| Revision Date: | 2021-03-02 | Version: | 1 |
| Title: | Security update for grub2 (Important) |
| Description: |
This update for grub2 fixes the following issues:
grub2 implements the new 'SBAT' method for SHIM based secure boot revocation. (bsc#1182057)
- CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711) - CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883) - CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264) - CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970) - CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262) - CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263)
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1065600
1065729
1113160
1138822
1141122
1142038
1148177
1153090
1153277
1154940
1154968
1155372
1155798
1157119
1160673
1160922
1163871
1165692
1165921
1168310
1168468
1170107
1170231
1170557
1170824
1171675
1171687
1171688
1172159
1172462
1172798
1172846
1173972
1174003
1174098
1174753
1174817
1175168
1175599
1175621
1175718
1175807
1175970
1176019
1176381
1176400
1176588
1176711
1176907
1176979
1177090
1177109
1177121
1177193
1177194
1177206
1177258
1177271
1177283
1177284
1177285
1177286
1177297
1177384
1177511
1177617
1177681
1177683
1177687
1177694
1177697
1177719
1177724
1177725
1177726
1177883
1179264
1179265
1182057
1182262
1182263
802154
954532
CVE-2017-14992
CVE-2017-7500
CVE-2019-10215
CVE-2019-15043
CVE-2019-18904
CVE-2020-0561
CVE-2020-12245
CVE-2020-12351
CVE-2020-12352
CVE-2020-13379
CVE-2020-13614
CVE-2020-13844
CVE-2020-14372
CVE-2020-24490
CVE-2020-25212
CVE-2020-25632
CVE-2020-25641
CVE-2020-25643
CVE-2020-25645
CVE-2020-25647
CVE-2020-27749
CVE-2020-27779
CVE-2020-6458
CVE-2020-6459
CVE-2020-6460
CVE-2020-6462
CVE-2021-20225
CVE-2021-20233
openSUSE-SU-2020:0235-1
openSUSE-SU-2020:0604-1
openSUSE-SU-2020:0778-1
openSUSE-SU-2020:1105-1
openSUSE-SU-2020:1693-1
openSUSE-SU-2020:1698-1
SUSE-SU-2021:0683-1
|
| Platform(s): | openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Storage 7
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.1 is installed AND Package Information
rmt-server-2.5.2-lp151.2.9 is installed
OR rmt-server-config-2.5.2-lp151.2.9 is installed
OR rmt-server-pubcloud-2.5.2-lp151.2.9 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.2 is installed
AND dracut-saltboot-0.1.1590413773.a959db7-lp152.2.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND Package Information
grub2-2.04-9.34.1 is installed
OR grub2-arm64-efi-2.04-9.34.1 is installed
OR grub2-i386-pc-2.04-9.34.1 is installed
OR grub2-powerpc-ieee1275-2.04-9.34.1 is installed
OR grub2-s390x-emu-2.04-9.34.1 is installed
OR grub2-snapper-plugin-2.04-9.34.1 is installed
OR grub2-systemd-sleep-plugin-2.04-9.34.1 is installed
OR grub2-x86_64-efi-2.04-9.34.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
AND rpm-build-4.14.1-10.16 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND skopeo-0.1.32-4.5 is installed
|