Hongxu Jia db026b5972 ovmf: fix CVE-2025-2295 ...

According to [1], EDK2 contains a vulnerability in BIOS where a user may
cause an Integer Overflow or Wraparound by network means. A successful
exploitation of this vulnerability may lead to denial of service.

Refer debian [2], backport a patch from edk2 [3] to fix CVE-2025-2295

[1] https://nvd.nist.gov/vuln/detail/CVE-2025-2295
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1100594
[3] 17cdc512f0

(From OE-Core rev: 0f59dec939cf0d313b1b01b1e7bf10e059d9d0ac)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2025-04-10 11:05:34 +01:00

..

ovmf

ovmf: fix CVE-2025-2295

2025-04-10 11:05:34 +01:00

ovmf_git.bb

ovmf: fix CVE-2025-2295

2025-04-10 11:05:34 +01:00

ovmf-shell-image.bb

meta/meta-selftest: Fix variable assignment whitespace

2025-02-01 13:42:34 +00:00