RLSA-2026:2776

Synopsis

Moderate: edk2 security update

Description

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

* openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2396054

CVEs

CVE-2025-9230

Affected packages

Rocky Linux 9 x86_64 - AppStream

edk2-0:20241117-4.el9_7.3.src.rpm edk2-ovmf-0:20241117-4.el9_7.3.noarch.rpm

Rocky Linux 9 aarch64 - AppStream

edk2-0:20241117-4.el9_7.3.src.rpm edk2-aarch64-0:20241117-4.el9_7.3.noarch.rpm

Rocky Linux 9 s390x - AppStream

edk2-0:20241117-4.el9_7.3.src.rpm

Rocky Linux 9 ppc64le - AppStream

edk2-0:20241117-4.el9_7.3.src.rpm

Rocky Linux 9 x86_64 - CRB

edk2-aarch64-0:20241117-4.el9_7.3.noarch.rpm edk2-debugsource-0:20241117-4.el9_7.3.x86_64.rpm edk2-tools-0:20241117-4.el9_7.3.x86_64.rpm edk2-tools-debuginfo-0:20241117-4.el9_7.3.x86_64.rpm edk2-tools-doc-0:20241117-4.el9_7.3.noarch.rpm

Rocky Linux 9 s390x - CRB

edk2-aarch64-0:20241117-4.el9_7.3.noarch.rpm edk2-ovmf-0:20241117-4.el9_7.3.noarch.rpm

Rocky Linux 9 ppc64le - CRB

edk2-aarch64-0:20241117-4.el9_7.3.noarch.rpm edk2-ovmf-0:20241117-4.el9_7.3.noarch.rpm

Rocky Linux 9 aarch64 - CRB

edk2-debugsource-0:20241117-4.el9_7.3.aarch64.rpm edk2-ovmf-0:20241117-4.el9_7.3.noarch.rpm edk2-tools-0:20241117-4.el9_7.3.aarch64.rpm edk2-tools-debuginfo-0:20241117-4.el9_7.3.aarch64.rpm edk2-tools-doc-0:20241117-4.el9_7.3.noarch.rpm