Oval Definition:
oval:org.opensuse.security:def:66149
Revision Date
:
2020-12-01
Version
:
1
Title
:
Security update for grub2 (Important)
Description
:
This update for grub2 fixes the following issues:
- CVE-2020-10713 (bsc#1168994) - CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - CVE-2020-15706 (bsc#1174463) - CVE-2020-15707 (bsc#1174570)
- Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data - Use grub_calloc for overflow check and return NULL when it would occur
Family
:
unix
Class
:
patch
Status
:
Reference(s)
:
1168994
1171437
1172307
1173159
1173160
1173161
1173359
1173812
1174463
1174570
CVE-2020-10713
CVE-2020-10730
CVE-2020-10745
CVE-2020-10760
CVE-2020-14303
CVE-2020-14308
CVE-2020-14309
CVE-2020-14310
CVE-2020-14311
CVE-2020-15706
CVE-2020-15707
SUSE-SU-2020:1913-1
SUSE-SU-2020:2077-1
Platform(s)
:
SUSE Linux Enterprise High Availability 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP1
Product(s)
:
Definition Synopsis
SUSE Linux Enterprise High Availability 15 SP1 is installed
AND
Package Information
ctdb-4.9.5+git.343.4bc358522a9-3.38 is installed
OR
samba-4.9.5+git.343.4bc358522a9-3.38 is installed
Definition Synopsis
SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND
Package Information
grub2-2.02-26.25 is installed
OR
grub2-x86_64-xen-2.02-26.25 is installed
BACK