File _patchinfo of Package patchinfo.28635
<patchinfo incident="28635">
<issue tracker="cve" id="2019-14560"/>
<issue tracker="cve" id="2021-38578"/>
<issue tracker="bnc" id="1196741">VUL-0: CVE-2021-38578: ovmf: Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.</issue>
<issue tracker="bnc" id="1174246">VUL-0: CVE-2019-14560: ovmf: improper check of GetEfiGlobalVariable2() return can potentially lead to to secure boot bypass</issue>
<packager>joeyli</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for ovmf</summary>
<description>This update for ovmf fixes the following issues:
- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246).
- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).
</description>
</patchinfo>