ELSA-2023-6919

ELSA-2023-6919 - edk2 security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-11-17

Description

[20220126gitbb1bba3d77-6]
- edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
- Resolves: bz#2150267
(ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])

[20220126gitbb1bba3d77-5]
- edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
- Resolves: bz#1861743
(CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])

Related CVEs

CVE-2019-14560

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	8dfbd1f4d4ce84d63cc810455f2b65a7	-	ol8_aarch64_appstream
	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	8dfbd1f4d4ce84d63cc810455f2b65a7	-	ol8_aarch64_distro_builder
	edk2-aarch64-20220126gitbb1bba3d77-6.el8.noarch.rpm	e8b281fa50d84e6e776abbf2edba7df1	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	8dfbd1f4d4ce84d63cc810455f2b65a7	-	ol8_x86_64_appstream
	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	8dfbd1f4d4ce84d63cc810455f2b65a7	-	ol8_x86_64_distro_builder
	edk2-ovmf-20220126gitbb1bba3d77-6.el8.noarch.rpm	3e9cb362357da156965c0cca65568795	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team