{"cves":["CVE-2024-38796"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[20240524-6.0.1.el9_5.3]\n- edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]\n- Resolves: RHEL-58631\n  ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)\n- edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]\n- Resolves: RHEL-66230\n  ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])\n- edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]\n- Resolves: RHEL-65725\n  ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])\n- edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]\n- edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]\n- edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]\n- Resolves: RHEL-56248\n  (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])\n- Resolves: RHEL-60833\n  (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])","id":"ELSA-2024-11219","ovalId":"oval:com.oracle.elsa:def:202411219","source":"oracle_linux","title":"ELSA-2024-11219:  edk2:20240524 security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2024-11219.html"}