Test Kennung:	1.3.6.1.4.1.25623.1.0.851840
Kategorie:	SuSE Local Security Checks
Titel:	openSUSE: Security Advisory for ovmf (openSUSE-SU-2018:2238-1)
Zusammenfassung:	The remote host is missing an update for the 'ovmf'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'ovmf' package(s) announced via the referenced advisory. Vulnerability Insight: This update for ovmf provide the following fix: Security issues fixed: - CVE-2018-0739: Update openssl to 1.0.2o to limit ASN.1 constructed types recursive definition depth (bsc#1094290, bsc#1094291). Bug fixes: - Only use SLES-UEFI-CA-Certificate-2048.crt for the SUSE flavor to provide the better compatibility. (bsc#1077330) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or 'zypper patch'. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-823=1 Affected Software/OS: ovmf on openSUSE Leap 42.3 Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-0739 BugTraq ID: 103518 http://www.securityfocus.com/bid/103518 BugTraq ID: 105609 http://www.securityfocus.com/bid/105609 http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9310d45087ae546e27e61ddf8f6367f29848220d https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/ https://security.netapp.com/advisory/ntap-20180330-0002/ https://security.netapp.com/advisory/ntap-20180726-0002/ https://securityadvisories.paloaltonetworks.com/Home/Detail/133 https://www.openssl.org/news/secadv/20180327.txt https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html https://www.tenable.com/security/tns-2018-04 https://www.tenable.com/security/tns-2018-06 https://www.tenable.com/security/tns-2018-07 Debian Security Information: DSA-4157 (Google Search) https://www.debian.org/security/2018/dsa-4157 Debian Security Information: DSA-4158 (Google Search) https://www.debian.org/security/2018/dsa-4158 https://security.gentoo.org/glsa/201811-21 https://security.gentoo.org/glsa/202007-53 https://www.oracle.com//security-alerts/cpujul2021.html https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html RedHat Security Advisories: RHSA-2018:3090 https://access.redhat.com/errata/RHSA-2018:3090 RedHat Security Advisories: RHSA-2018:3221 https://access.redhat.com/errata/RHSA-2018:3221 RedHat Security Advisories: RHSA-2018:3505 https://access.redhat.com/errata/RHSA-2018:3505 RedHat Security Advisories: RHSA-2019:0366 https://access.redhat.com/errata/RHSA-2019:0366 RedHat Security Advisories: RHSA-2019:0367 https://access.redhat.com/errata/RHSA-2019:0367 RedHat Security Advisories: RHSA-2019:1711 https://access.redhat.com/errata/RHSA-2019:1711 RedHat Security Advisories: RHSA-2019:1712 https://access.redhat.com/errata/RHSA-2019:1712 http://www.securitytracker.com/id/1040576 https://usn.ubuntu.com/3611-1/ https://usn.ubuntu.com/3611-2/
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.