openeuler-ci-bot 5f93a4c17f

!119 fix CVE-2023-0215 ...

From: @huiyingc 
Reviewed-by: @yezengruan 
Signed-off-by: @yezengruan

2023-02-26 05:40:27 +00:00

0001-CryptoPkg-OpensslLib-Modify-process_files.pl-for-Ope.patch

Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f

2020-05-12 11:09:52 +08:00

0001-SecurityPkg-DxeImageVerificationLib-extract-SecDataD.patch

fix CVE-2019-14562

2021-05-19 18:10:40 +08:00

0002-CryptoPkg-Upgrade-OpenSSL-to-1.1.1f.patch

Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f

2020-05-12 11:09:52 +08:00

0002-SecurityPkg-DxeImageVerificationLib-assign-WinCertif.patch

fix CVE-2019-14562

2021-05-19 18:10:40 +08:00

0003-SecurityPkg-DxeImageVerificationLib-catch-alignment-.patch

fix CVE-2019-14562

2021-05-19 18:10:40 +08:00

0004-MdeModulePkg-Core-Dxe-assert-SectionInstance-invariant-in-FindChildNode.patch

Fix CVE-2021-28210

2021-06-28 19:19:29 +08:00

0005-MdeModulePkg-Core-Dxe-limit-FwVol-encapsulation-section-recursion.patch

Fix CVE-2021-28210

2021-06-28 19:19:29 +08:00

0006-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch

Fix CVE-2021-28211

2021-08-31 09:33:33 +08:00

0007-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0008-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0009-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0010-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0011-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0012-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0013-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0014-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0015-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0016-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0017-MdeModulePkg-FPDT-Lock-boot-performance-table-addres.patch

sync from sp2 for CVE-2021-38575

2022-01-24 14:53:20 +08:00

0018-SecurityPkg-TPM-Import-PeiDxeTpmPlatformHierarchyLib.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0019-SecurityPkg-TPM-Fix-bugs-in-imported-PeiDxeTpmPlatfo.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0020-SecrutiyPkg-Tcg-Import-Tcg2PlatformDxe-from-edk2-pla.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0021-SecurityPkg-Tcg-Make-Tcg2PlatformDxe-buildable-and-f.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0022-SecurityPkg-Introduce-new-PCD-PcdRandomizePlatformHi.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0023-SecurityPkg-Tcg-Import-Tcg2PlatformPei-from-edk2-pla.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0024-SecurityPkg-Tcg-Make-Tcg2PlatformPei-buildable-and-f.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0025-SecurityPkg-Add-references-to-header-and-inf-files-t.patch

fix CVE-2021-38576

2022-02-07 10:45:51 +08:00

0026-CryptoPkg-BaseCryptLib-fix-NULL-dereference-CVE-2019.patch

CVE-2019-14584

2022-09-29 09:41:33 +08:00

0027-UefiCpuPkg-Correct-some-typos.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0028-UefiCpuPkg-SecMigrationPei-Add-initial-PEIM-CVE-2019.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0029-MdeModulePkg-PeiCore-Enable-T-RAM-evacuation-in-PeiC.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0030-SecurityPkg-Tcg2Pei-Use-Migrated-FV-Info-Hob-for-cal.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0031-MdeModulePkg-Add-new-PCD-to-control-the-evacuate-tem.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0032-MdeModulePkg-Core-Create-Migrated-FV-Info-Hob-for-ca.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0033-UefiCpuPkg-CpuMpPei-Add-GDT-migration-support-CVE-20.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0034-UefiCpuPkg-CpuMpPei-Enable-paging-and-set-NP-flag-to.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0035-SecurityPkg-TcgPei-Use-Migrated-FV-Info-Hob-for-calc.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0036-UefiCpuPkg-Move-MigrateGdt-from-DiscoverMemory-to-Te.patch

fix Fix CVE-2019-11098

2022-09-29 16:23:55 +08:00

0037-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch

fix CVE-2021-38578

2022-11-29 11:36:04 +08:00

0038-PATCH-Avoid-dangling-ptrs-in-header-and-data-params-.patch

fix CVE-2022-4450

2023-02-26 11:29:53 +08:00

0039-PATCH-pk7_doit.c-Check-return-of-BIO_set_md-calls.patch

fix CVE-2023-0401

2023-02-26 11:51:59 +08:00

0040-Fix-a-UAF-resulting-from-a-bug-in-BIO_new_NDEF.patch

fix CVE-2023-0215

2023-02-26 13:15:11 +08:00

0041-Check-CMS-failure-during-BIO-setup-with-stream-is-ha.patch

fix CVE-2023-0215

2023-02-26 13:15:11 +08:00

edk2-stable202002.tar.gz

Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f

2020-05-12 11:09:52 +08:00

edk2.spec

fix CVE-2023-0215

2023-02-26 13:15:11 +08:00

openssl-1.1.1f.tar.gz

Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f

2020-05-12 11:09:52 +08:00

Description

No description provided

50 MiB

Languages

Diff 100%