-32bit-4.8.5-31.17 is installed
|
Definition Synopsis |
SUSE Linux Enterprise for SAP 12 is installed
AND Package Information
compat-libldap-2_3-0-2.3.37-16.1 is installed
OR openldap2-2.4.39-16.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise for SAP 12 SP1 is installed
AND Package Information
openvpn-2.3.8-16.17.1 is installed
OR openvpn-auth-pam-plugin-2.3.8-16.17.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise for SAP 12 SP2 is installed
AND Package Information
compat-openssl098-0.9.8j-105.1 is installed
OR libopenssl0_9_8-0.9.8j-105.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 is installed
AND Package Information
conntrack-tools-1.4.2-5 is installed
OR libnetfilter_cthelper-1.0.0-7 is installed
OR libnetfilter_cthelper0-1.0.0-7 is installed
OR libnetfilter_cttimeout-1.0.0-9 is installed
OR libnetfilter_cttimeout1-1.0.0-9 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 SP1 is installed
AND Package Information
ctdb-4.2.4-28.14 is installed
OR samba-4.2.4-28.14 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 SP2 is installed
AND ctdb-4.4.2-29 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 SP3 is installed
AND haproxy-1.6.11-10 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 SP4 is installed
AND libpcreposix0-8.39-8.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 SP5 is installed
AND libpcreposix0-8.39-8.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
AND Package Information
bash-4.3-83.23 is installed
OR bash-doc-4.3-83.23 is installed
OR libreadline6-6.3-83.23 is installed
OR libreadline6-32bit-6.3-83.23 is installed
OR readline-doc-6.3-83.23 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Live Patching 12 is installed
AND Package Information
kgraft-patch-3_12_39-47-default-1-2 is installed
OR kgraft-patch-3_12_39-47-xen-1-2 is installed
OR kgraft-patch-SLE12_Update_4-1-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Real Time Extension 12 SP1 is installed
AND Package Information
kernel-compute-3.12.67-60.27.1 is installed
OR kernel-compute-base-3.12.67-60.27.1 is installed
OR kernel-compute-devel-3.12.67-60.27.1 is installed
OR kernel-compute_debug-3.12.67-60.27.1 is installed
OR kernel-compute_debug-devel-3.12.67-60.27.1 is installed
OR kernel-devel-rt-3.12.67-60.27.1 is installed
OR kernel-rt-3.12.67-60.27.1 is installed
OR kernel-rt-base-3.12.67-60.27.1 is installed
OR kernel-rt-devel-3.12.67-60.27.1 is installed
OR kernel-rt_debug-3.12.67-60.27.1 is installed
OR kernel-rt_debug-devel-3.12.67-60.27.1 is installed
OR kernel-source-rt-3.12.67-60.27.1 is installed
OR kernel-syms-rt-3.12.67-60.27.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Real Time Extension 12 SP2 is installed
AND Package Information
cluster-md-kmp-rt-4.4.74-7.10.1 is installed
OR cluster-network-kmp-rt-4.4.74-7.10.1 is installed
OR dlm-kmp-rt-4.4.74-7.10.1 is installed
OR gfs2-kmp-rt-4.4.74-7.10.1 is installed
OR kernel-devel-rt-4.4.74-7.10.1 is installed
OR kernel-rt-4.4.74-7.10.1 is installed
OR kernel-rt-base-4.4.74-7.10.1 is installed
OR kernel-rt-devel-4.4.74-7.10.1 is installed
OR kernel-rt_debug-4.4.74-7.10.1 is installed
OR kernel-rt_debug-devel-4.4.74-7.10.1 is installed
OR kernel-source-rt-4.4.74-7.10.1 is installed
OR kernel-syms-rt-4.4.74-7.10.1 is installed
OR ocfs2-kmp-rt-4.4.74-7.10.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP1 is installed
AND Package Information
PackageKit-0.3.14-2.12.105 is installed
OR PackageKit-lang-0.3.14-2.12.105 is installed
OR hal-0.5.12-23.40.5 is installed
OR hal-32bit-0.5.12-23.40.5 is installed
OR hal-doc-0.5.12-23.40.6 is installed
OR hal-x86-0.5.12-23.40.5 is installed
OR libpackagekit-glib10-0.3.14-2.12.105 is installed
OR yast2-core-2.17.35-0.2.17 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 11 SP2 is installed
AND
xorg-x11-libXrender-7.4-1.16.1 is installed
OR xorg-x11-libXrender-32bit-7.4-1.16.1 is installed
OR xorg-x11-libXrender-x86-7.4-1.16.1 is installed
OR Package Information
SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
AND
xorg-x11-libXrender-7.4-1.16.1 is installed
OR xorg-x11-libXrender-32bit-7.4-1.16.1 is installed
OR xorg-x11-libXrender-x86-7.4-1.16.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP2 is installed
AND gzip-1.3.12-69.19.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP2-LTSS is installed
AND Package Information
MozillaFirefox-24.7.0esr-0.3.1 is installed
OR MozillaFirefox-translations-24.7.0esr-0.3.1 is installed
OR libfreebl3-3.16.2-0.3.1 is installed
OR libfreebl3-32bit-3.16.2-0.3.1 is installed
OR mozilla-nss-3.16.2-0.3.1 is installed
OR mozilla-nss-32bit-3.16.2-0.3.1 is installed
OR mozilla-nss-devel-3.16.2-0.3.1 is installed
OR mozilla-nss-tools-3.16.2-0.3.1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 11 SP3 is installed
AND
libmysql55client18-5.5.46-0.14.1 is installed
OR libmysql55client18-32bit-5.5.46-0.14.1 is installed
OR libmysql55client18-x86-5.5.46-0.14.1 is installed
OR libmysql55client_r18-5.5.46-0.14.1 is installed
OR mysql-5.5.46-0.14.1 is installed
OR mysql-client-5.5.46-0.14.1 is installed
OR mysql-tools-5.5.46-0.14.1 is installed
OR Package Information
SUSE Linux Enterprise Server for VMWare 11 SP3 is installed
AND
libmysql55client18-5.5.46-0.14.1 is installed
OR libmysql55client18-32bit-5.5.46-0.14.1 is installed
OR libmysql55client18-x86-5.5.46-0.14.1 is installed
OR libmysql55client_r18-5.5.46-0.14.1 is installed
OR mysql-5.5.46-0.14.1 is installed
OR mysql-client-5.5.46-0.14.1 is installed
OR mysql-tools-5.5.46-0.14.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP3 is installed
AND LibVNCServer-0.9.1-154.24 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP4 is installed
AND Package Information
ant-1.7.1-20.11.1 is installed
OR ant-trax-1.7.1-16.11.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 is installed
AND Package Information
cpio-2.11-26 is installed
OR cpio-lang-2.11-26 is installed
OR tar-1.27.1-2 is installed
OR tar-lang-1.27.1-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
bzip2-1.0.6-27 is installed
OR bzip2-doc-1.0.6-27 is installed
OR libbz2-1-1.0.6-27 is installed
OR libbz2-1-32bit-1.0.6-27 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
aaa_base-13.2+git20140911.61c1681-28 is installed
OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
apache-commons-daemon-1.0.15-6 is installed
OR apache-commons-daemon-javadoc-1.0.15-6 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
xen-4.11.0_08-1 is installed
OR xen-doc-html-4.11.0_08-1 is installed
OR xen-libs-4.11.0_08-1 is installed
OR xen-libs-32bit-4.11.0_08-1 is installed
OR xen-tools-4.11.0_08-1 is installed
OR xen-tools-domU-4.11.0_08-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
AND Package Information
avahi-0.6.32-30 is installed
OR avahi-lang-0.6.32-30 is installed
OR avahi-utils-0.6.32-30 is installed
OR libavahi-client3-0.6.32-30 is installed
OR libavahi-common3-0.6.32-30 is installed
OR libavahi-core7-0.6.32-30 is installed
OR libdns_sd-0.6.32-30 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed
AND Package Information
kernel-firmware-20170530-21.22 is installed
OR ucode-amd-20170530-21.22 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
AND Package Information
php53-5.3.17-48.1 is installed
OR php53-devel-5.3.17-48.1 is installed
OR php53-imap-5.3.17-48.1 is installed
OR php53-posix-5.3.17-48.1 is installed
OR php53-readline-5.3.17-48.1 is installed
OR php53-sockets-5.3.17-48.1 is installed
OR php53-sqlite-5.3.17-48.1 is installed
OR php53-tidy-5.3.17-48.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
AND Package Information
PackageKit-devel-0.3.14-2.30.11 is installed
OR hal-devel-0.5.12-23.76.1 is installed
OR libpackagekit-glib10-devel-0.3.14-2.30.11 is installed
OR libpackagekit-qt10-0.3.14-2.30.11 is installed
OR libpackagekit-qt10-devel-0.3.14-2.30.11 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 is installed
AND Package Information
FastCGI-2.4.0-167 is installed
OR perl-FastCGI-2.4.0-167 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
AND Package Information
DirectFB-devel-1.7.1-4 is installed
OR lib++dfb-devel-1.7.1-4 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
AND Package Information
avahi-compat-howl-devel-0.6.32-30 is installed
OR avahi-compat-mDNSResponder-devel-0.6.32-30 is installed
OR libavahi-devel-0.6.32-30 is installed
OR libhowl0-0.6.32-30 is installed
OR python-avahi-0.6.32-30 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
AND Package Information
ImageMagick-6.8.8.1-70 is installed
OR ImageMagick-devel-6.8.8.1-70 is installed
OR libMagick++-6_Q16-3-6.8.8.1-70 is installed
OR libMagick++-devel-6.8.8.1-70 is installed
OR perl-PerlMagick-6.8.8.1-70 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 is installed
AND Package Information
evolution-data-server-3.10.4-5.11 is installed
OR evolution-data-server-lang-3.10.4-5.11 is installed
OR libcamel-1_2-45-3.10.4-5.11 is installed
OR libcamel-1_2-45-32bit-3.10.4-5.11 is installed
OR libebackend-1_2-7-3.10.4-5.11 is installed
OR libebackend-1_2-7-32bit-3.10.4-5.11 is installed
OR libebook-1_2-14-3.10.4-5.11 is installed
OR libebook-1_2-14-32bit-3.10.4-5.11 is installed
OR libebook-contacts-1_2-0-3.10.4-5.11 is installed
OR libebook-contacts-1_2-0-32bit-3.10.4-5.11 is installed
OR libecal-1_2-16-3.10.4-5.11 is installed
OR libecal-1_2-16-32bit-3.10.4-5.11 is installed
OR libedata-book-1_2-20-3.10.4-5.11 is installed
OR libedata-book-1_2-20-32bit-3.10.4-5.11 is installed
OR libedata-cal-1_2-23-3.10.4-5.11 is installed
OR libedata-cal-1_2-23-32bit-3.10.4-5.11 is installed
OR libedataserver-1_2-18-3.10.4-5.11 is installed
OR libedataserver-1_2-18-32bit-3.10.4-5.11 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
AND Package Information
libtag1-32bit-1.9.1-1 is installed
OR libtag_c0-32bit-1.9.1-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
AND argyllcms-1.6.3-3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
AND Package Information
NetworkManager-1.0.12-13.6 is installed
OR NetworkManager-lang-1.0.12-13.6 is installed
OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
|