Every CVESearch/Get API key

SUSE-SU-2024:1867-1

Security update for fwupdate

No scoreFix available

SUSE-SU-2024:1867-1 is a vulnerability with no CVSS score yet in fwupdate, published May 30, 2024. No source lists public exploit code. Fixed in fwupdate 12-150100.11.15.2.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
12-150100.11.15.2fwupdate +18 more

Description

This update of fwupdate fixes the following issues:

  • rebuild the package with the new secure boot key (bsc#1209188).
  • Update the email address of security team in SBAT (bsc#1221301)
  • elf_aarch64_efi.lds: set the memory permission explicitly to avoid ld warning like 'LOAD segment with RWX permissions'

Affected packages

Affected packages
PackageAffectedFixed
fwupdate
SUSE:Linux Enterprise Micro 5.5
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise Module for Basesystem 15 SP5
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise Module for Basesystem 15 SP6
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise Server 15 SP2-LTSS
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise Server 15 SP3-LTSS
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise Server 15 SP4-LTSS
before 12-150100.11.15.2
12-150100.11.15.2
Show 9 moreShow less
Affected packages
PackageAffectedFixed
fwupdate
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Manager Proxy 4.3
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Manager Server 4.3
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Enterprise Storage 7
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
SUSE:Enterprise Storage 7.1
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
openSUSE:Leap 15.5
before 12-150100.11.15.2
12-150100.11.15.2
fwupdate
openSUSE:Leap 15.6
before 12-150100.11.15.2
12-150100.11.15.2

What each source reports

OSVNo score

Security update for fwupdate

This update of fwupdate fixes the following issues:

  • rebuild the package with the new secure boot key (bsc#1209188).
  • Update the email address of security team in SBAT (bsc#1221301)
  • elf_aarch64_efi.lds: set the memory permission explicitly to avoid ld warning like 'LOAD segment with RWX permissions'
Record
SUSE-SU-2024:1867-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open