From 9016010093ab7dadd14cd58bf15c35b6b1a8aaac Mon Sep 17 00:00:00 2001 From: Miroslav Rezanina Date: Mon, 3 Nov 2025 08:37:54 +0100 Subject: [PATCH] * Mon Nov 03 2025 Miroslav Rezanina - 20250822-3 - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880] - Resolves: RHEL-115880 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2]) --- edk2.spec | 9 +++++++-- sources | 2 +- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/edk2.spec b/edk2.spec index 89e520e..72b446a 100644 --- a/edk2.spec +++ b/edk2.spec @@ -6,7 +6,7 @@ ExclusiveArch: x86_64 aarch64 riscv64 %define TOOLCHAIN GCC %define OPENSSL_VER 3.5.1 -%define OPENSSL_HASH b3a1d7764e515b88398b15b1aeaf3ff47d5026da +%define OPENSSL_HASH 4cf5738ac1c163d5ce2517250321da906492c40d %define DBXDATE 20250610 @@ -25,7 +25,7 @@ ExclusiveArch: x86_64 aarch64 riscv64 Name: edk2 Version: %{GITDATE} -Release: 2%{?dist} +Release: 3%{?dist} Summary: UEFI firmware for 64-bit virtual machines License: BSD-2-Clause-Patent and Apache-2.0 and MIT URL: http://www.tianocore.org @@ -464,6 +464,11 @@ install -m 0644 \ %changelog +* Mon Nov 03 2025 Miroslav Rezanina - 20250822-3 +- edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880] +- Resolves: RHEL-115880 + (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2]) + * Mon Oct 13 2025 Miroslav Rezanina - 20250822-2 - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548] - Resolves: RHEL-109548 diff --git a/sources b/sources index d892fba..1d33450 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ +SHA512 (openssl-rhel-4cf5738ac1c163d5ce2517250321da906492c40d.tar.xz) = 62993387684d0509d4f5b04f7369fdc9bec39aa84d9598b88971a2da46c636d0900612c51b2c9df14d9bbdd8399fb691c9d707efb177e82664408fc8b12b7c8a SHA512 (DBXUpdate-20250610.aa64.bin) = 2af6d22d139ff58cb2d0dc0883257b6131f1bd9cc04b4c062c21f1d0560508f8f4ea062e6946fd37c8ab47259772884e29c32a93844d5d6beadcf9e778e4ee51 SHA512 (DBXUpdate-20250610.x64.bin) = be2bea068e6db47b5ad419fe9402035d9f3e1e75166eff50193387d68c209225f0e45a014fc3781718cb494f55ab98f71f5c28c96c7c21988ac050d94b1df881 SHA512 (dtc-1.7.0.tar.xz) = d3ba6902a9a2f2cdbaff55f12fca3cfe4a1ec5779074a38e3d8b88097c7abc981835957e8ce72971e10c131e05fde0b1b961768e888ff96d89e42c75edb53afb SHA512 (edk2-d46aa46c8361.tar.xz) = cfafa14c6f6c5ca4c16239c2a3c0e290a77a987b3c8c6847a6198bdacbd0d7f4e2f950a0e603c3eaa1d2dbf5312f04705be11c3c38cbd6bcb7377e24660e775d -SHA512 (openssl-rhel-b3a1d7764e515b88398b15b1aeaf3ff47d5026da.tar.xz) = 40b7cb28b6ccc16c123b344bd8c9827f5764517b47eab9ccd4b0485e11f01fc8c28790e5f7105f72a3a3f4ba5b8cf84d166401937386d59e99a64f5a365e2250