Skip to content
OpenAdvisories
Medium ELSA-2023-6919 1 CVE

Moderate: edk2 security and bug fix update (Oracle Linux 8)

Published Nov 17, 2023 · Updated Nov 17, 2023

Summary

[20220126gitbb1bba3d77-6]
- edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267]
- Resolves: bz#2150267
(ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8])

[20220126gitbb1bba3d77-5]
- edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743]
- Resolves: bz#1861743
(CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8])

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 edk2-aarch64 0:20220126gitbb1bba3d77-6.el8
Oracle Linux · 8 edk2-ovmf 0:20220126gitbb1bba3d77-6.el8

Vulnerabilities 1

  • Unscored —
    CVE-2019-14560 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…