SUSE-SU-2020:2076-1
- Source
- https://www.suse.com/support/update/announcement/2020/suse-su-20202076-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2076-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2020:2076-1
- Upstream
- Related
- Published
- 2020-07-29T17:00:59Z
- Modified
- 2026-02-04T04:23:04Z
- Summary
- Security update for grub2
- Details
-
This update for grub2 fixes the following issues:
-
Fix for CVE-2020-10713 (bsc#1168994)
-
Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812)
-
Fix for CVE-2020-15706 (bsc#1174463)
-
Fix for CVE-2020-15707 (bsc#1174570)
-
Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data
-
Use gcc-9 compiler for overflow check builtins
-
Backport gcc-9 build fixes
-
Fix packed-not-aligned error on GCC 8 (bsc#1084632)
-
Backport gcc-7 build fixes
-
- References
-
- https://www.suse.com/support/update/announcement/2020/suse-su-20202076-1/
- https://bugzilla.suse.com/1084632
- https://bugzilla.suse.com/1168994
- https://bugzilla.suse.com/1173812
- https://bugzilla.suse.com/1174463
- https://bugzilla.suse.com/1174570
- https://www.suse.com/security/cve/CVE-2020-10713
- https://www.suse.com/security/cve/CVE-2020-14308
- https://www.suse.com/security/cve/CVE-2020-14309
- https://www.suse.com/security/cve/CVE-2020-14310
- https://www.suse.com/security/cve/CVE-2020-14311
- https://www.suse.com/security/cve/CVE-2020-15706
- https://www.suse.com/security/cve/CVE-2020-15707
Affected packages
SUSE:Linux Enterprise Server 12 SP2-BCL
grub2
Package
- Name
- grub2
- Purl
- pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.02~beta2-115.49.1
SUSE:Linux Enterprise Server 12 SP2-LTSS
grub2
Package
- Name
- grub2
- Purl
- pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.02~beta2-115.49.1
Ecosystem specific
{
"binaries": [
{
"grub2": "2.02~beta2-115.49.1",
"grub2-i386-pc": "2.02~beta2-115.49.1",
"grub2-powerpc-ieee1275": "2.02~beta2-115.49.1",
"grub2-s390x-emu": "2.02~beta2-115.49.1",
"grub2-snapper-plugin": "2.02~beta2-115.49.1",
"grub2-systemd-sleep-plugin": "2.02~beta2-115.49.1",
"grub2-x86_64-efi": "2.02~beta2-115.49.1",
"grub2-x86_64-xen": "2.02~beta2-115.49.1"
}
]
}SUSE:Linux Enterprise Server for SAP Applications 12 SP2
grub2
Package
- Name
- grub2
- Purl
- pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.02~beta2-115.49.1
Ecosystem specific
{
"binaries": [
{
"grub2": "2.02~beta2-115.49.1",
"grub2-i386-pc": "2.02~beta2-115.49.1",
"grub2-powerpc-ieee1275": "2.02~beta2-115.49.1",
"grub2-snapper-plugin": "2.02~beta2-115.49.1",
"grub2-systemd-sleep-plugin": "2.02~beta2-115.49.1",
"grub2-x86_64-efi": "2.02~beta2-115.49.1",
"grub2-x86_64-xen": "2.02~beta2-115.49.1"
}
]
}SUSE:OpenStack Cloud 7
grub2
Package
- Name
- grub2
- Purl
- pkg:rpm/suse/grub2&distro=SUSE%20OpenStack%20Cloud%207
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.02~beta2-115.49.1
Ecosystem specific
{
"binaries": [
{
"grub2": "2.02~beta2-115.49.1",
"grub2-i386-pc": "2.02~beta2-115.49.1",
"grub2-s390x-emu": "2.02~beta2-115.49.1",
"grub2-snapper-plugin": "2.02~beta2-115.49.1",
"grub2-systemd-sleep-plugin": "2.02~beta2-115.49.1",
"grub2-x86_64-efi": "2.02~beta2-115.49.1",
"grub2-x86_64-xen": "2.02~beta2-115.49.1"
}
]
}