ELSA-2018-3090

ELSA-2018-3090 - ovmf security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2018-11-05

Description

[20180508-3.gitee3198e672e2.el7]
- ovmf-redhat-provide-virtual-bundled-OpenSSL-in-OVMF.patch [bz#1607792]
- Resolves: bz#1607792
(add 'Provides: bundled(openssl) = 1.1.0h' to the spec file)

[20180508-2.gitee3198e672e2]
- OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
- build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
- connect Virtio RNG devices again [bz#1579518]
- Resolves: bz#1577546
(no input consoles connected under certain circumstances)
- Resolves: bz#1561128
(OVMF Secure boot enablement (enrollment of default keys))
- Resolves: bz#1579518
(EFI_RNG_PROTOCOL no longer produced for virtio-rng)

[20180508-1.gitee3198e672e2]
- Rebase to [bz#1559542]
- Resolves: bz#1559542
(Rebase OVMF for RHEL-7.6)

Related CVEs

CVE-2018-0739

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	ovmf-20180508-3.gitee3198e672e2.el7.src.rpm	12027b56de37f023f5acb79f45546c3e48a3d216f0080f79015dd739e916177d	ELSA-2019-2125	ol7_x86_64_latest
	ovmf-20180508-3.gitee3198e672e2.el7.src.rpm	12027b56de37f023f5acb79f45546c3e48a3d216f0080f79015dd739e916177d	ELSA-2019-2125	ol7_x86_64_u6_base
	OVMF-20180508-3.gitee3198e672e2.el7.noarch.rpm	66329cee53b94c8821d6a0b1c6db67771d508ac24512737491c677884bd00488	ELSA-2024-12793	ol7_x86_64_latest
	OVMF-20180508-3.gitee3198e672e2.el7.noarch.rpm	66329cee53b94c8821d6a0b1c6db67771d508ac24512737491c677884bd00488	ELSA-2024-12793	ol7_x86_64_u6_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team