ELSA-2025-20669 Affecting edk2-ovmf package, versions <1:20250905-4.el8


Severity

Recommended
high

Based on Oracle Linux security rating.

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ORACLE8-EDK2OVMF-14173610
  • published3 Dec 2025

Introduced: 3 Dec 2025

New CVE NOT AVAILABLE

How to fix?

Upgrade Oracle:8 edk2-ovmf to version 1:20250905-4.el8 or higher.
This issue was patched in ELSA-2025-20669.

NVD Description

This vulnerability has not been analyzed by NVD yet.