Описание
Moderate: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM.
Security Fix(es):
-
edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)
-
edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)
-
edk2: Temporary DoS vulnerability (CVE-2024-1298)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Затронутые продукты
Rocky Linux 8
Связанные CVE
Исправления
- Red Hat - 2258703
- Red Hat - 2258706
- Red Hat - 2284243