f0ad2aa CVE fixes for 2022-05-24

Authored and Committed by rharwood 2 years ago
50 files changed. 5280 lines added. 3 lines removed.
0220-loader-efi-chainloader-grub_load_and_start_image-doe.patch
file added
+69
0221-loader-efi-chainloader-simplify-the-loader-state.patch
file added
+330
0222-commands-boot-Add-API-to-pass-context-to-loader.patch
file added
+158
0223-loader-efi-chainloader-Use-grub_loader_set_ex.patch
file added
+147
0224-loader-i386-efi-linux-Avoid-a-use-after-free-in-the-.patch
file added
+41
0225-loader-i386-efi-linux-Use-grub_loader_set_ex.patch
file added
+296
0226-loader-i386-efi-linux-Fix-a-memory-leak-in-the-initr.patch
file added
+75
0227-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
file added
+101
0228-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
file added
+39
0229-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
file added
+198
0230-video-readers-png-Refuse-to-handle-multiple-image-he.patch
file added
+28
0231-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
file added
+170
0232-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
file added
+40
0233-video-readers-png-Sanity-check-some-huffman-codes.patch
file added
+40
0234-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
file added
+255
0235-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
file added
+29
0236-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
file added
+44
0237-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
file added
+53
0238-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
file added
+34
0239-net-netbuff-Block-overly-large-netbuff-allocs.patch
file added
+46
0240-net-ip-Do-IP-fragment-maths-safely.patch
file added
+44
0241-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
file added
+56
0242-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
file added
+71
0243-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
file added
+112
0244-net-tftp-Avoid-a-trivial-UAF.patch
file added
+35
0245-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
file added
+42
0246-net-http-Fix-OOB-write-for-split-http-headers.patch
file added
+46
0247-net-http-Error-out-on-headers-with-LF-without-CR.patch
file added
+48
0248-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
file added
+72
0249-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
file added
+132
0250-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
file added
+38
0251-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
file added
+79
0252-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
file added
+134
0253-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
file added
+75
0254-misc-Make-grub_min-and-grub_max-more-resilient.patch
file added
+83
0255-ReiserFS-switch-to-using-grub_min-grub_max.patch
file added
+92
0256-misc-make-grub_boot_time-also-call-grub_dprintf-boot.patch
file added
+46
0257-modules-make-.module_license-read-only.patch
file added
+30
0258-modules-strip-.llvm_addrsig-sections-and-similar.patch
file added
+39
0259-modules-Don-t-allocate-space-for-non-allocable-secti.patch
file added
+35
0260-pe-add-the-DOS-header-struct-and-fix-some-bad-naming.patch
file added
+81
0261-EFI-allocate-kernel-in-EFI_RUNTIME_SERVICES_CODE-ins.patch
file added
+85
0262-modules-load-module-sections-at-page-aligned-address.patch
file added
+378
0263-nx-add-memory-attribute-get-set-API.patch
file added
+317
0264-nx-set-page-permissions-for-loaded-modules.patch
file added
+263
0265-nx-set-attrs-in-our-kernel-loaders.patch
file added
+565
0266-nx-set-the-nx-compatible-flag-in-EFI-grub-images.patch
file added
+34
grub.patches
file modified
+47 -0
grub2.spec
file modified
+6 -1
sbat.csv.in
file modified
+2 -2
    CVE fixes for 2022-05-24
    
    Resolves: CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
    Resolves: CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
    Signed-off-by: Robbie Harwood <rharwood@redhat.com>
    
        
file modified
+47 -0
file modified
+6 -1
file modified
+2 -2