RHSA-2024:11194: Moderate: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): edk2: Integer overflows in PeCoffLoaderRelocateImage (CVE-2024-38796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:11194?
The severity of RHSA-2024:11194 is classified as moderate.
How do I fix RHSA-2024:11194?
To fix RHSA-2024:11194, update the edk2 and edk2-ovmf packages to version 20220126gitbb1bba3d77-2.el8_6.7.
What is CVE-2024-38796 related to RHSA-2024:11194?
CVE-2024-38796 is an integer overflow vulnerability in the PeCoffLoaderRelocateImage function present in edk2.
Which Red Hat products are affected by RHSA-2024:11194?
RHSA-2024:11194 affects Red Hat Enterprise Linux Server - AUS, TUS, and Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions.
When was the advisory RHSA-2024:11194 released?
The advisory RHSA-2024:11194 was released on October 11, 2024.