edk2 security update

Tue Feb 27 2024 Aaron Young - Create new 20240227 release for OL9 which includes the following fixed CVEs: CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2022-36763 CVE-2022-36764 CVE-2022-36765 - Update to OpenSSL 3.0.10 which include...

CVE-2024-1298

A divide-by-zero vulnerability was found in edk2. A successful exploit of this vulnerability may lead to a loss of availability...

CVE-2022-4304 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2022-4304 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45235 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45235 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45233 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45233 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45236 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45236 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-36765 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2022-36765 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45230 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45230 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45229 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45229 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45231 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45231 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45232 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45232 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45237 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45237 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-36764 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2022-36764 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45234 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2023-45234 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-36763 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

CVE-2022-36763 affecting package edk2 for versions less than 20240223gitedc6681206c1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-1298

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability...

AZL-42336 CVE-2024-1298 affecting package edk2 for versions less than 20240524git3e722403cd16-1

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability...

AZL-42337 CVE-2024-1298 affecting package hvloader for versions less than 1.0.1-3

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability...

CVE-2024-1298

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability...

CVE-2024-1298

EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability...