Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

SUSE: 2020:3283-1 Critical Security Patch for U-Boot Available Now

suse
Calendar Grey November 11, 2020
Dist Suse Esm H88
An update resolving numerous vulnerabilities in u-boot for SUSE servers has been released, featuring critical patches such as enhancements for network booting capabilities.
An update that solves 18 vulnerabilities and has two fixes is now available

Summary

This update for u-boot fixes the following issues: - Fix network boot on Raspberry Pi 3 B+ (bsc#1098649) - Fix GOP pixel format (bsc#1098447) - Fix SD writes on Raspberry Pi - Enable a few more armv7 boards to boot with EFI - Fix potentially miscompiled runtime service calls Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), CVE-2020-8432

References

#1098447 #1098649 #1134157 #1134853 #1143463

#1143777 #1143817 #1143818 #1143819 #1143820

#1143821 #1143823 #1143824 #1143825 #1143827

#1143828 #1143830 #1143831 #1162198 #1167209

Cross- CVE-2019-11059 CVE-2019-11690 CVE-2019-13103

CVE-2019-14192 CVE-2019-14193 CVE-2019-14194

CVE-2019-14195 CVE-2019-14196 CVE-2019-14197

CVE-2019-14198 CVE-2019-14199 CVE-2019-14200

CVE-2019-14201 CVE-2019-14202 CVE-2019-14203

CVE-2019-14204 CVE-2020-10648 CVE-2020-8432

Affected Products:

SUSE Linux Enterprise Server for SAP 15

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise High Performance Computing 15-ESPOS

https://www.suse.com/security/cve/CVE-2019-11059...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:3283-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here