openSUSE has issued an advisory today (June 13): https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J4MAVGHFA6AWXL7DYKNZFBK64L2MIM3T/ The issues are fixed upstream in 2022.07-rc4. Mageia 8 is also affected.
Status comment: (none) => Fixed upstream in 2022.07-rc4Whiteboard: (none) => MGA8TOO
Pascal has looked after this pkg for ages, so assigning this bug to you.
Assignee: bugsquad => pterjan
A security issue in u-boot has been announced today (July 8): https://www.openwall.com/lists/oss-security/2022/07/08/2 There doesn't appear to be a fix available yet.
Status comment: Fixed upstream in 2022.07-rc4 => Fixed upstream in 2022.07-rc4 (except for CVE-2022-2347)Summary: u-boot new security issues CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 => u-boot new security issues CVE-2022-30552, CVE-2022-30767, CVE-2022-30790, CVE-2022-2347
SUSE has issued an advisory today (July 29): https://lists.suse.com/pipermail/sle-security-updates/2022-July/011710.html It fixes new issue that's fixed upstream in 2022.07-rc6.
Summary: u-boot new security issues CVE-2022-30552, CVE-2022-30767, CVE-2022-30790, CVE-2022-2347 => u-boot new security issues CVE-2022-30552, CVE-2022-30767, CVE-2022-30790, CVE-2022-2347, CVE-2022-34835Status comment: Fixed upstream in 2022.07-rc4 (except for CVE-2022-2347) => Fixed upstream in 2022.07-rc6 (except for CVE-2022-2347)
SUSE has issued an advisory on August 3: https://lists.suse.com/pipermail/sle-security-updates/2022-August/011765.html It fixes new issue that's fixed upstream in 2022.07-rc6.
Summary: u-boot new security issues CVE-2022-30552, CVE-2022-30767, CVE-2022-30790, CVE-2022-2347, CVE-2022-34835 => u-boot new security issues CVE-2022-30552, CVE-2022-30767, CVE-2022-30790, CVE-2022-2347, CVE-2022-33967, CVE-2022-34835
(In reply to David Walser from comment #4) > SUSE has issued an advisory on August 3: > https://lists.suse.com/pipermail/sle-security-updates/2022-August/011765.html > > It fixes new issue that's fixed upstream in 2022.07-rc6. Equivalent openSUSE advisory: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JH4GAZ5G3XK4M3ZTEA5DNSDUJA2U2WIF/
SUSE has issued an advisory on August 22: https://lists.suse.com/pipermail/sle-security-updates/2022-August/011960.html It fixes a new issue that's fixed upstream in 2022.07-rc4.
Summary: u-boot new security issues CVE-2022-30552, CVE-2022-30767, CVE-2022-30790, CVE-2022-2347, CVE-2022-33967, CVE-2022-34835 => u-boot new security issues CVE-2022-30552, CVE-2022-30767, CVE-2022-30790, CVE-2022-2347, CVE-2022-33103, CVE-2022-33967, CVE-2022-34835
(In reply to David Walser from comment #7) > SUSE has issued an advisory on August 22: > https://lists.suse.com/pipermail/sle-security-updates/2022-August/011960.html > > It fixes a new issue that's fixed upstream in 2022.07-rc4. Equivalent openSUSE advisory: https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XSDNVQXVQC7BBVG3WRGZOFUP76KMCYT6/
Ubuntu has issued an advisory for this today (December 6): https://ubuntu.com/security/notices/USN-5764-1
Mageia 8 EOL.
Version: Cauldron => 8Resolution: (none) => OLDStatus: NEW => RESOLVEDWhiteboard: MGA8TOO => (none)CC: (none) => nicolas.salguero