openeuler-ci-bot 14c137cd27

!282 Fix CVE-2023-45236、CVE-2023-45237 ...

From: @jacob1996 
Reviewed-by: @caojinhuahw 
Signed-off-by: @caojinhuahw

2024-10-22 14:01:45 +00:00

0001-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0002-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0003-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0004-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0005-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0006-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0007-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0008-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0009-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0010-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0011-MdeModulePkg-FPDT-Lock-boot-performance-table-addres.patch

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

0012-SecurityPkg-TPM-Import-PeiDxeTpmPlatformHierarchyLib.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0013-SecurityPkg-TPM-Fix-bugs-in-imported-PeiDxeTpmPlatfo.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0014-SecrutiyPkg-Tcg-Import-Tcg2PlatformDxe-from-edk2-pla.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0015-SecurityPkg-Tcg-Make-Tcg2PlatformDxe-buildable-and-f.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0016-SecurityPkg-Introduce-new-PCD-PcdRandomizePlatformHi.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0017-SecurityPkg-Tcg-Import-Tcg2PlatformPei-from-edk2-pla.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0018-SecurityPkg-Tcg-Make-Tcg2PlatformPei-buildable-and-f.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0019-SecurityPkg-Add-references-to-header-and-inf-files-t.patch

fix CVE-2021-38576

2022-02-15 10:18:13 +08:00

0020-OvmfPkg-VirtioNetDxe-Extend-the-RxBufferSize-to-avoi.patch

OvmfPkg:VirtioNetDxe:Extend the RxBufferSize to avoid data truncation

2022-02-17 18:58:40 +08:00

0021-UefiCpuPkg-Move-MigrateGdt-from-DiscoverMemory-to-Te.patch

fix CVE-2019-11098

2022-09-30 09:20:58 +08:00

0022-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch

CVE-2021-38578

2022-11-29 11:56:25 +08:00

0023-PATCH-Avoid-dangling-ptrs-in-header-and-data-params-.patch

fix CVE-2023-0401

2023-02-26 15:19:32 +08:00

0024-PATCH-pk7_doit.c-Check-return-of-BIO_set_md-calls.patch

fix CVE-2023-0401

2023-02-26 15:19:32 +08:00

0025-Fix-a-UAF-resulting-from-a-bug-in-BIO_new_NDEF.patch

fix CEV-2023-0215

2023-02-26 15:31:37 +08:00

0026-Check-CMS-failure-during-BIO-setup-with-stream-is-ha.patch

fix CEV-2023-0215

2023-02-26 15:31:37 +08:00

0027-Correctly-compare-EdiPartyName-in-GENERAL_NAME_cmp.patch

fix CVE-2023-0286

2023-02-26 15:44:00 +08:00

0028-CVE-2023-0286-Fix-GENERAL_NAME_cmp-for-x400Address-1.patch

fix CVE-2023-0286

2023-02-26 15:44:00 +08:00

0029-Fix-Timing-Oracle-in-RSA-decryption.patch

Fix CVE-2022-4304

2023-08-25 09:59:34 +08:00

0030-brotli-Fix-VLA-parameter-warning-893.patch

solving the compilation failure problem of gcc 12.3.0

2023-08-25 10:32:32 +08:00

0031-MdeModulePkg-UsbBusDxe-fix-NOOPT-build-error.patch

solving the compilation failure problem of gcc 12.3.0

2023-08-25 10:32:32 +08:00

0032-BaseTools-GenEfs-GenSec-fix-gcc12-warning.patch

solving the compilation failure problem of gcc 12.3.0

2023-08-25 10:32:32 +08:00

0033-BaseTools-LzmaCompress-fix-gcc12-warning.patch

solving the compilation failure problem of gcc 12.3.0

2023-08-25 10:32:32 +08:00

0034-Basetools-turn-off-gcc12-warning.patch

solving the compilation failure problem of gcc 12.3.0

2023-08-25 10:32:32 +08:00

0035-x509-excessive-resource-use-verifying-policy-constra.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0036-test-add-test-cases-for-the-policy-resource-overuse.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0037-Ensure-that-EXFLAG_INVALID_POLICY-is-checked-even-in.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0038-Fix-documentation-of-X509_VERIFY_PARAM_add0_policy.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0039-Restrict-the-size-of-OBJECT-IDENTIFIERs-that-OBJ_obj.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0040-Add-a-test-for-CVE-2023-3446.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0041-Fix-DH_check-excessive-time-with-over-sized-modulus.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0042-Update-further-expiring-certificates-that-affect-tes.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0043-DH_check-Do-not-try-checking-q-properties-if-it-is-o.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0044-dhtest.c-Add-test-of-DH_check-with-q-p-1.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0045-Add-NULL-checks-where-ContentInfo-data-can-be-NULL.patch

Fix some CVE

2024-02-22 23:05:12 +08:00

0046-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0047-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0048-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0049-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0050-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0051-SecurityPkg-Adding-CVE-2022-36764-to-SecurityFixes.y.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0052-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0053-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0054-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0055-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch

Fix some CVE

2024-03-08 15:31:33 +08:00

0056-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0057-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0058-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0059-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0060-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0061-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0062-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0063-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0064-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0065-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0066-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0067-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0068-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0069-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0070-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0071-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch

Fix some CVE

2024-03-08 17:07:28 +08:00

0072-Fix-unconstrained-session-cache-growth-in-TLSv1.3.patch

fix CVE-2024-2511

2024-04-17 09:52:42 +08:00

0073-Add-a-test-for-session-cache-handling.patch

fix CVE-2024-2511

2024-04-17 09:52:42 +08:00

0074-Extend-the-multi_resume-test-for-simultaneous-resump.patch

fix CVE-2024-2511

2024-04-17 09:52:42 +08:00

0075-Hardening-around-not_resumable-sessions.patch

fix CVE-2024-2511

2024-04-17 09:52:42 +08:00

0076-Add-a-test-for-session-cache-overflow.patch

fix CVE-2024-2511

2024-04-17 09:52:42 +08:00

0077-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch

Fix CVE-2024-1298

2024-06-13 09:38:23 +08:00

0078-Fix-SSL_select_next_proto-and-add-ALPN-validation-in.patch

Fix CVE-2024-5535

2024-07-11 21:07:38 +08:00

0079-Add-a-test-for-ALPN-and-NPN.patch

Fix CVE-2024-5535

2024-07-11 21:07:38 +08:00

0080-Fix-i2v_GENERAL_NAME-to-not-assume-NUL-terminated-st.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0081-Fix-POLICYINFO-printing-to-not-assume-NUL-terminated.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0082-Fix-printing-of-PROXY_CERT_INFO_EXTENSION-to-not-ass.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0083-Fix-the-name-constraints-code-to-not-assume-NUL-term.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0084-Fix-test-code-to-not-assume-NUL-terminated-strings.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0085-Fix-append_ia5-function-to-not-assume-NUL-terminated.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0086-Fix-NETSCAPE_SPKI_print-function-to-not-assume-NUL-t.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0087-Fix-EC_GROUP_new_from_ecparameters-to-check-the-base.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0088-Fix-possible-infinite-loop-in-BN_mod_sqrt.patch

Fix CVE-2021-3712、CVE-2022-0778

2024-09-03 21:38:30 +08:00

0089-VirtioDxe-add-support-of-MMIO-Bar-for-virtio-devices.patch

vdpa: support vdpa blk/scsi device boot

2024-09-21 15:35:08 +08:00

0090-Virtio-wait-virtio-device-reset-done.patch

vdpa: support vdpa blk/scsi device boot

2024-09-21 15:35:08 +08:00

0091-VirtioBlk-split-large-IO-according-to-segment_size_m.patch

vdpa: support vdpa blk/scsi device boot

2024-09-21 15:35:08 +08:00

0092-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch

fix CVE-2024-38796

2024-10-09 16:21:32 +08:00

0093-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch

Fix CVE-2023-45236、CVE-2023-45237

2024-10-15 22:48:52 +08:00

0094-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch

Fix CVE-2023-45236、CVE-2023-45237

2024-10-15 22:48:52 +08:00

brotli.tar.gz

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

edk2-stable202011.tar.gz

update edk2 to stable 202011

2022-02-09 18:41:17 +08:00

edk2.spec

Fix CVE-2023-45236、CVE-2023-45237

2024-10-15 22:48:52 +08:00

openssl-1.1.1f.tar.gz

Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f

2020-05-12 11:09:52 +08:00

Description

No description provided

85 MiB

Languages

Diff 100%