First published: Tue Nov 05 2019(Updated: )
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.<br>Security Fix(es):<br><li> edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181)</li> <li> edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media (CVE-2019-0160)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/edk2 | <20190308git89910a39dcfd-6.el8 | 20190308git89910a39dcfd-6.el8 |
redhat/edk2-ovmf | <20190308git89910a39dcfd-6.el8 | 20190308git89910a39dcfd-6.el8 |
redhat/edk2-aarch64 | <20190308git89910a39dcfd-6.el8 | 20190308git89910a39dcfd-6.el8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.