RHSA-2024:1013: Important: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1013?
The severity of RHSA-2024:1013 is classified as important.
How do I fix RHSA-2024:1013?
To fix RHSA-2024:1013, update the affected packages to version 20200602gitca407c7246bf-4.el8_4.4.
What vulnerability does RHSA-2024:1013 address?
RHSA-2024:1013 addresses a buffer overflow vulnerability in the DHCPv6 client via a long Server ID option (CVE-2023-45230).
Which packages are affected by RHSA-2024:1013?
The affected packages are edk2 and edk2-ovmf in version up to 20200602gitca407c7246bf-4.el8_4.4.
Is RHSA-2024:1013 applicable to all Red Hat products?
RHSA-2024:1013 is applicable to specific Red Hat Enterprise Linux products, including server variants.