FEDORA-2019-bff1cbaba3 — security update for edk2

stable

edk2-20190308stable-1.fc29

FEDORA-2019-bff1cbaba3 created by crobinso 4 years ago for Fedora 29

Use YYYYMMDD versioning to fix upgrade path

Update to stable-201903
Update to openssl-1.1.0j
Move to python3 deps

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2019-bff1cbaba3

This update has been submitted for testing by crobinso.

4 years ago

This update has obsoleted edk2-201903stable-1.fc29, and has inherited its bugs and notes.

4 years ago

crobinso edited this update.

4 years ago

mattf commented & provided feedback 4 years ago

The upgrade to edk2-ovmf-20190308stable-1 from koji completed correctly without the error in #1689633. Thanks.

BZ#1689633 dnf error Package edk2-ovmf of higher version already installed, cannot update it when upgrading to edk2-ovmf-201903stable-1.fc29

This update has been pushed to testing.

4 years ago

cserpentis commented & provided feedback 4 years ago

karma

works for me

decathorpe commented & provided feedback 4 years ago

karma

Works fine with KVM / UEFI / libvirt VMs.

besser82 commented & provided feedback 4 years ago

karma

Works great! LGTM! =)

kparal commented & provided feedback 4 years ago

karma

my UEFI libvirt VMs work fine

kparal commented & provided feedback 4 years ago

karma

my UEFI libvirt VMs work fine

This update has reached the stable karma threshold and can be pushed to stable now if the maintainer wishes.

4 years ago

This update has been submitted for batched by crobinso.

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

edk2-20190308stable-1.fc29

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

modified

4 years ago

BZ#1641433 CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users

BZ#1641434 CVE-2018-3613 edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users [fedora-all]

BZ#1641442 CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c

BZ#1641443 CVE-2017-5731 edk2: Privilege escalation via processing of malformed files in TianoCompress.c [fedora-all]

BZ#1641446 CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c

BZ#1641447 CVE-2017-5732 edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c [fedora-all]

BZ#1641450 CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function

BZ#1641451 CVE-2017-5733 edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function [fedora-all]

BZ#1641458 CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function

BZ#1641461 CVE-2017-5734 edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function [fedora-all]

BZ#1641465 CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function

BZ#1641467 CVE-2017-5735 edk2: Privilege escalation via heap-based buffer overflow in Decode() function [fedora-all]

BZ#1683326 CVE-2018-12178 edk2: improper DNS packet size check

BZ#1683330 CVE-2018-12178 edk2: improper DNS packet size check [fedora-all]

BZ#1683372 CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk

BZ#1683373 CVE-2018-12180 edk2: Buffer Overflow in BlockIo service for RAM disk [fedora-all]

BZ#1683404 edk2: stack buffer overflow in file/path name string check in UdfDxe/File.c

BZ#1683405 edk2: stack buffer overflow in file/path name string check in UdfDxe/File.c [fedora-all]

BZ#1683410 edk2: stack buffer overflow in FindAnchorVolumeDescriptorPointer in PartitionDxe/Udf.c

BZ#1683411 edk2: stack buffer overflow in FindAnchorVolumeDescriptorPointer in PartitionDxe/Udf.c [fedora-all]

BZ#1683413 edk2: heap buffer overflow in ReadFile in UdfDxe/FileSystemOperations.c

BZ#1683414 edk2: heap buffer overflow in ReadFile in UdfDxe/FileSystemOperations.c [fedora-all]

BZ#1683421 edk2: heap buffer overflow in LengthofComponentIdentifier in UdfDxe/FileSystemOperations.c

BZ#1683423 edk2: heap buffer overflow in LengthofComponentIdentifier in UdfDxe/FileSystemOperations.c [fedora-all]

BZ#1683425 edk2: heap buffer overflow in NumberOfPartitions in UdfDxe/FileSystemOperations.c

BZ#1683429 edk2: heap buffer overflow in NumberOfPartitions in UdfDxe/FileSystemOperations.c [fedora-all]

BZ#1683653 CVE-2018-3630 ovmf: Logic error in FV parsing in MdeModulePkg\Core\Pei\FwVol\FwVol.c

BZ#1683654 CVE-2018-3630 edk2: ovmf: Logic error in FV parsing in MdeModulePkg\Core\Pei\FwVol\FwVol.c [fedora-all]

BZ#1686783 CVE-2018-12181 edk2: Stack buffer overflow with corrupted BMP

BZ#1686784 CVE-2018-12181 edk2: Stack buffer overflow with corrupted BMP [fedora-all]

BZ#1689633 dnf error Package edk2-ovmf of higher version already installed, cannot update it when upgrading to edk2-ovmf-201903stable-1.fc29

edk2-20190308stable-1.fc29

Automated Test Results

ignored