First published: Wed Nov 06 2024(Updated: )
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. <br>Security Fix(es):<br><li> openssl: Possible denial of service in X.509 name checks (CVE-2024-6119)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support | ||
Red Hat Red Hat CodeReady Linux Builder for x86_64 | ||
Red Hat Red Hat Enterprise Linux for ARM 64 - 4 years of updates | ||
Red Hat Red Hat Enterprise Linux Server - AUS | ||
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support | ||
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support | ||
Red Hat Red Hat Enterprise Linux for x86_64 | ||
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support | ||
Red Hat Red Hat Enterprise Linux for ARM 64 | ||
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support | ||
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions | ||
Red Hat Red Hat CodeReady Linux Builder for Power, little endian | ||
Red Hat Red Hat CodeReady Linux Builder for ARM 64 | ||
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support | ||
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems | ||
redhat/edk2 | <20231122-6.el9_4.4 | 20231122-6.el9_4.4 |
redhat/edk2-ovmf | <20231122-6.el9_4.4 | 20231122-6.el9_4.4 |
redhat/edk2-aarch64 | <20231122-6.el9_4.4 | 20231122-6.el9_4.4 |
redhat/edk2-debugsource | <20231122-6.el9_4.4 | 20231122-6.el9_4.4 |
redhat/edk2-tools | <20231122-6.el9_4.4 | 20231122-6.el9_4.4 |
redhat/edk2-tools-debuginfo | <20231122-6.el9_4.4 | 20231122-6.el9_4.4 |
redhat/edk2-tools-doc | <20231122-6.el9_4.4 | 20231122-6.el9_4.4 |
redhat/edk2-debugsource | <20231122-6.el9_4.4.aa | 20231122-6.el9_4.4.aa |
redhat/edk2-tools | <20231122-6.el9_4.4.aa | 20231122-6.el9_4.4.aa |
redhat/edk2-tools-debuginfo | <20231122-6.el9_4.4.aa | 20231122-6.el9_4.4.aa |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2024:8935 is classified as moderate.
To fix RHSA-2024:8935, update to the latest version of the affected packages, specifically version 20231122-6.el9_4.4.
RHSA-2024:8935 addresses a possible denial of service in OpenSSL related to X.509 name checks, identified as CVE-2024-6119.
Affected products include various Red Hat CodeReady Linux Builder and Red Hat Enterprise Linux releases for different architectures.
Administrators are advised to apply the security update as soon as possible to mitigate potential risks.