SUSE-SU-2022:2058-1

CRITICAL9.6

Security update for u-boot

Published Jun 13, 2022

Modified 1 months ago

Fix available

Details

Description of the patch:

This update for u-boot fixes the following issues:

A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. (CVE-2022-30552, bsc#1200363)
A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. (CVE-2022-30790, bsc#1200364)

Affected Packages

u-boot-rpi3

SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

0:2016.07-12.6.1

u-boot-tools

SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

0:2016.07-12.6.1

References

ADVISORY

https://bugzilla.suse.com/1200363

ADVISORY

https://bugzilla.suse.com/1200364

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-June/011273.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-30552/

ADVISORY