Package: qemu-uefi-aarch64 (202605-3.1) UEFI QEMU rom image (AArch64) This package contains the UEFI rom image (AArch64) for QEMU cortex-a57
virt board.
Download qemu-uefi-aarch64 Package file paths (23) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/share/licenses/qemu-uefi-aarch64 /usr/share/licenses/qemu-uefi-aarch64/License.txt /usr/share/qemu /usr/share/qemu/aavmf-aarch64-code.bin /usr/share/qemu/aavmf-aarch64-code.qcow2 /usr/share/qemu/aavmf-aarch64-ms-code.bin /usr/share/qemu/aavmf-aarch64-ms-code.qcow2 /usr/share/qemu/aavmf-aarch64-ms-vars.bin /usr/share/qemu/aavmf-aarch64-ms-vars.qcow2 /usr/share/qemu/aavmf-aarch64-opensuse-code.bin /usr/share/qemu/aavmf-aarch64-opensuse-code.qcow2 /usr/share/qemu/aavmf-aarch64-opensuse-vars.bin /usr/share/qemu/aavmf-aarch64-opensuse-vars.qcow2 /usr/share/qemu/aavmf-aarch64-suse-code.bin /usr/share/qemu/aavmf-aarch64-suse-code.qcow2 /usr/share/qemu/aavmf-aarch64-suse-vars.bin /usr/share/qemu/aavmf-aarch64-suse-vars.qcow2 /usr/share/qemu/aavmf-aarch64-vars.bin /usr/share/qemu/aavmf-aarch64-vars.qcow2 /usr/share/qemu/firmware /usr/share/qemu/firmware/60-aavmf-aarch64-qcow2.json /usr/share/qemu/firmware/61-aavmf-aarch64.json /usr/share/qemu/qemu-uefi-aarch64.bin Field source: openSUSE Tumbleweed OSS
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-25833 ] Published: Apr 1, 2026, 12:00:00 AM UTC
Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function
High(7.5) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202602-9.1
Version impact unknown
nvd · ovmf · opensuse · tumbleweed
[CVE-2025-2296 ] Published: Dec 9, 2025, 3:00:48 PM UTC
edk2: CVE-2025-2296
High(8.4) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202602-6.1
Version impact unknown
dsa · ovmf · opensuse · tumbleweed
[CVE-2025-59438 ] Published: Oct 21, 2025, 12:00:00 AM UTC
mbedtls: CVE-2025-59438
Medium(5.5) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202602-5.1
Version impact unknown
dsa · ovmf · opensuse · tumbleweed
[CVE-2022-36763 ] Published: Jan 9, 2024, 4:15:00 PM UTC
edk2: CVE-2022-36763
High(7) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202308-9.1
Version impact unknown
dsa · ovmf · opensuse · tumbleweed
[CVE-2024-38797 ] Published: Jan 1, 2024, 12:00:00 AM UTC
EDK II vulnerabilities
Medium(4.6) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202505-2.1
Version impact unknown
usn · ovmf · opensuse · tumbleweed
[CVE-2019-14560 ] Published: Feb 28, 2023, 7:15:00 PM UTC
Security update for ovmf
Medium(6.1) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202308-3.1
Version impact unknown
pypi · ovmf · opensuse · tumbleweed
[CVE-2021-38578 ] Published: Jan 1, 2021, 12:00:00 AM UTC
edk2: CVE-2021-38578
High(8.2) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202211-1.1
Version impact unknown
dsa · ovmf · opensuse · tumbleweed
[CVE-2017-5731 ] Published: Dec 17, 2018, 3:07:48 PM UTC
ovmf-202105-3.4 on GA media
High(7.8) Unknown Details (1) 202605-3.1 · noarch · tumbleweed
Unknown · Fixed: 202105-3.4
Version impact unknown
pypi · ovmf · opensuse · tumbleweed
Last synced: Oct 28, 2026, 2:25:00 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
202605-3.1 / noarch Observed Sep 1, 2026 sha512 605eb053859e…49b7417aSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha512): 605eb053859e8d8e2c9b317f4e8ac4cdbcbe93e620aebacf191a943c548ca24d209499882f770d8b51a4e6a7ca51a144b8ce804ee162336417ad26ef49b7417a
Field source: openSUSE Tumbleweed OSS
