UbuntuUpdates.org

Package "edk2"

Name: edk2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • UEFI firmware for 32-bit x86 virtual machines
  • transitional dummy package
Latest version: 2022.02-3ubuntu0.22.04.7
Release: jammy (22.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "edk2" in Jammy

Repository Area Version
base universe 2022.02-3
base main 2022.02-3
security universe 2022.02-3ubuntu0.22.04.7
security main 2022.02-3ubuntu0.22.04.7
updates main 2022.02-3ubuntu0.22.04.7

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2022.02-3ubuntu0.22.04.7 2026-10-07 15:38:13 UTC

edk2 (2022.02-3ubuntu0.22.04.7) jammy-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds Write
    - debian/patches/CVE-2026-63072.patch: Fix heap buffer overflow
      (8-byte OOB write) in AES-WRAP-PAD unwrap by sizing the buffer
      for worst case
    - CVE-2026-63072
  * SECURITY UPDATE: Asymmetric Resource Consumption
    - debian/patches/CVE-2026-54874.patch: Avoid full read buffer
      allocation when buffering DTLS next-epoch records by copying only
      the record's own on-wire bytes
    - CVE-2026-54874

 -- Leonidas Da Silva Barbosa Wed, 23 Sep 2026 12:40:30 -0300
Source diff to previous version
CVE-2026-63072 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primit
CVE-2026-54874 Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record i

Version: 2022.02-3ubuntu0.22.04.6 2026-07-08 19:08:20 UTC

  edk2 (2022.02-3ubuntu0.22.04.6) jammy; urgency=medium

  * d/rules: fix parallel build races
  * Expand EnrollDefaultKeys with Microsoft 2023 keys (LP: #2146560)
  * Add FirmwareSecvarUpdater for adding Microsoft 2023 CAs to existing VMs (LP: #2146560)
  * Add integration tests for FirmwareSecvarUpdater (LP: #2146560)

 -- Mate Kukri <email address hidden> Tue, 02 Jun 2026 13:47:44 +0100
Source diff to previous version
2146560 [FFe + SRU] edk2: Introduce FirmwareSecvarUpdater for MS 2023 CA rollout

Version: 2022.02-3ubuntu0.22.04.5 2025-11-29 00:07:46 UTC

  edk2 (2022.02-3ubuntu0.22.04.5) jammy-security; urgency=medium

  * SECURITY REGRESSION: UEFI network boot broken (LP: #2133157)
    - d/p/CVE-2023-45236.patch: disabled pending further investigation.
    - d/p/CVE-2023-45237-pre1.patch: disabled pending further investigation.
    - d/p/CVE-2023-45237.patch: disabled pending further investigation.

 -- Marc Deslauriers <email address hidden> Thu, 27 Nov 2025 11:17:41 -0500
Source diff to previous version
2133157 ovmf 2024.02-2ubuntu0.6 broke UEFI network boot for VMs
CVE-2023-45236 EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unaut
CVE-2023-45237 EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unaut

Version: 2022.02-3ubuntu0.22.04.4 2025-11-27 11:15:28 UTC

  edk2 (2022.02-3ubuntu0.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: Read buffer overrun in X509_aux_print()
    - debian/patches/CVE-2021-3712.patch: fix a read buffer overrun in
      X509_aux_print() in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509/t_x509.c.
    - debian/patches/CVE-2021-3712-2.patch: fix i2v_GENERAL_NAME to not
      assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_alt.c,
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_utl.c,
      CryptoPkg/Library/OpensslLib/openssl/include/crypto/x509.h.
    - debian/patches/CVE-2021-3712-3.patch: fix POLICYINFO printing to not
      assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_cpols.c.
    - debian/patches/CVE-2021-3712-4.patch: fix printing of
      PROXY_CERT_INFO_EXTENSION to not assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_pci.c.
    - debian/patches/CVE-2021-3712-5.patch: fix the name constraints code
      to not assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_ncons.c.
    - debian/patches/CVE-2021-3712-6.patch: fix test code to not assume NUL
      terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/test/x509_time_test.c.
    - debian/patches/CVE-2021-3712-7.patch: fix append_ia5 function to not
      assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_utl.c.
    - debian/patches/CVE-2021-3712-8.patch: fix NETSCAPE_SPKI_print
      function to not assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/asn1/t_spki.c.
    - debian/patches/CVE-2021-3712-9.patch: fix
      EC_GROUP_new_from_ecparameters to check the base length in
      CryptoPkg/Library/OpensslLib/openssl/crypto/ec/ec_asn1.c.
    - debian/patches/CVE-2021-3712-10.patch: allow fuzz builds to detect
      string overruns in
      CryptoPkg/Library/OpensslLib/openssl/crypto/asn1/asn1_lib.c.
    - debian/patches/CVE-2021-3712-11.patch: fix the error handling in
      i2v_AUTHORITY_KEYID in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_akey.c.
    - debian/patches/CVE-2021-3712-12.patch: allow fuzz builds to detect
      string overruns in
      CryptoPkg/Library/OpensslLib/openssl/crypto/asn1/asn1_lib.c.
    - debian/patches/CVE-2021-3712-13.patch: fix the name constraints code
      to not assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_ncons.c.
    - debian/patches/CVE-2021-3712-14.patch: fix i2v_GENERAL_NAME to not
      assume NUL terminated strings in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509v3/v3_utl.c.
    - CVE-2021-3712
  * SECURITY UPDATE: Infinite loop in BN_mod_sqrt()
    - debian/patches/CVE-2022-0778-1.patch: fix infinite loop in
      CryptoPkg/Library/OpensslLib/openssl/crypto/bn/bn_sqrt.c.
    - debian/patches/CVE-2022-0778-2.patch: add documentation of
      BN_mod_sqrt() in
      CryptoPkg/Library/OpensslLib/openssl/doc/man3/BN_add.pod.
    - debian/patches/CVE-2022-0778-3.patch: add a negative testcase for
      BN_mod_sqrt in CryptoPkg/Library/OpensslLib/openssl/test/bntest.c,
      CryptoPkg/Library/OpensslLib/openssl/test/recipes/10-test_bn_data/bnmod.txt.
    - CVE-2022-0778
  * SECURITY UPDATE: Timing Oracle in RSA Decryption
    - debian/patches/CVE-2022-4304-1.patch: use alternative fix in
      CryptoPkg/Library/OpensslLib/openssl/crypto/bn/bn_asm.c,
      CryptoPkg/Library/OpensslLib/openssl/crypto/bn/bn_blind.c,
      CryptoPkg/Library/OpensslLib/openssl/crypto/bn/bn_lib.c,
      CryptoPkg/Library/OpensslLib/openssl/crypto/bn/bn_local.h,
      CryptoPkg/Library/OpensslLib/openssl/crypto/rsa/rsa_ossl.c.
    - debian/patches/CVE-2022-4304-2.patch: re-add
      BN_F_OSSL_BN_RSA_DO_UNBLIND which was incorrectly removed in
      iCryptoPkg/Library/OpensslLib/openssl/nclude/openssl/bnerr.h.
    - CVE-2022-4304
  * SECURITY UPDATE: Double free after calling PEM_read_bio_ex
    - debian/patches/CVE-2022-4450-1.patch: avoid dangling ptrs in header
      and data params for PEM_read_bio_ex in
      CryptoPkg/Library/OpensslLib/openssl/crypto/pem/pem_lib.c.
    - debian/patches/CVE-2022-4450-2.patch: add a test in
      CryptoPkg/Library/OpensslLib/openssl/test/pemtest.c.
    - CVE-2022-4450
  * SECURITY UPDATE: Use-after-free following BIO_new_NDEF
    - debian/patches/CVE-2023-0215-1.patch: fix a UAF resulting from a bug
      in BIO_new_NDEF in
      CryptoPkg/Library/OpensslLib/openssl/crypto/asn1/bio_ndef.c.
    - debian/patches/CVE-2023-0215-2.patch: check CMS failure during BIO
      setup with -stream is handled correctly in
      CryptoPkg/Library/OpensslLib/openssl/test/recipes/80-test_cms.t,
      CryptoPkg/Library/OpensslLib/openssl/test/smime-certs/badrsa.pem.
    - CVE-2023-0215
  * SECURITY UPDATE: X.400 address type confusion in X.509 GeneralName
    - debian/patches/CVE-2023-0286.patch: fix GENERAL_NAME_cmp for
      x400Address in
      CryptoPkg/Library/OpensslLib/openssl/crypto/x509/v3_genn.c,
      CryptoPkg/Library/OpensslLib/openssl/include/openssl/x509v3.h,
      CryptoPkg/Library/OpensslLib/openssl/test/v3nametest.c.
    - CVE-2023-0286
  * SECURITY UPDATE: excessive resource use when verifying policy constraints
    - debian/patches/CVE-2023-0464-1.patch: limit the number of nodes created
      in a policy tree (the default limit is set to 1000 nodes).
    - debian/patches/CVE-2023-0464-2.patch: add test cases for the policy
      resource overuse.
    - debian/patches/CVE-2023-0464-3.patch: disable the policy tree
      exponential growth test conditionally.
    - CVE-2023-0464
  * SECURITY UPDATE: invalid certificate policies ignored in leaf certificates
    - debian/patches/CVE-2023-0465-1.patch: ensure that EXFLAG_INVALID_POLICY
      is checked even in leaf certs.
    - debian/patches/CVE-2023-0465-2.patch: generate some certificates with
    
Source diff to previous version
CVE-2021-3712 Read buffer overruns processing ASN.1 strings
CVE-2022-0778 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
CVE-2022-4304 openssl: Timing Oracle in RSA Decryption
CVE-2022-4450 openssl: Double free after calling PEM_read_bio_ex
CVE-2023-0215 openssl: Use-after-free following BIO_new_NDEF
CVE-2023-0286 openssl: X.400 address type confusion in X.509 GeneralName
CVE-2023-0464 A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that includ
CVE-2023-0465 Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain check
CVE-2023-0466 The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. How
CVE-2023-2650 openssl Possible DoS translating ASN.1 object identifiers
CVE-2023-3446 Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_
CVE-2023-3817 Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_
CVE-2023-45236 EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unaut
CVE-2023-45237 EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unaut
CVE-2023-5678 Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary:
CVE-2024-0727 Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summa
CVE-2024-1298 EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A
CVE-2024-13176 Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summ
CVE-2024-2511 Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An atta
CVE-2024-38796 EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network.
CVE-2024-38797 EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via
CVE-2024-38805 EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vu
CVE-2024-4741 Use After Free with SSL_free_buffers
CVE-2024-5535 Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory con
CVE-2024-6119 Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory
CVE-2024-9143 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds mem
CVE-2025-2295 EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vu
CVE-2025-3770 EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vul

Version: 2022.02-3ubuntu0.22.04.3 2024-10-10 07:07:27 UTC

  edk2 (2022.02-3ubuntu0.22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: integer underflow
    - debian/patches/CVE-2021-38578.patch: Add SafeIntLib to check for
      under or overflows
    - CVE-2021-38578

 -- Bruce Cable <email address hidden> Tue, 08 Oct 2024 18:01:17 +1100
CVE-2021-38578 Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.


About   -   Send Feedback to @ubuntu_updates