ELSA-2023-6919

ELSA-2023-6919 - edk2 security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2023-11-17

Description

[20220126gitbb1bba3d77-6]
- edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
- Resolves: bz#2150267
(ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])

[20220126gitbb1bba3d77-5]
- edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
- Resolves: bz#1861743
(CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])

Related CVEs

CVE-2019-14560

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	579594d945d1fe007e3fc0dcd4ffa32509920d375f3297817ec9fffe2ae1f485	-	ol8_aarch64_appstream
	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	579594d945d1fe007e3fc0dcd4ffa32509920d375f3297817ec9fffe2ae1f485	-	ol8_aarch64_distro_builder
	edk2-aarch64-20220126gitbb1bba3d77-6.el8.noarch.rpm	c22bd9eb07eb1a121c9fd7234f1c616450e9e54f789e7f5cf571b1f92f4703fb	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	579594d945d1fe007e3fc0dcd4ffa32509920d375f3297817ec9fffe2ae1f485	-	ol8_x86_64_appstream
	edk2-20220126gitbb1bba3d77-6.el8.src.rpm	579594d945d1fe007e3fc0dcd4ffa32509920d375f3297817ec9fffe2ae1f485	-	ol8_x86_64_distro_builder
	edk2-ovmf-20220126gitbb1bba3d77-6.el8.noarch.rpm	da1d26cc6556c88867235ab95ba3acb1d8525f7292aa285596f1fcd8aadd47fc	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team