elsa-2024-9088
oracle_linux[20240524-6.0.1] - Replace upstream references [Orabug:36569119] [20240524-6] - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974] - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336] - Resolves: RHEL-56974 (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9]) - Resolves: RHEL-55336 (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5]) [20240524-5] - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847] - Resolves: RHEL-45847 ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic) [20240524-4] - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081] - Resolves: RHEL-56081 ([EDK2] Shim fallback reboot workaround might not work on SNP) [20240524-3] - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899] - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899] - Resolves: RHEL-45899 ([RHEL-9.5.0] edk2 hit Failed to generate random data) [20240524-2] - edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442] - Resolves: RHEL-43442 (edk2 disconnects abnormally before loading the kernel) [20240524-1] - Rebase to edk2-stable202405 - Bumo openssl to 8e5beb77088b - Resolves: RHEL-32486 (rebase to edk2-stable202405 [rhel-9]) - Resolves: RHEL-36446 (edk2: enable MOR [rhel-9]) - Resolves: RHEL-21653 (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9]) - Resolves: RHEL-21150 (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC) - Resolves: RHEL-22490 (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9]) [20240214-2] - edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202] - edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202] - edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202] - edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202] - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202] - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202] - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202] - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202] - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202] - edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202] - Resolves: RHEL-22202 ([EDK2] Support booting with 4096 vcpus) [20240214-1] - Rebase to edk2-stable202302 - Resolves: RHEL-26879
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2023-6237",
"CVE-2024-1298",
"CVE-2024-0727",
"CVE-2023-6129"
],
"cvss": 0.0,
"database_specific": {
"severity": "MODERATE"
},
"description": "[20240524-6.0.1]\n- Replace upstream references [Orabug:36569119]\n\n[20240524-6]\n- edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]\n- edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]\n- Resolves: RHEL-56974\n (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])\n- Resolves: RHEL-55336\n (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])\n\n[20240524-5]\n- edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]\n- Resolves: RHEL-45847\n ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)\n\n[20240524-4]\n- edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]\n- Resolves: RHEL-56081\n ([EDK2] Shim fallback reboot workaround might not work on SNP)\n\n[20240524-3]\n- edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899]\n- edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899]\n- Resolves: RHEL-45899\n ([RHEL-9.5.0] edk2 hit Failed to generate random data)\n\n[20240524-2]\n- edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442]\n- Resolves: RHEL-43442\n (edk2 disconnects abnormally before loading the kernel)\n\n[20240524-1]\n- Rebase to edk2-stable202405\n- Bumo openssl to 8e5beb77088b\n- Resolves: RHEL-32486\n (rebase to edk2-stable202405 [rhel-9])\n- Resolves: RHEL-36446\n (edk2: enable MOR [rhel-9])\n- Resolves: RHEL-21653\n (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])\n- Resolves: RHEL-21150\n (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)\n- Resolves: RHEL-22490\n (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])\n\n[20240214-2]\n- edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202]\n- edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202]\n- edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202]\n- edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202]\n- edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202]\n- Resolves: RHEL-22202\n ([EDK2] Support booting with 4096 vcpus)\n\n[20240214-1]\n- Rebase to edk2-stable202302\n- Resolves: RHEL-26879",
"id": "ELSA-2024-9088",
"ovalId": "oval:com.oracle.elsa:def:20249088",
"source": "oracle_linux",
"title": "ELSA-2024-9088: edk2 security update (MODERATE)",
"url": "https://linux.oracle.com/errata/ELSA-2024-9088.html"
}