A buffer overflow flaw was found in the UEFI variable logic for redaiming
unused space (INTEL-TA-201410-001).

A buffer overflow flaw was found in the processing of the UEFI variable
named AuthVarKeyDatabase (INTEL-TA-201410-002).

Acknowledgements:

Red Hat would like to thank Intel for reporting these issues. Upstream
acknowledges Rafal Wojtczuk, Bromium and Corey Kallenberg, MITRE, as
the original reporters.