Adding the new commit titles for the symbol renames Cc: Jiewen Yao <jiewen....@intel.com> Cc: Rahul Kumar <rahul1.ku...@intel.com>
Signed-off-by: Doug Flick [MSFT] <doug.e...@gmail.com> --- SecurityPkg/SecurityFixes.yaml | 28 +++++++++++++++++----------- 1 file changed, 17 insertions(+), 11 deletions(-) diff --git a/SecurityPkg/SecurityFixes.yaml b/SecurityPkg/SecurityFixes.yaml index 833fb827a96c..b4006b42b89e 100644 --- a/SecurityPkg/SecurityFixes.yaml +++ b/SecurityPkg/SecurityFixes.yaml @@ -9,28 +9,34 @@ CVE_2022_36763: - "SecurityPkg: DxeTpm2Measurement: SECURITY PATCH 4117 - CVE 2022-36763" - "SecurityPkg: DxeTpmMeasurement: SECURITY PATCH 4117 - CVE 2022-36763" - "SecurityPkg: : Adding CVE 2022-36763 to SecurityFixes.yaml" + - "SecurityPkg: DxeTpm2MeasureBootLib: SECURITY PATCH 4117/4118 symbol rename" + - "SecurityPkg: DxeTpmMeasureBootLib: SECURITY PATCH 4117/4118 symbol rename" + - "SecurityPkg: : Updating SecurityFixes.yaml after symbol rename" cve: CVE-2022-36763 date_reported: 2022-10-25 11:31 UTC description: (CVE-2022-36763) - Heap Buffer Overflow in Tcg2MeasureGptTable() note: This patch is related to and supersedes TCBZ2168 files_impacted: - - Library\DxeTpm2MeasureBootLib\DxeTpm2MeasureBootLib.c - - Library\DxeTpmMeasureBootLib\DxeTpmMeasureBootLib.c + - Library\DxeTpm2MeasureBootLib\DxeTpm2MeasureBootLib.c + - Library\DxeTpmMeasureBootLib\DxeTpmMeasureBootLib.c links: - - https://bugzilla.tianocore.org/show_bug.cgi?id=4117 - - https://bugzilla.tianocore.org/show_bug.cgi?id=2168 - - https://bugzilla.tianocore.org/show_bug.cgi?id=1990 + - https://bugzilla.tianocore.org/show_bug.cgi?id=4117 + - https://bugzilla.tianocore.org/show_bug.cgi?id=2168 + - https://bugzilla.tianocore.org/show_bug.cgi?id=1990 CVE_2022_36764: commit_titles: - - "SecurityPkg: DxeTpm2MeasureBootLib: SECURITY PATCH 4118 - CVE 2022-36764" - - "SecurityPkg: DxeTpmMeasureBootLib: SECURITY PATCH 4118 - CVE 2022-36764" - - "SecurityPkg: : Adding CVE 2022-36764 to SecurityFixes.yaml" + - "SecurityPkg: DxeTpm2MeasureBootLib: SECURITY PATCH 4118 - CVE 2022-36764" + - "SecurityPkg: DxeTpmMeasureBootLib: SECURITY PATCH 4118 - CVE 2022-36764" + - "SecurityPkg: : Adding CVE 2022-36764 to SecurityFixes.yaml" + - "SecurityPkg: DxeTpm2MeasureBootLib: SECURITY PATCH 4117/4118 symbol rename" + - "SecurityPkg: DxeTpmMeasureBootLib: SECURITY PATCH 4117/4118 symbol rename" + - "SecurityPkg: : Updating SecurityFixes.yaml after symbol rename" cve: CVE-2022-36764 date_reported: 2022-10-25 12:23 UTC description: Heap Buffer Overflow in Tcg2MeasurePeImage() note: files_impacted: - - Library\DxeTpm2MeasureBootLib\DxeTpm2MeasureBootLib.c - - Library\DxeTpmMeasureBootLib\DxeTpmMeasureBootLib.c + - Library\DxeTpm2MeasureBootLib\DxeTpm2MeasureBootLib.c + - Library\DxeTpmMeasureBootLib\DxeTpmMeasureBootLib.c links: - - https://bugzilla.tianocore.org/show_bug.cgi?id=4118 + - https://bugzilla.tianocore.org/show_bug.cgi?id=4118 -- 2.43.0 -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#113969): https://edk2.groups.io/g/devel/message/113969 Mute This Topic: https://groups.io/mt/103797466/21656 Group Owner: devel+ow...@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-