{"cves":["CVE-2023-6237","CVE-2024-1298","CVE-2024-0727","CVE-2023-6129"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[20240524-6.0.1]\n- Replace upstream references [Orabug:36569119]\n\n[20240524-6]\n- edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]\n- edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]\n- Resolves: RHEL-56974\n  (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])\n- Resolves: RHEL-55336\n  (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])\n\n[20240524-5]\n- edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]\n- Resolves: RHEL-45847\n  ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)\n\n[20240524-4]\n- edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]\n- Resolves: RHEL-56081\n  ([EDK2] Shim fallback reboot workaround might not work on SNP)\n\n[20240524-3]\n- edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899]\n- edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899]\n- Resolves: RHEL-45899\n  ([RHEL-9.5.0] edk2 hit Failed to generate random data)\n\n[20240524-2]\n- edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442]\n- Resolves: RHEL-43442\n  (edk2 disconnects abnormally before loading the kernel)\n\n[20240524-1]\n- Rebase to edk2-stable202405\n- Bumo openssl to 8e5beb77088b\n- Resolves: RHEL-32486\n  (rebase to edk2-stable202405 [rhel-9])\n- Resolves: RHEL-36446\n  (edk2: enable MOR [rhel-9])\n- Resolves: RHEL-21653\n  (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])\n- Resolves: RHEL-21150\n  (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)\n- Resolves: RHEL-22490\n  (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])\n\n[20240214-2]\n- edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202]\n- edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202]\n- edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202]\n- edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202]\n- Resolves: RHEL-22202\n  ([EDK2] Support booting with 4096 vcpus)\n\n[20240214-1]\n- Rebase to edk2-stable202302\n- Resolves: RHEL-26879","id":"ELSA-2024-9088","ovalId":"oval:com.oracle.elsa:def:20249088","source":"oracle_linux","title":"ELSA-2024-9088:  edk2 security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2024-9088.html"}