Stay Secure with the Latest Linux Advisories

security advisorymoderateupdate

Fedora 30: edk2 Moderate Update - Secureboot Re-enable and Enhancements

* License is now BSD-2-Clause-Patent * Re-enable secureboot enrollment * Use qemu-ovmf-secureboot from git. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-d47a9d4b8b 2019-08-15 18:07:56.659780 --------------------------------------------------------------------------------Name : edk2 Product : Fedora 30 Version : 20190501stable Release : 2.fc30 URL : https://www.tianocore.org/edk2/ Summary : EFI Development Kit II Description : EDK II is a development code base for creating UEFI drivers, applications and firmware images. --------------------------------------------------------------------------------Update Information: * License is now BSD-2-Clause-Patent * Re-enable secureboot enrollment * Use qemu-ovmf-secureboot from git --------------------------------------------------------------------------------ChangeLog: * Mon Jul 15 2019 Cole Robinson - 20190501stable-2 - License is now BSD-2-Clause-Patent - Re-enable secureboot enrollment - Use qemu-ovmf-secureboot from git * Thu Jul 11 2019 Cole Robinson - 20190501stable-1 - Update to stable-201905 - Update to openssl-1.1.1b - Ship VARS file for ovmf-ia32 (bug 1688596) - Ship Fedora-variant JSON "firmware descriptor files" - Resolves rhbz#1728652 --------------------------------------------------------------------------------References: [ 1 ] Bug #1728652 - RFE: Ship the JSON firmware "descriptor files" as part of EDK2 https://bugzilla.redhat.com/show_bug.cgi?id=1728652 [ 2 ] Bug #1688596 - edk2-ovmf-ia32 is missing OVMF_VARS https://bugzilla.redhat.com/show_bug.cgi?id=1688596 [ 3 ] Bug #1701710 - VM turns on, uses a lot of CPU, uses almost no memory, indefinite black console screen https://bugzilla.redhat.com/show_bug.cgi?id=1701710 [ 4 ] Bug #1694085 - CVE-2018-12179 CVE-2018-12182 CVE-2018-12183 CVE-2019-0161 edk2: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1694085 [ 5 ] Bug #1691645 - CVE-2019-0160 edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1691645 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-d47a9d4b8b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The recent Fedora update for the edk2 package enhances Secure Boot features and revises licensing agreements. For installation details and guidance, see the official release notes. edk2 Update,Secure Boot Enrollment,Fedora Update,Linux Firmware Development. . Severity: Important. LinuxSecurity.com Team

Aug 15, 2019 •Important Fedora