Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:5297

Опубликовано: 07 мая 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: edk2 security update

EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.

Security Fix(es):

  • edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)

  • edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)

  • edk2: Temporary DoS vulnerability (CVE-2024-1298)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
edk2-ovmfnoarch13.el8_10.2edk2-ovmf-20220126gitbb1bba3d77-13.el8_10.2.noarch.rpm

Показывать по

Связанные уязвимости

oracle-oval
10 месяцев назад

ELSA-2024-5297: edk2 security update (MODERATE)

oracle-oval
8 месяцев назад

ELSA-2024-28600: edk2 security update (MODERATE)

oracle-oval
7 месяцев назад

ELSA-2024-12842: edk2 security update (MODERATE)

oracle-oval
8 месяцев назад

ELSA-2024-12795: edk2 security update (MODERATE)

oracle-oval
8 месяцев назад

ELSA-2024-12794: edk2 security update (MODERATE)