News · via Ubuntu Security
USN-8865-1: EDK II vulnerabilities
It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial…