RHSA-2024:10272: Moderate: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:10272?
The severity of RHSA-2024:10272 is classified as moderate.
How do I fix RHSA-2024:10272?
To fix RHSA-2024:10272, update the edk2 and edk2-ovmf packages to version 20200602gitca407c7246bf-4.el8_4.7.
What vulnerability does RHSA-2024:10272 address?
RHSA-2024:10272 addresses an integer overflow vulnerability in PeCoffLoaderRelocateImage, identified by CVE-2024-38796.
Which systems are affected by RHSA-2024:10272?
RHSA-2024:10272 affects Red Hat Enterprise Linux Server - AUS, Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions, and Red Hat Enterprise Linux Server - TUS.
What is the recommended action for users of affected systems regarding RHSA-2024:10272?
Users of affected systems should apply the recommended updates as soon as possible to mitigate the risks associated with the vulnerability.