RHSA-2024:8104: Moderate: edk2 security update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): edk2: Infinite loop when parsing unknown options in the Destination Options header (CVE-2023-45232) edk2: Infinite loop when parsing a PadN option in the Destination Options header (CVE-2023-45233) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:8104?
The severity of RHSA-2024:8104 is considered moderate due to the potential of an infinite loop when parsing unknown options.
How do I fix RHSA-2024:8104?
To fix RHSA-2024:8104, update the edk2 package to version 20220126gitbb1bba3d77-4.el8_8.6 or newer.
Which systems are affected by RHSA-2024:8104?
RHSA-2024:8104 affects Red Hat Enterprise Linux for x86_64 and ARM 64, including systems with Update Services for SAP Solutions and Extended Update Support.
What components are involved in the RHSA-2024:8104 vulnerability?
The components involved in RHSA-2024:8104 include the edk2 and edk2-ovmf packages used for UEFI support in virtual machines.
Is there a specific workaround for RHSA-2024:8104?
There are no specific workarounds for RHSA-2024:8104; the recommended approach is to apply the patch by updating the affected packages.