First published: Wed Apr 26 2023(Updated: )
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. <br>Security Fix(es):<br><li> openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/edk2 | <20220126gitbb1bba3d77-3.el9_0.2 | 20220126gitbb1bba3d77-3.el9_0.2 |
redhat/edk2-ovmf | <20220126gitbb1bba3d77-3.el9_0.2 | 20220126gitbb1bba3d77-3.el9_0.2 |
redhat/edk2-aarch64 | <20220126gitbb1bba3d77-3.el9_0.2 | 20220126gitbb1bba3d77-3.el9_0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2023:2022 is classified as important due to the security vulnerabilities it addresses.
To fix RHSA-2023:2022, update the affected packages to version 20220126gitbb1bba3d77-3.el9_0.2 or later.
RHSA-2023:2022 addresses a type confusion issue in X.400 address type within the X.509 GeneralName, tracked as CVE-2023-0286.
The packages affected by RHSA-2023:2022 include edk2, edk2-ovmf, and edk2-aarch64 up to version 20220126gitbb1bba3d77-3.el9_0.2.
Yes, RHSA-2023:2022 has an official advisory that provides details about the vulnerability and the necessary updates.