packages/edk2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
68 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
yexiao ee53faa86f Fix some CVE 
Fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466
CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、
CVE-2024-0727

Signed-off-by: yexiao <yexiao7@huawei.com>
(cherry picked from commit d3b0038b60362ad16729fbb0230a0d1d050f950e)
2024-02-22 23:05:12 +08:00
0001-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0002-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0003-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0004-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0005-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0006-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0007-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0008-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0009-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0010-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0011-MdeModulePkg-FPDT-Lock-boot-performance-table-addres.patch
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
0012-SecurityPkg-TPM-Import-PeiDxeTpmPlatformHierarchyLib.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0013-SecurityPkg-TPM-Fix-bugs-in-imported-PeiDxeTpmPlatfo.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0014-SecrutiyPkg-Tcg-Import-Tcg2PlatformDxe-from-edk2-pla.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0015-SecurityPkg-Tcg-Make-Tcg2PlatformDxe-buildable-and-f.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0016-SecurityPkg-Introduce-new-PCD-PcdRandomizePlatformHi.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0017-SecurityPkg-Tcg-Import-Tcg2PlatformPei-from-edk2-pla.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0018-SecurityPkg-Tcg-Make-Tcg2PlatformPei-buildable-and-f.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0019-SecurityPkg-Add-references-to-header-and-inf-files-t.patch
fix CVE-2021-38576
2022-02-15 10:18:13 +08:00
0020-OvmfPkg-VirtioNetDxe-Extend-the-RxBufferSize-to-avoi.patch
OvmfPkg:VirtioNetDxe:Extend the RxBufferSize to avoid data truncation
2022-02-17 18:58:40 +08:00
0021-UefiCpuPkg-Move-MigrateGdt-from-DiscoverMemory-to-Te.patch
fix CVE-2019-11098
2022-09-30 09:20:58 +08:00
0022-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
CVE-2021-38578
2022-11-29 11:56:25 +08:00
0023-PATCH-Avoid-dangling-ptrs-in-header-and-data-params-.patch
fix CVE-2023-0401
2023-02-26 15:19:32 +08:00
0024-PATCH-pk7_doit.c-Check-return-of-BIO_set_md-calls.patch
fix CVE-2023-0401
2023-02-26 15:19:32 +08:00
0025-Fix-a-UAF-resulting-from-a-bug-in-BIO_new_NDEF.patch
fix CEV-2023-0215
2023-02-26 15:31:37 +08:00
0026-Check-CMS-failure-during-BIO-setup-with-stream-is-ha.patch
fix CEV-2023-0215
2023-02-26 15:31:37 +08:00
0027-Correctly-compare-EdiPartyName-in-GENERAL_NAME_cmp.patch
fix CVE-2023-0286
2023-02-26 15:44:00 +08:00
0028-CVE-2023-0286-Fix-GENERAL_NAME_cmp-for-x400Address-1.patch
fix CVE-2023-0286
2023-02-26 15:44:00 +08:00
0029-Fix-Timing-Oracle-in-RSA-decryption.patch
Fix CVE-2022-4304
2023-08-25 09:59:34 +08:00
0030-brotli-Fix-VLA-parameter-warning-893.patch
solving the compilation failure problem of gcc 12.3.0
2023-08-25 10:32:32 +08:00
0031-MdeModulePkg-UsbBusDxe-fix-NOOPT-build-error.patch
solving the compilation failure problem of gcc 12.3.0
2023-08-25 10:32:32 +08:00
0032-BaseTools-GenEfs-GenSec-fix-gcc12-warning.patch
solving the compilation failure problem of gcc 12.3.0
2023-08-25 10:32:32 +08:00
0033-BaseTools-LzmaCompress-fix-gcc12-warning.patch
solving the compilation failure problem of gcc 12.3.0
2023-08-25 10:32:32 +08:00
0034-Basetools-turn-off-gcc12-warning.patch
solving the compilation failure problem of gcc 12.3.0
2023-08-25 10:32:32 +08:00
0035-x509-excessive-resource-use-verifying-policy-constra.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0036-test-add-test-cases-for-the-policy-resource-overuse.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0037-Ensure-that-EXFLAG_INVALID_POLICY-is-checked-even-in.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0038-Fix-documentation-of-X509_VERIFY_PARAM_add0_policy.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0039-Restrict-the-size-of-OBJECT-IDENTIFIERs-that-OBJ_obj.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0040-Add-a-test-for-CVE-2023-3446.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0041-Fix-DH_check-excessive-time-with-over-sized-modulus.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0042-Update-further-expiring-certificates-that-affect-tes.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0043-DH_check-Do-not-try-checking-q-properties-if-it-is-o.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0044-dhtest.c-Add-test-of-DH_check-with-q-p-1.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
0045-Add-NULL-checks-where-ContentInfo-data-can-be-NULL.patch
Fix some CVE
2024-02-22 23:05:12 +08:00
brotli.tar.gz
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
edk2-stable202011.tar.gz
update edk2 to stable 202011
2022-02-09 18:41:17 +08:00
edk2.spec
Fix some CVE
2024-02-22 23:05:12 +08:00
openssl-1.1.1f.tar.gz
Upgrade edk2 to stable202002 and OpenSSL to 1.1.1f
2020-05-12 11:09:52 +08:00
Description
No description provided
85 MiB
Languages
Diff 100%