RLSA-2024:8935

Synopsis

Moderate: edk2 security update

Description

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* openssl: Possible denial of service in X.509 name checks (CVE-2024-6119)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2306158

CVEs

CVE-2024-6119

Affected packages

Rocky Linux 9 x86_64 - CRB

edk2-0:20231122-6.el9_4.4.src.rpm edk2-aarch64-0:20231122-6.el9_4.4.noarch.rpm edk2-tools-0:20231122-6.el9_4.4.x86_64.rpm edk2-tools-debuginfo-0:20231122-6.el9_4.4.x86_64.rpm edk2-tools-doc-0:20231122-6.el9_4.4.noarch.rpm

Rocky Linux 9 x86_64 - AppStream

edk2-0:20231122-6.el9_4.4.src.rpm edk2-ovmf-0:20231122-6.el9_4.4.noarch.rpm

Rocky Linux 9 aarch64 - AppStream

edk2-0:20231122-6.el9_4.4.src.rpm edk2-aarch64-0:20231122-6.el9_4.4.noarch.rpm

Rocky Linux 9 aarch64 - CRB

edk2-0:20231122-6.el9_4.4.src.rpm edk2-ovmf-0:20231122-6.el9_4.4.noarch.rpm edk2-tools-0:20231122-6.el9_4.4.aarch64.rpm edk2-tools-debuginfo-0:20231122-6.el9_4.4.aarch64.rpm edk2-tools-doc-0:20231122-6.el9_4.4.noarch.rpm

Rocky Linux 9 s390x - AppStream

edk2-0:20231122-6.el9_4.4.src.rpm

Rocky Linux 9 s390x - CRB

edk2-0:20231122-6.el9_4.4.src.rpm edk2-aarch64-0:20231122-6.el9_4.4.noarch.rpm edk2-ovmf-0:20231122-6.el9_4.4.noarch.rpm

Rocky Linux 9 ppc64le - AppStream

edk2-0:20231122-6.el9_4.4.src.rpm

Rocky Linux 9 ppc64le - CRB

edk2-0:20231122-6.el9_4.4.src.rpm edk2-aarch64-0:20231122-6.el9_4.4.noarch.rpm edk2-ovmf-0:20231122-6.el9_4.4.noarch.rpm