packages/edk2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
57 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
yexiao d4ed40f9e7 Fix some CVE 
Fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235

Signed-off-by: yexiao <yexiao7@huawei.com>
(cherry picked from commit 0d783883a080866aaf39b712c35450263c70a772)
2024-03-08 17:08:49 +08:00
0001-CryptoPkg-OpensslLib-Modify-process_files.pl-for-Ope.patch
Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f
2020-05-12 11:09:52 +08:00
0001-SecurityPkg-DxeImageVerificationLib-extract-SecDataD.patch
fix CVE-2019-14562
2021-05-19 18:10:40 +08:00
0002-CryptoPkg-Upgrade-OpenSSL-to-1.1.1f.patch
Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f
2020-05-12 11:09:52 +08:00
0002-SecurityPkg-DxeImageVerificationLib-assign-WinCertif.patch
fix CVE-2019-14562
2021-05-19 18:10:40 +08:00
0003-SecurityPkg-DxeImageVerificationLib-catch-alignment-.patch
fix CVE-2019-14562
2021-05-19 18:10:40 +08:00
0004-MdeModulePkg-Core-Dxe-assert-SectionInstance-invariant-in-FindChildNode.patch
Fix CVE-2021-28210
2021-06-28 19:19:29 +08:00
0005-MdeModulePkg-Core-Dxe-limit-FwVol-encapsulation-section-recursion.patch
Fix CVE-2021-28210
2021-06-28 19:19:29 +08:00
0006-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch
Fix CVE-2021-28211
2021-08-31 09:33:33 +08:00
0007-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0008-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0009-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0010-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0011-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0012-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0013-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0014-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0015-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0016-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0017-MdeModulePkg-FPDT-Lock-boot-performance-table-addres.patch
sync from sp2 for CVE-2021-38575
2022-01-24 14:53:20 +08:00
0018-SecurityPkg-TPM-Import-PeiDxeTpmPlatformHierarchyLib.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0019-SecurityPkg-TPM-Fix-bugs-in-imported-PeiDxeTpmPlatfo.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0020-SecrutiyPkg-Tcg-Import-Tcg2PlatformDxe-from-edk2-pla.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0021-SecurityPkg-Tcg-Make-Tcg2PlatformDxe-buildable-and-f.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0022-SecurityPkg-Introduce-new-PCD-PcdRandomizePlatformHi.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0023-SecurityPkg-Tcg-Import-Tcg2PlatformPei-from-edk2-pla.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0024-SecurityPkg-Tcg-Make-Tcg2PlatformPei-buildable-and-f.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0025-SecurityPkg-Add-references-to-header-and-inf-files-t.patch
fix CVE-2021-38576
2022-02-07 10:45:51 +08:00
0026-CryptoPkg-BaseCryptLib-fix-NULL-dereference-CVE-2019.patch
CVE-2019-14584
2022-09-29 09:41:33 +08:00
0027-UefiCpuPkg-Correct-some-typos.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0028-UefiCpuPkg-SecMigrationPei-Add-initial-PEIM-CVE-2019.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0029-MdeModulePkg-PeiCore-Enable-T-RAM-evacuation-in-PeiC.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0030-SecurityPkg-Tcg2Pei-Use-Migrated-FV-Info-Hob-for-cal.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0031-MdeModulePkg-Add-new-PCD-to-control-the-evacuate-tem.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0032-MdeModulePkg-Core-Create-Migrated-FV-Info-Hob-for-ca.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0033-UefiCpuPkg-CpuMpPei-Add-GDT-migration-support-CVE-20.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0034-UefiCpuPkg-CpuMpPei-Enable-paging-and-set-NP-flag-to.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0035-SecurityPkg-TcgPei-Use-Migrated-FV-Info-Hob-for-calc.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0036-UefiCpuPkg-Move-MigrateGdt-from-DiscoverMemory-to-Te.patch
fix Fix CVE-2019-11098
2022-09-29 16:23:55 +08:00
0037-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
fix CVE-2021-38578
2022-11-29 11:36:04 +08:00
0038-PATCH-Avoid-dangling-ptrs-in-header-and-data-params-.patch
fix CVE-2022-4450
2023-02-26 11:29:53 +08:00
0039-PATCH-pk7_doit.c-Check-return-of-BIO_set_md-calls.patch
fix CVE-2023-0401
2023-02-26 11:51:59 +08:00
0040-Fix-a-UAF-resulting-from-a-bug-in-BIO_new_NDEF.patch
fix CVE-2023-0215
2023-02-26 13:15:11 +08:00
0041-Check-CMS-failure-during-BIO-setup-with-stream-is-ha.patch
fix CVE-2023-0215
2023-02-26 13:15:11 +08:00
0042-Correctly-compare-EdiPartyName-in-GENERAL_NAME_cmp.patch
fix CVE-2023-0286
2023-02-26 15:02:33 +08:00
0043-CVE-2023-0286-Fix-GENERAL_NAME_cmp-for-x400Address-1.patch
fix CVE-2023-0286
2023-02-26 15:02:33 +08:00
0044-Fix-Timing-Oracle-in-RSA-decryption.patch
fix CVE-2022-4304
2023-07-03 17:02:43 +08:00
0045-x509-excessive-resource-use-verifying-policy-constra.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0046-test-add-test-cases-for-the-policy-resource-overuse.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0047-Ensure-that-EXFLAG_INVALID_POLICY-is-checked-even-in.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0048-Fix-documentation-of-X509_VERIFY_PARAM_add0_policy.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0049-Restrict-the-size-of-OBJECT-IDENTIFIERs-that-OBJ_obj.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0050-Add-a-test-for-CVE-2023-3446.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0051-Fix-DH_check-excessive-time-with-over-sized-modulus.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0052-Update-further-expiring-certificates-that-affect-tes.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0053-DH_check-Do-not-try-checking-q-properties-if-it-is-o.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0054-dhtest.c-Add-test-of-DH_check-with-q-p-1.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0055-Add-NULL-checks-where-ContentInfo-data-can-be-NULL.patch
Fix some CVE
2024-02-22 23:01:41 +08:00
0056-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0057-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0058-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0059-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0060-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0061-SecurityPkg-Adding-CVE-2022-36764-to-SecurityFixes.y.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0062-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0063-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0064-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0065-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch
Fix some CVE
2024-03-08 14:57:36 +08:00
0066-NetworkPkg-Ip6Dxe-Improve-Neightbor-Discovery-messag.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0067-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0068-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0069-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0070-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0071-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0072-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0073-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0074-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0075-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0076-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0077-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0078-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0079-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0080-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0081-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
0082-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch
Fix some CVE
2024-03-08 17:08:49 +08:00
edk2-stable202002.tar.gz
Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f
2020-05-12 11:09:52 +08:00
edk2.spec
Fix some CVE
2024-03-08 17:08:49 +08:00
openssl-1.1.1f.tar.gz
Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f
2020-05-12 11:09:52 +08:00
Description
No description provided
50 MiB
Languages
Diff 100%