File _patchinfo of Package patchinfo.18797

<patchinfo incident="18797">
  <issue tracker="bnc" id="1183578">VUL-0: CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo</issue>
  <issue tracker="bnc" id="1183579">VUL-0: CVE-2021-28210: ovmf: unlimited FV recursion, round 2</issue>
  <issue tracker="cve" id="2021-28210"/>
  <issue tracker="cve" id="2021-28211"/>
  <packager>gary_lin</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for ovmf</summary>
  <description>This update for ovmf fixes the following issues:

- CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578)
- CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
</description>
</patchinfo>
openSUSE Build Service is sponsored by