From 5fd3078a2e08f607dc86a16c1b184b6e30a34a49 Mon Sep 17 00:00:00 2001 From: Doug Flick Date: Tue, 13 Feb 2024 10:46:03 -0800 Subject: NetworkPkg: : Updating SecurityFixes.yaml This captures the related security change for Dhcp6Dxe that is related to CVE-2023-45229 Cc: Saloni Kasbekar Cc: Zachary Clark-williams Signed-off-by: Doug Flick [MSFT] Reviewed-by: Saloni Kasbekar Reviewed-by: Leif Lindholm --- NetworkPkg/SecurityFixes.yaml | 1 + 1 file changed, 1 insertion(+) (limited to 'NetworkPkg') diff --git a/NetworkPkg/SecurityFixes.yaml b/NetworkPkg/SecurityFixes.yaml index 7e900483fe..fa42025e0d 100644 --- a/NetworkPkg/SecurityFixes.yaml +++ b/NetworkPkg/SecurityFixes.yaml @@ -8,6 +8,7 @@ CVE_2023_45229: commit_titles: - "NetworkPkg: Dhcp6Dxe: SECURITY PATCH CVE-2023-45229 Patch" - "NetworkPkg: Dhcp6Dxe: SECURITY PATCH CVE-2023-45229 Unit Tests" + - "NetworkPkg: Dhcp6Dxe: SECURITY PATCH CVE-2023-45229 Related Patch" cve: CVE-2023-45229 date_reported: 2023-08-28 13:56 UTC description: "Bug 01 - edk2/NetworkPkg: Out-of-bounds read when processing IA_NA/IA_TA options in a DHCPv6 Advertise message" -- cgit v1.2.3