[ALSA-2026:39297] Moderate: edk2 security, bug fix, and enhancement update
Type:
security
Severity:
moderate
Release date:
2026-08-13
Description:
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) * openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) Bug Fix(es) and Enhancement(s): * edk2/x64: re-enable legacy kernel loader [almalinux-10.2.z] (JIRA:AlmaLinux-182421) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 edk2-tools-20251114-5.el10_2.2.aarch64.rpm af98aa34697709248c2ce41cc93dcec5f399d90fa4c290d848a224fc86423431
noarch edk2-ovmf-20251114-5.el10_2.2.noarch.rpm 15c2aa72562324380757fa4e4264b27e8d215a4ead60505448e6556096472823
noarch edk2-tools-doc-20251114-5.el10_2.2.noarch.rpm 479f6e316a2a3e78e325be7c98c7571b7ca84ed1f03ce57d9fcd46506cb67901
noarch edk2-aarch64-20251114-5.el10_2.2.noarch.rpm 5ebf1586f73cdbb4f6af4b6fac8634e21e96c81337572dd52d11cb6022b477ab
x86_64 edk2-tools-20251114-5.el10_2.2.x86_64.rpm a079d6dc8d92dbe7a20cd657b9570e486d002f3b0acc285fc4edae69273d3d49
x86_64_v2 edk2-tools-20251114-5.el10_2.2.x86_64_v2.rpm 03e79475670413dd27672a9a86d9b4bcec767f441f9c90f45a1f0ee02ce89a7a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.