An update that has one security fix can now be installed.. # Security update for ovmf Announcement ID: SUSE-SU-2025:0690-1 Release Date: 2025-02-24T13:06:15Z Rating: important References: * bsc#1237084 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one security fix can now be installed. ## Description: This update for ovmf fixes the following issues: * PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-690=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-690=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-690=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-690=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-690=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-690=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patchSUSE-SLE-Micro-5.3-2025-690=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-690=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-690=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-690=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-690=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-690=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Manager Proxy 4.3 (x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * SUSE Manager Proxy 4.3 (noarch) * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * SUSE Manager Retail Branch Server 4.3 (noarch) * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Manager Server 4.3 (x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * SUSE Manager Server 4.3 (noarch) * qemu-ovmf-x86_64-202202-150400.5.18.1 * openSUSE Leap 15.4 (aarch64 x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * openSUSE Leap 15.4 (noarch) * qemu-ovmf-x86_64-202202-150400.5.18.1 * qemu-ovmf-ia32-202202-150400.5.18.1 * qemu-uefi-aarch32-202202-150400.5.18.1 * qemu-uefi-aarch64-202202-150400.5.18.1 * openSUSE Leap 15.4 (x86_64) * qemu-ovmf-x86_64-debug-202202-150400.5.18.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * qemu-uefi-aarch64-202202-150400.5.18.1 * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE LinuxEnterprise Micro 5.3 (noarch) * qemu-uefi-aarch64-202202-150400.5.18.1 * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * qemu-uefi-aarch64-202202-150400.5.18.1 * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * qemu-uefi-aarch64-202202-150400.5.18.1 * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * qemu-uefi-aarch64-202202-150400.5.18.1 * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * qemu-uefi-aarch64-202202-150400.5.18.1 * qemu-ovmf-x86_64-202202-150400.5.18.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 x86_64) * ovmf-tools-202202-150400.5.18.1 * ovmf-202202-150400.5.18.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * qemu-uefi-aarch64-202202-150400.5.18.1 * qemu-ovmf-x86_64-202202-150400.5.18.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1237084 . Essential security patch released for openSUSE to fix vulnerabilities in ovmf impacting PXE boot functionality. Detailed installation guidelines provided.. openSUSE Security Update, ovmf Patch, Network Security Fix. . Severity: Important. LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1172-1 Rating: moderate References: #1128503 #1130267 Cross-References: CVE-2018-12181 CVE-2019-0160 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-0160: Fixed multiple buffer overflows in UDF-related codes in MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe (bsc#1130267). - CVE-2018-12181: Fixed a stack buffer overflow in the HII database when a corrupted Bitmap was used (bsc#1128503). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1172=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ovmf-2017+git1510945757.b2662641d5-lp150.4.16.1 ovmf-tools-2017+git1510945757.b2662641d5-lp150.4.16.1 - openSUSE Leap 15.0 (noarch): qemu-ovmf-ia32-2017+git1510945757.b2662641d5-lp150.4.16.1 qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-lp150.4.16.1 - openSUSE Leap 15.0 (x86_64): qemu-ovmf-x86_64-debug-2017+git1510945757.b2662641d5-lp150.4.16.1 References: https://www.suse.com/security/cve/CVE-2018-12181.html https://www.suse.com/security/cve/CVE-2019-0160.html https://bugzilla.suse.com/1128503 https://bugzilla.suse.com/1130267 -- . Resolve various buffer overflow vulnerabilities in OVMFthrough this openSUSE security update; discover effective patching techniques.. openSUSE Security Update, ovmf patching, buffer issue resolution. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.