* Mon Nov 03 2025 Miroslav Rezanina <mrezanin@redhat.com> - 20250822-3

- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
  (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2])
This commit is contained in:
Miroslav Rezanina 2025-11-03 08:37:54 +01:00
parent 689cacc3e0
commit 9016010093
2 changed files with 8 additions and 3 deletions

View File

@ -6,7 +6,7 @@ ExclusiveArch: x86_64 aarch64 riscv64
%define TOOLCHAIN GCC
%define OPENSSL_VER 3.5.1
%define OPENSSL_HASH b3a1d7764e515b88398b15b1aeaf3ff47d5026da
%define OPENSSL_HASH 4cf5738ac1c163d5ce2517250321da906492c40d
%define DBXDATE 20250610
@ -25,7 +25,7 @@ ExclusiveArch: x86_64 aarch64 riscv64
Name: edk2
Version: %{GITDATE}
Release: 2%{?dist}
Release: 3%{?dist}
Summary: UEFI firmware for 64-bit virtual machines
License: BSD-2-Clause-Patent and Apache-2.0 and MIT
URL: http://www.tianocore.org
@ -464,6 +464,11 @@ install -m 0644 \
%changelog
* Mon Nov 03 2025 Miroslav Rezanina <mrezanin@redhat.com> - 20250822-3
- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
- Resolves: RHEL-115880
(CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2])
* Mon Oct 13 2025 Miroslav Rezanina <mrezanin@redhat.com> - 20250822-2
- edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
- Resolves: RHEL-109548

View File

@ -1,5 +1,5 @@
SHA512 (openssl-rhel-4cf5738ac1c163d5ce2517250321da906492c40d.tar.xz) = 62993387684d0509d4f5b04f7369fdc9bec39aa84d9598b88971a2da46c636d0900612c51b2c9df14d9bbdd8399fb691c9d707efb177e82664408fc8b12b7c8a
SHA512 (DBXUpdate-20250610.aa64.bin) = 2af6d22d139ff58cb2d0dc0883257b6131f1bd9cc04b4c062c21f1d0560508f8f4ea062e6946fd37c8ab47259772884e29c32a93844d5d6beadcf9e778e4ee51
SHA512 (DBXUpdate-20250610.x64.bin) = be2bea068e6db47b5ad419fe9402035d9f3e1e75166eff50193387d68c209225f0e45a014fc3781718cb494f55ab98f71f5c28c96c7c21988ac050d94b1df881
SHA512 (dtc-1.7.0.tar.xz) = d3ba6902a9a2f2cdbaff55f12fca3cfe4a1ec5779074a38e3d8b88097c7abc981835957e8ce72971e10c131e05fde0b1b961768e888ff96d89e42c75edb53afb
SHA512 (edk2-d46aa46c8361.tar.xz) = cfafa14c6f6c5ca4c16239c2a3c0e290a77a987b3c8c6847a6198bdacbd0d7f4e2f950a0e603c3eaa1d2dbf5312f04705be11c3c38cbd6bcb7377e24660e775d
SHA512 (openssl-rhel-b3a1d7764e515b88398b15b1aeaf3ff47d5026da.tar.xz) = 40b7cb28b6ccc16c123b344bd8c9827f5764517b47eab9ccd4b0485e11f01fc8c28790e5f7105f72a3a3f4ba5b8cf84d166401937386d59e99a64f5a365e2250