Ubuntu
edk2 package

edk2 2023.11-5 source package in Ubuntu

Changelog

edk2 (2023.11-5) unstable; urgency=medium

  * Cherry-pick security fixes from upstream (Closes: #1060408):
    - Fix heap buffer overflow in Tcg2MeasureGptTable(), CVE-2022-36763
      + 0001-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch
      + 0002-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch
      + 0003-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch
    - Fix heap buffer overflow in Tcg2MeasurePeImage(), CVE-2022-36764
      + 0001-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-2.patch
      + 0002-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch
      + 0003-SecurityPkg-Adding-CVE-2022-36764-to-SecurityFixes.y.patch
    - Fix build failure due to symbol collision in above patches:
      + 0001-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-3.patch
      + 0002-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117-2.patch
      + 0003-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch
    - Fix integer overflow in CreateHob(), CVE-2022-36765
      + 0001-UefiPayloadPkg-Hob-Integer-Overflow-in-CreateHob.patch

 -- dann frazier <email address hidden>  Sat, 20 Jan 2024 09:13:36 -0700

Upload details

Uploaded by:
Debian QEMU Team
Uploaded to:
Sid
Original maintainer:
Debian QEMU Team
Architectures:
all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Noble: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
edk2_2023.11-5.dsc 3.0 KiB 8b4e54f589169c3a568a924eb7a970622f39723ae5fa360bf089ad964f574452
edk2_2023.11.orig.tar.xz 23.9 MiB 7a06a495fa0f087406b43e3b2622e47e7ad4d25e55ec7fd64ba27a2295cca17d
edk2_2023.11-5.debian.tar.xz 52.9 KiB e411b134dcd46fb29dbfc360910403dc79666c27cbe4a6e4ee178c56c952b4fb

Available diffs

No changes file available.

Binary packages built by this source

efi-shell-aa64: UEFI Shell for 64-bit ARM architecture

 The UEFI Shell provides a command line interface running on top of the EFI API.
 It can be used to execute EFI binaries, to manage EFI variables and boot
 options, or to display details of installed devices, drivers, and protocols.
 This package contains the shellaa64.efi binary for the 64-bit ARM
 architecture.

efi-shell-arm: UEFI Shell for 32-bit ARM architecture

 The UEFI Shell provides a command line interface running on top of the EFI API.
 It can be used to execute EFI binaries, to manage EFI variables and boot
 options, or to display details of installed devices, drivers, and protocols.
 This package contains the shellarm.efi binary for the 32-bit ARM
 architecture.

efi-shell-ia32: UEFI Shell for 32-bit x86 architecture

 The UEFI Shell provides a command line interface running on top of the EFI API.
 It can be used to execute EFI binaries, to manage EFI variables and boot
 options, or to display details of installed devices, drivers, and protocols.
 This package contains the shellia32.efi binary for the a 32-bit x86
 architecture.

efi-shell-riscv64: UEFI Shell for 64-bit RISC-V architecture

 The UEFI Shell provides a command line interface running on top of the EFI API.
 It can be used to execute EFI binaries, to manage EFI variables and boot
 options, or to display details of installed devices, drivers, and protocols.
 This package contains the shellriscv64.efi binary for the 64-bit RISC-V
 architecture.

efi-shell-x64: UEFI Shell for 64-bit x86 architecture

 The UEFI Shell provides a command line interface running on top of the EFI API.
 It can be used to execute EFI binaries, to manage EFI variables and boot
 options, or to display details of installed devices, drivers, and protocols.
 This package contains the shellx64.efi binary for the 64-bit x86
 architecture.

ovmf: UEFI firmware for 64-bit x86 virtual machines

 Open Virtual Machine Firmware is a build of EDK II for 64-bit x86 virtual
 machines. It includes full support for UEFI, including Secure Boot, allowing
 use of UEFI in place of a traditional BIOS in your VM.

ovmf-ia32: UEFI firmware for 32-bit x86 virtual machines

 Open Virtual Machine Firmware is a build of EDK II for 32-bit x86 virtual
 machines. It includes full support for UEFI, including Secure Boot, allowing
 use of UEFI in place of a traditional BIOS in your VM.

qemu-efi-aarch64: UEFI firmware for 64-bit ARM virtual machines

 qemu-efi-aarch64 is a build of EDK II for 64-bit ARM virtual machines. It
 includes full support for UEFI, including Secure Boot.

qemu-efi-arm: UEFI firmware for 32-bit ARM virtual machines

 qemu-efi-arm is a build of EDK II for 32-bit ARM virtual machines. It
 includes full support for UEFI, including Secure Boot.

qemu-efi-riscv64: UEFI firmware for RISCV64 virtual machines

 qemu-efi-riscv64 is a build of EDK II for RISCV64 virtual machines.