Moderate: edk2 security and bug fix update

2023-11-1400:00:00

errata.almalinux.org

edk2

uefi support

security update

bug fix

cve-2019-14560

qemu

kvm

almalinux

release notes

6.8 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() (CVE-2019-14560)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchedk2-aarch64< 20220126gitbb1bba3d77-6.el8edk2-aarch64-20220126gitbb1bba3d77-6.el8.noarch.rpm
almalinux8noarchedk2-ovmf< 20220126gitbb1bba3d77-6.el8edk2-ovmf-20220126gitbb1bba3d77-6.el8.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	edk2-aarch64	< 20220126gitbb1bba3d77-6.el8	edk2-aarch64-20220126gitbb1bba3d77-6.el8.noarch.rpm
almalinux	8	noarch	edk2-ovmf	< 20220126gitbb1bba3d77-6.el8	edk2-ovmf-20220126gitbb1bba3d77-6.el8.noarch.rpm