Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2019:0490-1 High: qemu Security Update for CVE-2019-14424

suse
Calendar Grey March 26, 2019
Dist Suse Esm H88
SUSE Security Update for ovmf addresses critical stack buffer vulnerability. Follow the guidelines to implement the most recent update immediately.
An update that fixes one vulnerability is now available

Summary

This update for ovmf fixes the following issue: Security issue fixed: - CVE-2018-12181: Fixed a stack buffer overflow in the HII database when a corrupted Bitmap was used (bsc#1128503). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-738=1 Package List: - SUSE Linux Enterprise Server 12-SP3 (aarch64 x86_64): ovmf-2017+git1492060560.b6d11d7c46-4.23.1 ovmf-tools-2017+git1492060560.b6d11d7c46-4.23.1 - SUSE Linux Enterprise Server 12-SP3 (noarch): qemu-ovmf-x86_64-2017+git1492060560.b6d11d7c46-4.23.1

Topics%20covered

Topics Covered

security advisory moderate security issue patch instructions SUSE Linux Enterprise Server stack buffer overflow ovmf

References

#1128503

Cross- CVE-2018-12181

Affected Products:

SUSE Linux Enterprise Server 12-SP3

https://www.suse.com/security/cve/CVE-2018-12181.html

https://bugzilla.suse.com/1128503

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:0738-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue patch instructions SUSE Linux Enterprise Server stack buffer overflow ovmf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here