Lucene search

K
oraclelinuxOracleLinuxELSA-2023-2932
HistoryMay 24, 2023 - 12:00 a.m.

edk2 security update

2023-05-2400:00:00
linux.oracle.com
28
edk2
security
update
openssl
cve-2023-0286
cve-2022-4304
cve-2023-0215
cve-2022-4450
x.400
timing attack
use-after-free
double free

0.004 Low

EPSS

Percentile

74.2%

[20220126gitbb1bba3d77-4]

  • edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  • edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
  • Resolves: bz#2164531
    (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-8])
  • Resolves: bz#2164543
    (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-8])
  • Resolves: bz#2164558
    (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-8])
  • Resolves: bz#2164581
    (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-8])