Lucene search
SuseOPENSUSE-SU-2021:0495-1HistoryApr 02, 2021 - 12:00 a.m.
Security update for ovmf (moderate)
2021-04-0200:00:00
lists.opensuse.org
20
ovmf
heap corruption
lzmauefidecompressgetinfo
unlimited fv recursion
suse
opensuse leap 15.2
security update
EPSS
0.001
Percentile
17.8%
An update that fixes two vulnerabilities is now available.
Description:
This update for ovmf fixes the following issues:
- CVE-2021-28211: ovmf: edk2: possible heap corruption with
LzmaUefiDecompressGetInfo (bsc#1183578) - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.2:
zypper in -t patch openSUSE-2021-495=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.2 | i586 | < - openSUSE Leap 15.2 (i586 x86_64): | - openSUSE Leap 15.2 (i586 x86_64):.i586.rpm | |
| openSUSE Leap | 15.2 | x86_64 | < - openSUSE Leap 15.2 (i586 x86_64): | - openSUSE Leap 15.2 (i586 x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.2 | x86_64 | < - openSUSE Leap 15.2 (x86_64): | - openSUSE Leap 15.2 (x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.2 | noarch | < - openSUSE Leap 15.2 (noarch): | - openSUSE Leap 15.2 (noarch):.noarch.rpm |
Related
nessus
nessus
SUSE SLES15 Security Update : ovmf (SUSE-SU-2021:2161-1)
2021-06-28 00:00:00
Ubuntu 20.04 LTS : EDK II vulnerabilities (USN-4923-1)
2021-04-20 00:00:00
SUSE SLES15 Security Update : ovmf (SUSE-SU-2021:0972-1)
2021-03-30 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0972-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for ovmf (openSUSE-SU-2021:0495-1)
2021-04-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0987-1)
2021-04-19 00:00:00
osv
osv
edk2 vulnerabilities
2021-04-20 17:08:41
Moderate: edk2 security update
2021-06-29 13:59:11
CVE-2021-28210
2021-06-11 16:15:12
ubuntu
ubuntu
EDK II vulnerabilities
2021-04-20 00:00:00
redhatcve
redhatcve
CVE-2021-28211
2021-03-15 17:02:53
CVE-2021-28210
2021-03-15 18:58:23
oraclelinux
oraclelinux
edk2 security update
2021-06-30 00:00:00
prion
prion
Design/Logic Flaw
2021-06-11 16:15:00
Heap overflow
2021-06-11 16:15:00
debiancve
debiancve
CVE-2021-28210
2021-06-11 16:15:12
CVE-2021-28211
2021-06-11 16:15:12
alpinelinux
alpinelinux
CVE-2021-28210
2021-06-11 16:15:12
redhat
redhat
(RHSA-2021:2591) Moderate: edk2 security update
2021-06-29 13:59:11
(RHSA-2021:4198) Moderate: edk2 security, bug fix, and enhancement update
2021-11-09 08:37:02
cvelist
cvelist
CVE-2021-28211
2021-06-11 15:11:23
CVE-2021-28210
2021-06-11 15:11:23
cve
cve
CVE-2021-28210
2021-06-11 16:15:12
CVE-2021-28211
2021-06-11 16:15:12
ubuntucve
ubuntucve
CVE-2021-28210
2021-03-16 00:00:00
CVE-2021-28211
2021-03-16 00:00:00
nvd
nvd
CVE-2021-28210
2021-06-11 16:15:12
CVE-2021-28211
2021-06-11 16:15:12
almalinux
almalinux
Moderate: edk2 security update
2021-06-29 13:59:11
rocky
rocky
edk2 security update
2021-06-29 13:59:11
debian
debian
[SECURITY] [DLA 2645-1] edk2 security update
2021-04-29 20:03:01