ELSA-2023-2932

Описание

[20220126gitbb1bba3d77-4]

• edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
• edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581]
• Resolves: bz#2164531 (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-8])
• Resolves: bz#2164543 (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-8])
• Resolves: bz#2164558 (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-8])
• Resolves: bz#2164581 (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-8])