Debian/edk2: medium 6.7
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Action: Upgrade edk2 to 2022.11-6+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2022.11-6+deb12u1 | - |
Fixed versions
| 2022.11-6+deb12u1 |
Sources
published · modified · JSON