Summary
[1:1.3.2-1.el7]
- Updates for OVMF/AAVMF Version 1.3.2 including:
* Fri Jul 31 2020 Aaron Young <aaron.young@oracle.com>
- Create new 1.3.2 release for OL7
* Fri May 01 2020 Aaron Young <aaron.young@oracle.com>
- Create new 1.3.1 release for OL7
* Wed Feb 05 2020 Aaron Young <aaron.young@oracle.com>
- Create new 1.3 release for OL7 which includes the following fixed CVEs:
{CVE-2018-12182} {CVE-2019-13224} {CVE-2019-13225} {CVE-2019-14553}
* Fri May 17 2019 Aaron Young <aaron.young@oracle.com>
- Create new 1.2 release for OL7 which includes the following fixed CVEs:
{CVE-2017-5715} {CVE-2017-5731} {CVE-2017-5732} {CVE-2017-5733} {CVE-2017-5734} {CVE-2017-5735} {CVE-2017-5753} {CVE-2018-12178} {CVE-2018-12180} {CVE-2018-12181} {CVE-2018-3630}
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | AAVMF | 1:1.3.2-1.el7 |
| Oracle Linux · 7 | OVMF | 1:1.3.2-1.el7 |
Vulnerabilities 4
-
Unscored —
Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalat…
-
Unscored —
A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information …
-
Unscored —
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial o…
-
Unscored —
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network …