UbuntuUpdates.org

Package "edk2"

Name: edk2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • UEFI firmware for 64-bit x86 virtual machines
  • transitional dummy package
  • UEFI firmware for 64-bit ARM virtual machines
  • UEFI firmware for 32-bit ARM virtual machines
Latest version: 0~20180205.c0d9813c-2ubuntu0.3
Release: bionic (18.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "edk2" in Bionic

Repository Area Version
base universe 0~20180205.c0d9813c-2
security universe 0~20180205.c0d9813c-2ubuntu0.3

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0~20180205.c0d9813c-2ubuntu0.3 2021-01-07 16:07:13 UTC

  edk2 (0~20180205.c0d9813c-2ubuntu0.3) bionic-security; urgency=medium

  * Fix integer overflow in DxeImageVerificationHandler. (CVE-2019-14562)
  * CryptoPkg/BaseCryptLib: fix NULL dereference. (CVE-2019-14584)

 -- dann frazier <email address hidden> Tue, 15 Dec 2020 15:38:17 -0700
Source diff to previous version
CVE-2019-14562 Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.

Version: 0~20180205.c0d9813c-2ubuntu0.2 2020-04-30 22:07:12 UTC
No changelog available yet.
Source diff to previous version

Version: 0~20180205.c0d9813c-2ubuntu0.1 2019-07-18 10:07:05 UTC

  edk2 (0~20180205.c0d9813c-2ubuntu0.1) bionic; urgency=medium

  * Security fixes (LP: #1820764):
    - Fix buffer overflow in BlockIo service (CVE-2018-12180)
    - DNS: Check received packet size before using (CVE-2018-12178)
    - Fix stack overflow with corrupted BMP (CVE-2018-12181)

 -- dann frazier <email address hidden> Mon, 08 Jul 2019 10:07:19 -0600
1820764 CVE-2018-12178 CVE-2018-12180 CVE-2018-12181
CVE-2018-12180 Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure
CVE-2018-12178 Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via ne
CVE-2018-12181 Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local ac


About   -   Send Feedback to @ubuntu_updates