UbuntuUpdates.org

Package "ovmf"

Name: ovmf

Description:

UEFI firmware for 64-bit x86 virtual machines
Latest version: 0~20180205.c0d9813c-2ubuntu0.3
Release: bionic (18.04)
Level: updates
Repository: universe
Head package: edk2
Homepage: http://www.tianocore.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "ovmf"

All arch deb package
APT INSTALL

Other versions of "ovmf" in Bionic

Repository Area Version
base universe 0~20180205.c0d9813c-2
security universe 0~20180205.c0d9813c-2ubuntu0.3

Changelog

Version: 0~20180205.c0d9813c-2ubuntu0.3 2021-01-07 16:07:13 UTC

  edk2 (0~20180205.c0d9813c-2ubuntu0.3) bionic-security; urgency=medium

  * Fix integer overflow in DxeImageVerificationHandler. (CVE-2019-14562)
  * CryptoPkg/BaseCryptLib: fix NULL dereference. (CVE-2019-14584)

 -- dann frazier <email address hidden> Tue, 15 Dec 2020 15:38:17 -0700
Source diff to previous version
CVE-2019-14562 Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local access.

Version: 0~20180205.c0d9813c-2ubuntu0.2 2020-04-30 22:07:12 UTC
No changelog available yet.
Source diff to previous version

Version: 0~20180205.c0d9813c-2ubuntu0.1 2019-07-18 10:07:05 UTC

  edk2 (0~20180205.c0d9813c-2ubuntu0.1) bionic; urgency=medium

  * Security fixes (LP: #1820764):
    - Fix buffer overflow in BlockIo service (CVE-2018-12180)
    - DNS: Check received packet size before using (CVE-2018-12178)
    - Fix stack overflow with corrupted BMP (CVE-2018-12181)

 -- dann frazier <email address hidden> Mon, 08 Jul 2019 10:07:19 -0600
1820764 CVE-2018-12178 CVE-2018-12180 CVE-2018-12181
CVE-2018-12180 Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure
CVE-2018-12178 Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via ne
CVE-2018-12181 Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local ac


About   -   Send Feedback to @ubuntu_updates