{"cves":["CVE-2017-5731","CVE-2017-5715","CVE-2018-3630","CVE-2017-5733","CVE-2017-5734","CVE-2017-5735","CVE-2017-5753","CVE-2018-12178","CVE-2018-12181","CVE-2017-5732","CVE-2018-12180"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1:1.2-5.el7]\n- Update spec file to remove 'modprobe kvm-intel' and remove --enable-kvm arg to ovmf_vars_generator so qemu will not require kvm kernel module. (Aaron Young) \n- Update spec file to modprobe kvm_intel module prior to running qemu to enroll default keys. (Aaron Young) \n- Enroll Oracle cert/key for OL secureboot support. (Aaron Young)\n\n[1:1.2-2.el7]\n- Change Image.c image load error to DEBUG_WARN from DEBUG_ERROR since it is normal for some images to fail to load if the associated hardware is not present. Such is the case with Ramfb. (Aaron Young)  [Orabug: 28868674]\n- Fix AAVMF build. Pull in OpenSSL code (as is done for x86_64) (Aaron Young) \n- Update AAVMF change log for version 1.2 (Aaron Young)\n\n[1:1.2-1.el7]\n- Update spec files and OVMF change log to version 1.2","id":"ELSA-2019-4785","ovalId":"oval:com.oracle.elsa:def:20194785","source":"oracle_linux","title":"ELSA-2019-4785:  edk2 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2019-4785.html"}