Summary
[20200602gitca407c7246bf-4.el8_4.1]
- edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1952953]
- Resolves: bz#1952953
(edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8] [rhel-8.4.0.z])
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | edk2-aarch64 | 0:20200602gitca407c7246bf-4.el8_4.1 |
| Oracle Linux · 8 | edk2-ovmf | 0:20200602gitca407c7246bf-4.el8_4.1 |
Vulnerabilities 1
-
Unscored —
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.