edk2-20220126gitbb1bba3d77-6.el8
エラータID: AXSA:2023-7267:05
Release date:
Monday, December 25, 2023 - 13:18
Subject:
edk2-20220126gitbb1bba3d77-6.el8
Affected Channels:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.
Security Fix(es):
* edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2019-14560
REJECTED
Solution:
Update packages.
CVEs:
CVE-2019-14560
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.
Additional Info:
N/A
Download:
SRPMS
- edk2-20220126gitbb1bba3d77-6.el8.src.rpm
MD5: 14455f6325bcd16497488dac23d70121
SHA-256: 439c19860d4980647ec7a2097293c49ef0a78b892ed277ffcf60581597ed0865
Size: 14.61 MB
Asianux Server 8 for x86_64
- edk2-ovmf-20220126gitbb1bba3d77-6.el8.noarch.rpm
MD5: db2c4d334dcb9e7fe1e84445ea62d56a
SHA-256: f9d78883ef9cd81c6ab83938147b02d29ee85d6865bd4f85d1582946eb27b81d
Size: 3.62 MB