Security update for u-boot SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3474-1 Final 1 1 2020-11-20T18:09:59Z current 2020-11-20T18:09:59Z 2020-11-20T18:09:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for u-boot This update for u-boot fixes the following issues: Work around CVE-2019-11059 by disabling 64Bit descritptor size (bsc#1134853) CVE-2019-11690 (bsc#1134157), CVE-2020-10648 (bsc#1167209), CVE-2019-13103 (bsc#1143463), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-14299 (bsc#1143824), CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-3474,SUSE-SLE-SERVER-12-SP3-2020-3474,SUSE-Storage-5-2020-3474 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ Link for SUSE-SU-2020:3474-1 https://lists.suse.com/pipermail/sle-security-updates/2020-November/007831.html E-Mail link for SUSE-SU-2020:3474-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1134157 SUSE Bug 1134157 https://bugzilla.suse.com/1134853 SUSE Bug 1134853 https://bugzilla.suse.com/1143463 SUSE Bug 1143463 https://bugzilla.suse.com/1143777 SUSE Bug 1143777 https://bugzilla.suse.com/1143817 SUSE Bug 1143817 https://bugzilla.suse.com/1143818 SUSE Bug 1143818 https://bugzilla.suse.com/1143819 SUSE Bug 1143819 https://bugzilla.suse.com/1143820 SUSE Bug 1143820 https://bugzilla.suse.com/1143821 SUSE Bug 1143821 https://bugzilla.suse.com/1143823 SUSE Bug 1143823 https://bugzilla.suse.com/1143824 SUSE Bug 1143824 https://bugzilla.suse.com/1143825 SUSE Bug 1143825 https://bugzilla.suse.com/1143827 SUSE Bug 1143827 https://bugzilla.suse.com/1143828 SUSE Bug 1143828 https://bugzilla.suse.com/1143830 SUSE Bug 1143830 https://bugzilla.suse.com/1143831 SUSE Bug 1143831 https://bugzilla.suse.com/1167209 SUSE Bug 1167209 https://www.suse.com/security/cve/CVE-2019-11059/ SUSE CVE CVE-2019-11059 page https://www.suse.com/security/cve/CVE-2019-11690/ SUSE CVE CVE-2019-11690 page https://www.suse.com/security/cve/CVE-2019-13103/ SUSE CVE CVE-2019-13103 page https://www.suse.com/security/cve/CVE-2019-14192/ SUSE CVE CVE-2019-14192 page https://www.suse.com/security/cve/CVE-2019-14193/ SUSE CVE CVE-2019-14193 page https://www.suse.com/security/cve/CVE-2019-14194/ SUSE CVE CVE-2019-14194 page https://www.suse.com/security/cve/CVE-2019-14195/ SUSE CVE CVE-2019-14195 page https://www.suse.com/security/cve/CVE-2019-14196/ SUSE CVE CVE-2019-14196 page https://www.suse.com/security/cve/CVE-2019-14197/ SUSE CVE CVE-2019-14197 page https://www.suse.com/security/cve/CVE-2019-14198/ SUSE CVE CVE-2019-14198 page https://www.suse.com/security/cve/CVE-2019-14200/ SUSE CVE CVE-2019-14200 page https://www.suse.com/security/cve/CVE-2019-14201/ SUSE CVE CVE-2019-14201 page https://www.suse.com/security/cve/CVE-2019-14202/ SUSE CVE CVE-2019-14202 page https://www.suse.com/security/cve/CVE-2019-14203/ SUSE CVE CVE-2019-14203 page https://www.suse.com/security/cve/CVE-2019-14204/ SUSE CVE CVE-2019-14204 page https://www.suse.com/security/cve/CVE-2019-14299/ SUSE CVE CVE-2019-14299 page https://www.suse.com/security/cve/CVE-2020-10648/ SUSE CVE CVE-2020-10648 page SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP3-LTSS u-boot-dragonboard410c-2016.07-12.3.1 u-boot-dragonboard410c-doc-2016.07-12.3.1 u-boot-odroid-c2-2016.07-12.3.1 u-boot-odroid-c2-doc-2016.07-12.3.1 u-boot-p2371-2180-2016.07-12.3.1 u-boot-p2371-2180-doc-2016.07-12.3.1 u-boot-pine64plus-2016.07-12.3.1 u-boot-pine64plus-doc-2016.07-12.3.1 u-boot-rpi3-2016.07-12.3.1 u-boot-rpi3-doc-2016.07-12.3.1 u-boot-tools-2016.07-12.3.1 u-boot-rpi3-2016.07-12.3.1 as a component of SUSE Enterprise Storage 5 u-boot-tools-2016.07-12.3.1 as a component of SUSE Enterprise Storage 5 u-boot-rpi3-2016.07-12.3.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS u-boot-tools-2016.07-12.3.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow. CVE-2019-11059 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-11059.html CVE-2019-11059 https://bugzilla.suse.com/1134853 SUSE Bug 1134853 gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device. CVE-2019-11690 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-11690.html CVE-2019-11690 https://bugzilla.suse.com/1134157 SUSE Bug 1134157 A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. CVE-2019-13103 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-13103.html CVE-2019-13103 https://bugzilla.suse.com/1143463 SUSE Bug 1143463 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. CVE-2019-14192 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14192.html CVE-2019-14192 https://bugzilla.suse.com/1143777 SUSE Bug 1143777 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length. CVE-2019-14193 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14193.html CVE-2019-14193 https://bugzilla.suse.com/1143817 SUSE Bug 1143817 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. CVE-2019-14194 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14194.html CVE-2019-14194 https://bugzilla.suse.com/1143818 SUSE Bug 1143818 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length. CVE-2019-14195 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14195.html CVE-2019-14195 https://bugzilla.suse.com/1143819 SUSE Bug 1143819 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. CVE-2019-14196 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14196.html CVE-2019-14196 https://bugzilla.suse.com/1143820 SUSE Bug 1143820 https://bugzilla.suse.com/1199623 SUSE Bug 1199623 An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply. CVE-2019-14197 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14197.html CVE-2019-14197 https://bugzilla.suse.com/1143821 SUSE Bug 1143821 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case. CVE-2019-14198 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14198.html CVE-2019-14198 https://bugzilla.suse.com/1143823 SUSE Bug 1143823 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply. CVE-2019-14200 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14200.html CVE-2019-14200 https://bugzilla.suse.com/1143825 SUSE Bug 1143825 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply. CVE-2019-14201 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14201.html CVE-2019-14201 https://bugzilla.suse.com/1143827 SUSE Bug 1143827 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply. CVE-2019-14202 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14202.html CVE-2019-14202 https://bugzilla.suse.com/1143828 SUSE Bug 1143828 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply. CVE-2019-14203 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14203.html CVE-2019-14203 https://bugzilla.suse.com/1143830 SUSE Bug 1143830 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply. CVE-2019-14204 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14204.html CVE-2019-14204 https://bugzilla.suse.com/1143831 SUSE Bug 1143831 Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force. CVE-2019-14299 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2019-14299.html CVE-2019-14299 Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration. CVE-2020-10648 SUSE Enterprise Storage 5:u-boot-rpi3-2016.07-12.3.1 SUSE Enterprise Storage 5:u-boot-tools-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-rpi3-2016.07-12.3.1 SUSE Linux Enterprise Server 12 SP3-LTSS:u-boot-tools-2016.07-12.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203474-1/ https://www.suse.com/security/cve/CVE-2020-10648.html CVE-2020-10648 https://bugzilla.suse.com/1167209 SUSE Bug 1167209