An update for edk2 is now available for openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3419 Final 1.0 1.0 2026-08-20 Initial 2026-08-20 2026-08-20 openEuler SA Tool V1.0 2026-08-20 edk2 security update An update for edk2 is now available for openEuler-24.03-LTS-SP1 EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es): Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key.(CVE-2024-41996) An update for edk2 is now available for openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High edk2 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3419 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-41996 https://nvd.nist.gov/vuln/detail/CVE-2024-41996 openEuler-24.03-LTS-SP1 edk2-202308-43.oe2403sp1.src.rpm edk2-aarch64-202308-43.oe2403sp1.noarch.rpm edk2-help-202308-43.oe2403sp1.noarch.rpm edk2-ovmf-202308-43.oe2403sp1.noarch.rpm python3-edk2-devel-202308-43.oe2403sp1.noarch.rpm edk2-debuginfo-202308-43.oe2403sp1.aarch64.rpm edk2-debugsource-202308-43.oe2403sp1.aarch64.rpm edk2-devel-202308-43.oe2403sp1.aarch64.rpm edk2-debuginfo-202308-43.oe2403sp1.x86_64.rpm edk2-debugsource-202308-43.oe2403sp1.x86_64.rpm edk2-devel-202308-43.oe2403sp1.x86_64.rpm Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. 2026-08-20 CVE-2024-41996 openEuler-24.03-LTS-SP1 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H edk2 security update 2026-08-20 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3419