{
  "cves": [
    "CVE-2017-5731",
    "CVE-2017-5735",
    "CVE-2018-12178",
    "CVE-2018-12180",
    "CVE-2018-12181",
    "CVE-2017-5753",
    "CVE-2017-5715",
    "CVE-2017-5733",
    "CVE-2017-5732",
    "CVE-2017-5734",
    "CVE-2018-3630"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:1.2-5.el7]\n- Update spec file to remove 'modprobe kvm-intel' and remove --enable-kvm arg to ovmf_vars_generator so qemu will not require kvm kernel module. (Aaron Young) \n- Update spec file to modprobe kvm_intel module prior to running qemu to enroll default keys. (Aaron Young) \n- Enroll Oracle cert/key for OL secureboot support. (Aaron Young)\n\n[1:1.2-2.el7]\n- Change Image.c image load error to DEBUG_WARN from DEBUG_ERROR since it is normal for some images to fail to load if the associated hardware is not present. Such is the case with Ramfb. (Aaron Young)  [Orabug: 28868674]\n- Fix AAVMF build. Pull in OpenSSL code (as is done for x86_64) (Aaron Young) \n- Update AAVMF change log for version 1.2 (Aaron Young)\n\n[1:1.2-1.el7]\n- Update spec files and OVMF change log to version 1.2",
  "id": "ELSA-2019-4668",
  "ovalId": "oval:com.oracle.elsa:def:20194668",
  "source": "oracle_linux",
  "title": "ELSA-2019-4668:  edk2 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2019-4668.html"
}