VYPR

rpm package

suse/u-boot-rpi3&distro=SUSE Linux Enterprise Server 15-LTSS

pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS

Vulnerabilities (21)

  • CVE-2019-11690May 3, 2019
    affected < 2018.03-4.6.2fixed 2018.03-4.6.2

    gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

Page 2 of 2