Lucene search

OracleLinuxELSA-2024-12408

HistoryJun 04, 2024 - 12:00 a.m.

edk2 security update

2024-06-0400:00:00

linux.oracle.com

edk2

security update

release

vulnerabilities

openssl

cves

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.4%

JSON

Tue Feb 27 2024 Aaron Young

Create new 1.7.0 release for OL7 which includes the following fixed CVEs:
{CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
{CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}

Tue Aug 22 2023 Aaron Young

Create new 1.6.6.cvm release for OL7

Mon Aug 21 2023 Aaron Young

Create new 1.6.6 release for OL7 which includes the following fixed CVEs:
{CVE-2019-14560}
Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
{CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}

Tue Jun 13 2023 Aaron Young

Create new 1.6.5.cvm release for OL7

Mon Feb 27 2023 Aaron Young

Create new 1.6.4.cvm release for OL7 which includes the following fixed CVEs:
{CVE-2021-38578}

Tue Jun 28 2022 Aaron Young

Create new 1.6.3 release for OL7

Wed Jun 01 2022 Aaron Young

Create new 1.6.2 release for OL7

Wed May 11 2022 Aaron Young

Create new 1.6.1 release for OL7

Wed Apr 06 2022 Aaron Young

Create new 1.6.0 release for OL7 which includes the following fixed CVEs:
{CVE-2022-0778}

Tue Nov 23 2021 Aaron Young

Create new 1.5.1 release for OL7

Wed Jun 16 2021 Aaron Young

Create new 1.5.0 release for OL7 which includes the following fixed CVEs:
{CVE-2021-23840} {CVE-2021-23841} {CVE-2021-38575}

Thu Feb 18 2021 Aaron Young

Create new 1.4.3 release for OL7

Wed Jan 20 2021 Aaron Young

Create new 1.4.2 release for OL7

Thu Dec 03 2020 Aaron Young

Create new 1.4.1 release for OL7

Wed Nov 18 2020 Aaron Young

Create new 1.4.0 release for OL7 which includes the following fixed CVEs:
{CVE-2019-14584} {CVE-2019-14562} {CVE-2019-11098} {CVE-2019-14559} {CVE-2019-14575} {CVE-2019-14559} {CVE-2019-14587} {CVE-2019-14558} {CVE-2019-14586} {CVE-2019-14563}

Sat Oct 10 2020 Aaron Young

Create new 1.3.4 release for OL7

Wed Oct 07 2020 Aaron Young

Create new 1.3.3 release for OL7

Fri Jul 31 2020 Aaron Young

Create new 1.3.2 release for OL7

Fri May 01 2020 Aaron Young

Create new 1.3.1 release for OL7

Wed Feb 05 2020 Aaron Young

Create new 1.3 release for OL7 which includes the following fixed CVEs:
{CVE-2018-12182} {CVE-2019-13224} {CVE-2019-13225} {CVE-2019-14553}

Fri May 17 2019 Aaron Young

Create new 1.2 release for OL7 which includes the following fixed CVEs:
{CVE-2017-5715} {CVE-2017-5731} {CVE-2017-5732} {CVE-2017-5733} {CVE-2017-5734} {CVE-2017-5735} {CVE-2017-5753} {CVE-2018-12178} {CVE-2018-12180} {CVE-2018-12181} {CVE-2018-3630}

OSVersionArchitecturePackageVersionFilename
oracle linux7srcedk2< 1.7.0-5.el7edk2-1.7.0-5.el7.src.rpm
oracle linux7srcedk2< 1.7.0-5.el7edk2-1.7.0-5.el7.src.rpm
oracle linux7srcedk2< 1.7.0-5.el7edk2-1.7.0-5.el7.src.rpm
oracle linux7srcedk2< 1.7.0-5.el7edk2-1.7.0-5.el7.src.rpm
oracle linux7noarchaavmf< 1.7.0-5.el7AAVMF-1.7.0-5.el7.noarch.rpm
oracle linux7noarchaavmf< 1.7.0-5.el7AAVMF-1.7.0-5.el7.noarch.rpm
oracle linux7srcedk2< 1.7.0-5.el7edk2-1.7.0-5.el7.src.rpm
oracle linux7srcedk2< 1.7.0-5.el7edk2-1.7.0-5.el7.src.rpm
oracle linux7noarchovmf< 1.7.0-5.el7OVMF-1.7.0-5.el7.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	edk2	< 1.7.0-5.el7	edk2-1.7.0-5.el7.src.rpm
oracle linux	7	src	edk2	< 1.7.0-5.el7	edk2-1.7.0-5.el7.src.rpm
oracle linux	7	src	edk2	< 1.7.0-5.el7	edk2-1.7.0-5.el7.src.rpm
oracle linux	7	src	edk2	< 1.7.0-5.el7	edk2-1.7.0-5.el7.src.rpm
oracle linux	7	noarch	aavmf	< 1.7.0-5.el7	AAVMF-1.7.0-5.el7.noarch.rpm
oracle linux	7	noarch	aavmf	< 1.7.0-5.el7	AAVMF-1.7.0-5.el7.noarch.rpm
oracle linux	7	src	edk2	< 1.7.0-5.el7	edk2-1.7.0-5.el7.src.rpm
oracle linux	7	src	edk2	< 1.7.0-5.el7	edk2-1.7.0-5.el7.src.rpm
oracle linux	7	noarch	ovmf	< 1.7.0-5.el7	OVMF-1.7.0-5.el7.noarch.rpm