File _patchinfo of Package patchinfo.18797
<patchinfo incident="18797">
<issue tracker="bnc" id="1183578">VUL-0: CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo</issue>
<issue tracker="bnc" id="1183579">VUL-0: CVE-2021-28210: ovmf: unlimited FV recursion, round 2</issue>
<issue tracker="cve" id="2021-28210"/>
<issue tracker="cve" id="2021-28211"/>
<packager>gary_lin</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for ovmf</summary>
<description>This update for ovmf fixes the following issues:
- CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578)
- CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
</description>
</patchinfo>