Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
100
security advisorymoderateinteger overflowSUSE Linux Micro: 2025:20219-1 moderate: u-boot integer overflow fix
* bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 . # Security update for u-boot Announcement ID: SUSE-SU-2025:20219-1 Release Date: 2025-04-29T11:10:08Z Rating: moderate References: * bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 * CVE-2024-57258 CVSS scores: * CVE-2024-57256 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57256 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57256 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2024-57258 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57258 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for u-boot fixes the following issues: * CVE-2024-57256: Fixed integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284) * CVE-2024-57258: Fixed multiple integer overflows in U-Boot's memory allocator (bsc#1237287) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-302=1 * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-302=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64) * u-boot-rpiarm64-doc-2023.04-2.1 * u-boot-rpiarm64-2023.04-2.1 * SUSE Linux Micro Extras 6.0 (aarch64) * u-boot-tools-2023.04-2.1 * u-boot-tools-debuginfo-2023.04-2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57256.html * https://www.suse.com/security/cve/CVE-2024-57258.html *https://bugzilla.suse.com/show_bug.cgi?id=1237284 * https://bugzilla.suse.com/show_bug.cgi?id=1237287 . Essential security enhancement for SUSE Linux Micro tackling two integer overflow vulnerabilities in u-boot. Apply the update immediately!. SUSE Linux, u-boot security, integer overflow issue, Linux update, SUSE security patch. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
100
security advisorymoderatesecurity updateSUSE 2025:0989-1 moderate: u-boot integer overflow fixes
* bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 . # Security update for u-boot Announcement ID: SUSE-SU-2025:0989-1 Release Date: 2025-03-24T09:32:47Z Rating: moderate References: * bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 * CVE-2024-57258 CVSS scores: * CVE-2024-57256 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57256 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57256 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2024-57258 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57258 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for u-boot fixes the following issues: * CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). * CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-989=1 openSUSE-SLE-15.6-2025-989=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-989=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * u-boot-tools-debuginfo-2021.10-150600.11.3.1 * u-boot-tools-2021.10-150600.11.3.1 * openSUSE Leap 15.6 (aarch64) *u-boot-pine64plus-2021.10-150600.11.3.1 * u-boot-dragonboard820c-doc-2021.10-150600.11.3.1 * u-boot-rock960-rk3399-doc-2021.10-150600.11.3.1 * u-boot-evb-rk3399-2021.10-150600.11.3.1 * u-boot-mvebudb-88f3720-2021.10-150600.11.3.1 * u-boot-pineh64-2021.10-150600.11.3.1 * u-boot-p2771-0000-500-doc-2021.10-150600.11.3.1 * u-boot-odroid-n2-2021.10-150600.11.3.1 * u-boot-libretech-ac-doc-2021.10-150600.11.3.1 * u-boot-poplar-doc-2021.10-150600.11.3.1 * u-boot-p3450-0000-doc-2021.10-150600.11.3.1 * u-boot-p3450-0000-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpvirt-2021.10-150600.11.3.1 * u-boot-nanopia64-2021.10-150600.11.3.1 * u-boot-geekbox-2021.10-150600.11.3.1 * u-boot-odroid-c2-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpzcu102rev10-2021.10-150600.11.3.1 * u-boot-khadas-vim-2021.10-150600.11.3.1 * u-boot-pine64plus-doc-2021.10-150600.11.3.1 * u-boot-mvebuespressobin-88f3720-2021.10-150600.11.3.1 * u-boot-khadas-vim2-doc-2021.10-150600.11.3.1 * u-boot-bananapim64-doc-2021.10-150600.11.3.1 * u-boot-mvebuespressobin-88f3720-doc-2021.10-150600.11.3.1 * u-boot-p2371-2180-doc-2021.10-150600.11.3.1 * u-boot-p2771-0000-500-2021.10-150600.11.3.1 * u-boot-rpi3-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpzcu102rev10-doc-2021.10-150600.11.3.1 * u-boot-orangepipc2-2021.10-150600.11.3.1 * u-boot-rpi4-doc-2021.10-150600.11.3.1 * u-boot-pineh64-doc-2021.10-150600.11.3.1 * u-boot-rock64-rk3328-doc-2021.10-150600.11.3.1 * u-boot-mvebumcbin-88f8040-2021.10-150600.11.3.1 * u-boot-rock-pi-n10-rk3399pro-2021.10-150600.11.3.1 * u-boot-evb-rk3399-doc-2021.10-150600.11.3.1 * u-boot-mvebudbarmada8k-2021.10-150600.11.3.1 * u-boot-ls1012afrdmqspi-2021.10-150600.11.3.1 * u-boot-libretech-cc-doc-2021.10-150600.11.3.1 * u-boot-p2371-2180-2021.10-150600.11.3.1 * u-boot-pinebook-pro-rk3399-2021.10-150600.11.3.1 * u-boot-orangepipc2-doc-2021.10-150600.11.3.1 *u-boot-poplar-2021.10-150600.11.3.1 * u-boot-rock64-rk3328-2021.10-150600.11.3.1 * u-boot-libretech-cc-2021.10-150600.11.3.1 * u-boot-rpi4-2021.10-150600.11.3.1 * u-boot-dragonboard820c-2021.10-150600.11.3.1 * u-boot-mvebudbarmada8k-doc-2021.10-150600.11.3.1 * u-boot-firefly-rk3399-2021.10-150600.11.3.1 * u-boot-firefly-rk3399-doc-2021.10-150600.11.3.1 * u-boot-libretech-ac-2021.10-150600.11.3.1 * u-boot-odroid-n2-doc-2021.10-150600.11.3.1 * u-boot-pinebook-doc-2021.10-150600.11.3.1 * u-boot-pinephone-2021.10-150600.11.3.1 * u-boot-geekbox-doc-2021.10-150600.11.3.1 * u-boot-pinephone-doc-2021.10-150600.11.3.1 * u-boot-xilinxzynqmpvirt-doc-2021.10-150600.11.3.1 * u-boot-bananapim64-2021.10-150600.11.3.1 * u-boot-rpiarm64-2021.10-150600.11.3.1 * u-boot-avnetultra96rev1-2021.10-150600.11.3.1 * u-boot-hikey-doc-2021.10-150600.11.3.1 * u-boot-mvebumcbin-88f8040-doc-2021.10-150600.11.3.1 * u-boot-odroid-c2-doc-2021.10-150600.11.3.1 * u-boot-pinebook-pro-rk3399-doc-2021.10-150600.11.3.1 * u-boot-rpiarm64-doc-2021.10-150600.11.3.1 * u-boot-ls1012afrdmqspi-doc-2021.10-150600.11.3.1 * u-boot-rpi3-doc-2021.10-150600.11.3.1 * u-boot-khadas-vim-doc-2021.10-150600.11.3.1 * u-boot-dragonboard410c-2021.10-150600.11.3.1 * u-boot-hikey-2021.10-150600.11.3.1 * u-boot-rock-pi-4-rk3399-doc-2021.10-150600.11.3.1 * u-boot-rock-pi-4-rk3399-2021.10-150600.11.3.1 * u-boot-nanopia64-doc-2021.10-150600.11.3.1 * u-boot-avnetultra96rev1-doc-2021.10-150600.11.3.1 * u-boot-pinebook-2021.10-150600.11.3.1 * u-boot-rockpro64-rk3399-doc-2021.10-150600.11.3.1 * u-boot-rock-pi-n10-rk3399pro-doc-2021.10-150600.11.3.1 * u-boot-khadas-vim2-2021.10-150600.11.3.1 * u-boot-odroid-c4-2021.10-150600.11.3.1 * u-boot-odroid-c4-doc-2021.10-150600.11.3.1 * u-boot-rockpro64-rk3399-2021.10-150600.11.3.1 * u-boot-rock960-rk3399-2021.10-150600.11.3.1 * u-boot-mvebudb-88f3720-doc-2021.10-150600.11.3.1 *u-boot-dragonboard410c-doc-2021.10-150600.11.3.1 * Basesystem Module 15-SP6 (aarch64) * u-boot-rpiarm64-doc-2021.10-150600.11.3.1 * u-boot-rpiarm64-2021.10-150600.11.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * u-boot-tools-debuginfo-2021.10-150600.11.3.1 * u-boot-tools-2021.10-150600.11.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57256.html * https://www.suse.com/security/cve/CVE-2024-57258.html * https://bugzilla.suse.com/show_bug.cgi?id=1237284 * https://bugzilla.suse.com/show_bug.cgi?id=1237287 . Important firmware security notification for Fedora tackles buffer overflow vulnerabilities. Apply suggested updates immediately.. SUSE Linux Enterprise,u-boot update,memory allocator security,integer overflow fix. . LinuxSecurity.com Team
Mar 24, 2025
SuSE
202
security advisorymoderatethreatopenSUSE 15.4: SUSE-SU-2025:0763-1 moderate: u-boot integer overflow
An update that solves two vulnerabilities can now be installed.. # Security update for u-boot Announcement ID: SUSE-SU-2025:0763-1 Release Date: 2025-03-03T08:43:15Z Rating: moderate References: * bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 * CVE-2024-57258 CVSS scores: * CVE-2024-57256 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57256 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57256 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2024-57258 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57258 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves two vulnerabilities can now be installed. ## Description: This update for u-boot fixes the following issues: * CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). * CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-763=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-763=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-763=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-763=1 * SUSE Linux Enterprise Micro 5.4 zypperin -t patch SUSE-SLE-Micro-5.4-2025-763=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-763=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * u-boot-tools-debuginfo-2021.10-150400.4.14.1 * u-boot-tools-2021.10-150400.4.14.1 * openSUSE Leap 15.4 (aarch64) * u-boot-pinebook-doc-2021.10-150400.4.14.1 * u-boot-poplar-2021.10-150400.4.14.1 * u-boot-dragonboard820c-2021.10-150400.4.14.1 * u-boot-p3450-0000-doc-2021.10-150400.4.14.1 * u-boot-libretech-cc-doc-2021.10-150400.4.14.1 * u-boot-pinebook-pro-rk3399-doc-2021.10-150400.4.14.1 * u-boot-dragonboard410c-2021.10-150400.4.14.1 * u-boot-rock960-rk3399-2021.10-150400.4.14.1 * u-boot-nanopia64-doc-2021.10-150400.4.14.1 * u-boot-dragonboard820c-doc-2021.10-150400.4.14.1 * u-boot-geekbox-2021.10-150400.4.14.1 * u-boot-firefly-rk3399-doc-2021.10-150400.4.14.1 * u-boot-odroid-n2-doc-2021.10-150400.4.14.1 * u-boot-pine64plus-2021.10-150400.4.14.1 * u-boot-pineh64-2021.10-150400.4.14.1 * u-boot-rock-pi-4-rk3399-doc-2021.10-150400.4.14.1 * u-boot-khadas-vim-2021.10-150400.4.14.1 * u-boot-rpi3-2021.10-150400.4.14.1 * u-boot-rpi4-doc-2021.10-150400.4.14.1 * u-boot-odroid-n2-2021.10-150400.4.14.1 * u-boot-pinephone-2021.10-150400.4.14.1 * u-boot-rpi4-2021.10-150400.4.14.1 * u-boot-avnetultra96rev1-2021.10-150400.4.14.1 * u-boot-odroid-c2-2021.10-150400.4.14.1 * u-boot-rockpro64-rk3399-2021.10-150400.4.14.1 * u-boot-libretech-ac-2021.10-150400.4.14.1 * u-boot-odroid-c4-doc-2021.10-150400.4.14.1 * u-boot-p2371-2180-doc-2021.10-150400.4.14.1 * u-boot-rpiarm64-2021.10-150400.4.14.1 * u-boot-rock64-rk3328-doc-2021.10-150400.4.14.1 * u-boot-pinephone-doc-2021.10-150400.4.14.1 * u-boot-xilinxzynqmpzcu102rev10-2021.10-150400.4.14.1 * u-boot-p2771-0000-500-doc-2021.10-150400.4.14.1 * u-boot-rock-pi-n10-rk3399pro-2021.10-150400.4.14.1 *u-boot-orangepipc2-2021.10-150400.4.14.1 * u-boot-khadas-vim-doc-2021.10-150400.4.14.1 * u-boot-ls1012afrdmqspi-2021.10-150400.4.14.1 * u-boot-p2371-2180-2021.10-150400.4.14.1 * u-boot-rock-pi-4-rk3399-2021.10-150400.4.14.1 * u-boot-avnetultra96rev1-doc-2021.10-150400.4.14.1 * u-boot-mvebuespressobin-88f3720-doc-2021.10-150400.4.14.1 * u-boot-mvebudbarmada8k-doc-2021.10-150400.4.14.1 * u-boot-rpiarm64-doc-2021.10-150400.4.14.1 * u-boot-rock960-rk3399-doc-2021.10-150400.4.14.1 * u-boot-mvebudb-88f3720-doc-2021.10-150400.4.14.1 * u-boot-pinebook-2021.10-150400.4.14.1 * u-boot-rock64-rk3328-2021.10-150400.4.14.1 * u-boot-rock-pi-n10-rk3399pro-doc-2021.10-150400.4.14.1 * u-boot-p3450-0000-2021.10-150400.4.14.1 * u-boot-evb-rk3399-doc-2021.10-150400.4.14.1 * u-boot-xilinxzynqmpvirt-2021.10-150400.4.14.1 * u-boot-bananapim64-2021.10-150400.4.14.1 * u-boot-libretech-ac-doc-2021.10-150400.4.14.1 * u-boot-pine64plus-doc-2021.10-150400.4.14.1 * u-boot-pineh64-doc-2021.10-150400.4.14.1 * u-boot-xilinxzynqmpvirt-doc-2021.10-150400.4.14.1 * u-boot-xilinxzynqmpzcu102rev10-doc-2021.10-150400.4.14.1 * u-boot-p2771-0000-500-2021.10-150400.4.14.1 * u-boot-libretech-cc-2021.10-150400.4.14.1 * u-boot-khadas-vim2-doc-2021.10-150400.4.14.1 * u-boot-mvebudb-88f3720-2021.10-150400.4.14.1 * u-boot-geekbox-doc-2021.10-150400.4.14.1 * u-boot-dragonboard410c-doc-2021.10-150400.4.14.1 * u-boot-hikey-doc-2021.10-150400.4.14.1 * u-boot-khadas-vim2-2021.10-150400.4.14.1 * u-boot-mvebudbarmada8k-2021.10-150400.4.14.1 * u-boot-mvebuespressobin-88f3720-2021.10-150400.4.14.1 * u-boot-nanopia64-2021.10-150400.4.14.1 * u-boot-odroid-c4-2021.10-150400.4.14.1 * u-boot-hikey-2021.10-150400.4.14.1 * u-boot-poplar-doc-2021.10-150400.4.14.1 * u-boot-ls1012afrdmqspi-doc-2021.10-150400.4.14.1 * u-boot-rockpro64-rk3399-doc-2021.10-150400.4.14.1 * u-boot-orangepipc2-doc-2021.10-150400.4.14.1 *u-boot-bananapim64-doc-2021.10-150400.4.14.1 * u-boot-odroid-c2-doc-2021.10-150400.4.14.1 * u-boot-pinebook-pro-rk3399-2021.10-150400.4.14.1 * u-boot-rpi3-doc-2021.10-150400.4.14.1 * u-boot-evb-rk3399-2021.10-150400.4.14.1 * u-boot-mvebumcbin-88f8040-doc-2021.10-150400.4.14.1 * u-boot-mvebumcbin-88f8040-2021.10-150400.4.14.1 * u-boot-firefly-rk3399-2021.10-150400.4.14.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64) * u-boot-rpiarm64-2021.10-150400.4.14.1 * SUSE Linux Enterprise Micro 5.3 (aarch64) * u-boot-rpiarm64-2021.10-150400.4.14.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64) * u-boot-rpiarm64-2021.10-150400.4.14.1 * SUSE Linux Enterprise Micro 5.4 (aarch64) * u-boot-rpiarm64-2021.10-150400.4.14.1 * SUSE Linux Enterprise Micro 5.5 (aarch64) * u-boot-rpiarm64-2021.10-150400.4.14.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57256.html * https://www.suse.com/security/cve/CVE-2024-57258.html * https://bugzilla.suse.com/show_bug.cgi?id=1237284 * https://bugzilla.suse.com/show_bug.cgi?id=1237287 . A recent u-boot update addresses integer overflow vulnerabilities affecting several products, categorized with moderate risk.. openSUSE u-boot update security advisory integer overflow. . LinuxSecurity.com Team
Mar 03, 2025
OpenSUSE
100
security advisorymoderateinteger overflowopenSUSE 15.6: SUSE-SU-2025:0755-1 moderate: u-boot overflow threats
* bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 . # Security update for u-boot Announcement ID: SUSE-SU-2025:0755-1 Release Date: 2025-02-28T16:37:12Z Rating: moderate References: * bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 * CVE-2024-57258 CVSS scores: * CVE-2024-57256 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57256 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57256 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2024-57258 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57258 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 An update that solves two vulnerabilities can now be installed. ## Description: This update for u-boot fixes the following issues: * CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). * CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-755=1 ## Package List: * openSUSE Leap 15.6 (aarch64) * u-boot-xilinxzynqmpgeneric-2020.01-150200.10.18.1 * u-boot-xilinxzynqmpgeneric-doc-2020.01-150200.10.18.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57256.html * https://www.suse.com/security/cve/CVE-2024-57258.html * https://bugzilla.suse.com/show_bug.cgi?id=1237284 * https://bugzilla.suse.com/show_bug.cgi?id=1237287 . This revision tackles various vulnerabilities within the u-boot framework, such as buffer overflows, and provides guidance on theinstallation process.. openSUSE Security Update, SUSE u-boot Vulnerability, security advisory u-boot, integer overflow fix, memory allocator patch. . LinuxSecurity.com Team
Feb 28, 2025
SuSE
202
security advisorymoderateupdateopenSUSE Leap 15.6: 2025:0755-1 moderate: U-Boot integer overflow
An update that solves two vulnerabilities can now be installed.. # Security update for u-boot Announcement ID: SUSE-SU-2025:0755-1 Release Date: 2025-02-28T16:37:12Z Rating: moderate References: * bsc#1237284 * bsc#1237287 Cross-References: * CVE-2024-57256 * CVE-2024-57258 CVSS scores: * CVE-2024-57256 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57256 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57256 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2024-57258 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2024-57258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2024-57258 ( NVD ): 7.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 An update that solves two vulnerabilities can now be installed. ## Description: This update for u-boot fixes the following issues: * CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). * CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-755=1 ## Package List: * openSUSE Leap 15.6 (aarch64) * u-boot-xilinxzynqmpgeneric-2020.01-150200.10.18.1 * u-boot-xilinxzynqmpgeneric-doc-2020.01-150200.10.18.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57256.html * https://www.suse.com/security/cve/CVE-2024-57258.html * https://bugzilla.suse.com/show_bug.cgi?id=1237284 * https://bugzilla.suse.com/show_bug.cgi?id=1237287 . This bulletin pertains to a recent patch for U-Boot that resolves two critical integer overflow vulnerabilities, now accessiblefor openSUSE users.. openSUSE, U-Boot, integer overflow, security update. . LinuxSecurity.com Team
Feb 28, 2025
OpenSUSE
98
security advisorymoderateRed HatCentOS: CESA-2023:2167-01 Moderate: Glibc Memory Handling Vulnerability
Updated glibc packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: glibc security and bug fix update Advisory ID: RHSA-2013:1411-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:1411.html Issue date: 2013-10-08 CVE Names: CVE-2013-4332 ==================================================================== 1. Summary: Updated glibc packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in glibc's memory allocator functions (pvalloc, valloc, and memalign). If an application used such a function, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2013-4332) This update also fixes the following bug: * Prior to this update, the size of the L3 cache in certain CPUs for SMP (Symmetric Multiprocessing) servers was not correctly detected.The incorrect cache size detection resulted in less than optimal performance for routines that used this information, including the memset() function. To fix this bug, the cache size detection has been corrected and core routines including memset() have their performance restored to expected levels. (BZ#1011424) All glibc users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 1007545 - CVE-2013-4332 glibc: three integer overflows in memory allocator 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: glibc-2.5-118.el5_10.2.i386.rpm glibc-2.5-118.el5_10.2.i686.rpm glibc-common-2.5-118.el5_10.2.i386.rpm glibc-debuginfo-2.5-118.el5_10.2.i386.rpm glibc-debuginfo-2.5-118.el5_10.2.i686.rpm glibc-debuginfo-common-2.5-118.el5_10.2.i386.rpm glibc-devel-2.5-118.el5_10.2.i386.rpm glibc-headers-2.5-118.el5_10.2.i386.rpm glibc-utils-2.5-118.el5_10.2.i386.rpm nscd-2.5-118.el5_10.2.i386.rpm x86_64: glibc-2.5-118.el5_10.2.i686.rpm glibc-2.5-118.el5_10.2.x86_64.rpm glibc-common-2.5-118.el5_10.2.x86_64.rpm glibc-debuginfo-2.5-118.el5_10.2.i386.rpm glibc-debuginfo-2.5-118.el5_10.2.i686.rpm glibc-debuginfo-2.5-118.el5_10.2.x86_64.rpm glibc-debuginfo-common-2.5-118.el5_10.2.i386.rpm glibc-devel-2.5-118.el5_10.2.i386.rpm glibc-devel-2.5-118.el5_10.2.x86_64.rpm glibc-headers-2.5-118.el5_10.2.x86_64.rpm glibc-utils-2.5-118.el5_10.2.x86_64.rpm nscd-2.5-118.el5_10.2.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: glibc-2.5-118.el5_10.2.i386.rpm glibc-2.5-118.el5_10.2.i686.rpm glibc-common-2.5-118.el5_10.2.i386.rpm glibc-debuginfo-2.5-118.el5_10.2.i386.rpm glibc-debuginfo-2.5-118.el5_10.2.i686.rpm glibc-debuginfo-common-2.5-118.el5_10.2.i386.rpm glibc-devel-2.5-118.el5_10.2.i386.rpm glibc-headers-2.5-118.el5_10.2.i386.rpm glibc-utils-2.5-118.el5_10.2.i386.rpm nscd-2.5-118.el5_10.2.i386.rpm ia64: glibc-2.5-118.el5_10.2.i686.rpm glibc-2.5-118.el5_10.2.ia64.rpm glibc-common-2.5-118.el5_10.2.ia64.rpm glibc-debuginfo-2.5-118.el5_10.2.i686.rpm glibc-debuginfo-2.5-118.el5_10.2.ia64.rpm glibc-debuginfo-common-2.5-118.el5_10.2.i386.rpm glibc-devel-2.5-118.el5_10.2.ia64.rpm glibc-headers-2.5-118.el5_10.2.ia64.rpm glibc-utils-2.5-118.el5_10.2.ia64.rpm nscd-2.5-118.el5_10.2.ia64.rpm ppc: glibc-2.5-118.el5_10.2.ppc.rpm glibc-2.5-118.el5_10.2.ppc64.rpm glibc-common-2.5-118.el5_10.2.ppc.rpm glibc-debuginfo-2.5-118.el5_10.2.ppc.rpm glibc-debuginfo-2.5-118.el5_10.2.ppc64.rpm glibc-devel-2.5-118.el5_10.2.ppc.rpm glibc-devel-2.5-118.el5_10.2.ppc64.rpm glibc-headers-2.5-118.el5_10.2.ppc.rpm glibc-utils-2.5-118.el5_10.2.ppc.rpm nscd-2.5-118.el5_10.2.ppc.rpm s390x: glibc-2.5-118.el5_10.2.s390.rpm glibc-2.5-118.el5_10.2.s390x.rpm glibc-common-2.5-118.el5_10.2.s390x.rpm glibc-debuginfo-2.5-118.el5_10.2.s390.rpm glibc-debuginfo-2.5-118.el5_10.2.s390x.rpm glibc-devel-2.5-118.el5_10.2.s390.rpm glibc-devel-2.5-118.el5_10.2.s390x.rpm glibc-headers-2.5-118.el5_10.2.s390x.rpm glibc-utils-2.5-118.el5_10.2.s390x.rpm nscd-2.5-118.el5_10.2.s390x.rpm x86_64: glibc-2.5-118.el5_10.2.i686.rpm glibc-2.5-118.el5_10.2.x86_64.rpm glibc-common-2.5-118.el5_10.2.x86_64.rpm glibc-debuginfo-2.5-118.el5_10.2.i386.rpm glibc-debuginfo-2.5-118.el5_10.2.i686.rpm glibc-debuginfo-2.5-118.el5_10.2.x86_64.rpm glibc-debuginfo-common-2.5-118.el5_10.2.i386.rpm glibc-devel-2.5-118.el5_10.2.i386.rpm glibc-devel-2.5-118.el5_10.2.x86_64.rpm glibc-headers-2.5-118.el5_10.2.x86_64.rpm glibc-utils-2.5-118.el5_10.2.x86_64.rpm nscd-2.5-118.el5_10.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2013-4332 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2013 Red Hat, Inc. . Newly released glibc updates address a vulnerability and a bug in Red Hat Enterprise Linux 5, assigned a moderate severity level.. Red Hat Advisory, Glibc Security Fix, Moderate Severity Update. . LinuxSecurity.com Team
Oct 08, 2013
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!