FEDORA-2023-949b1be59c — security update for edk2

obsolete

FEDORA-2023-949b1be59c created by kraxel 4 months ago for Fedora 36

update openssl (CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304).

cherry-pick aarch64 bugfixes, set firmware build release date, add ext4 sub-package

This update has been submitted for testing by kraxel.

This update's test gating status has been changed to 'waiting'.

This update has obsoleted edk2-20221117gitfff6d81270b5-12.fc36, and has inherited its bugs and notes.

This update's test gating status has been changed to 'passed'.

This update has been pushed to testing.

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 months ago

in testing

4 months ago

BZ#2167867 CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [fedora-36]

BZ#2167889 CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [fedora-36]

BZ#2167906 CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [fedora-36]

BZ#2167917 CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [fedora-36]

edk2-20221117gitfff6d81270b5-13.fc36

passed