RLSA-2026:18465

Security

Mirrored from RHSA-2026:18465

Issued at: 2026-05-29

Updated at: 2026-05-29

Synopsis

Important: edk2 security update

Description

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* edk2: EDK2: Improper Input Validation allows arbitrary command execution (CVE-2025-2296)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.

Affected products

Rocky Linux 10 aarch64

Rocky Linux 10 ppc64le

Rocky Linux 10 riscv64

Rocky Linux 10 s390x

Rocky Linux 10 x86_64

Fixes

2420637

CVEs

CVE-2025-2296

Affected packages

Rocky Linux 10 aarch64 - CRB

edk2-debugsource-0:20251114-5.el10.aarch64.rpm

edk2-tools-doc-0:20251114-5.el10.noarch.rpm

edk2-ovmf-0:20251114-5.el10.noarch.rpm

edk2-tools-debuginfo-0:20251114-5.el10.aarch64.rpm

edk2-tools-0:20251114-5.el10.aarch64.rpm