Description:
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.
Security Fix(es):
* EDK2: integer overflow in CreateHob() could lead to HOB OOB R/W (CVE-2022-36765)
* edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)
* edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture |
Package |
Checksum |
aarch64 |
edk2-tools-20231122-6.el9_4.2.aarch64.rpm |
a37b1abcd086ada56a23b2fc5caf23952b18b9a7dbe8c5da55a161f9834fff01 |
noarch |
edk2-ovmf-20231122-6.el9_4.2.noarch.rpm |
07ab65898528b14bd133dcc29037207a0575b113ba24d06b8ec9fb9a2740a4a8 |
noarch |
edk2-aarch64-20231122-6.el9_4.2.noarch.rpm |
9a5248396531529aa0a93ef15d4a30176a9c18dced35b724cbc45a4b1e0b3784 |
noarch |
edk2-tools-doc-20231122-6.el9_4.2.noarch.rpm |
c756059b460fd70f02088389aa5bc06026f457801491df61042de96189563f25 |
x86_64 |
edk2-tools-20231122-6.el9_4.2.x86_64.rpm |
dd4851b48637abc2e8d2482693c6be271d3599f20410b809ac733744a5a5905f |