1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2023-13025

[ELSA-2023-13025] edk2 security update

Severity Important
Affected Packages 2
CVEs 4
Info Packages References Vulnerabilities

[20230821]
- Create new 20230821 release for OL8 which includes the following fixed CVEs:
CVE-2019-14560
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735

[20230613]
- Create new 20230613.cvm release for OL8

[20230227]
- Create new 20230227.cvm release for OL8 which includes the following fixed CVEs:
CVE-2021-38578

Package Affected Version
pkg:rpm/oraclelinux/edk2-ovmf?distro=oraclelinux-8 < 20230821-1.el8
pkg:rpm/oraclelinux/edk2-aarch64?distro=oraclelinux-8 < 20230821-1.el8
ID
ELSA-2023-13025
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2023-13025.html
Published
2023-12-06T00:00:00
(9 months ago)
Modified
2023-12-06T00:00:00
(9 months ago)
Rights
Copyright 2023 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/edk2-ovmf?distro=oraclelinux-8 oraclelinux edk2-ovmf < 20230821-1.el8 oraclelinux-8
Affected pkg:rpm/oraclelinux/edk2-aarch64?distro=oraclelinux-8 oraclelinux edk2-aarch64 < 20230821-1.el8 oraclelinux-8
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date