elsa-2024-11219

oracle_linux
Description

[20240524-6.0.1.el9_5.3] - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631] - Resolves: RHEL-58631 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater) - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230] - Resolves: RHEL-66230 ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6]) - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725] - Resolves: RHEL-65725 ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6]) - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248] - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248] - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833] - Resolves: RHEL-56248 (507x510 display resolution should not crash the firmware [edk2,rhel-9.6]) - Resolves: RHEL-60833 (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2024-38796"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[20240524-6.0.1.el9_5.3]\n- edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]\n- Resolves: RHEL-58631\n  ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)\n- edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]\n- Resolves: RHEL-66230\n  ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])\n- edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]\n- Resolves: RHEL-65725\n  ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])\n- edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]\n- edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]\n- edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]\n- Resolves: RHEL-56248\n  (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])\n- Resolves: RHEL-60833\n  (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])",
  "id": "ELSA-2024-11219",
  "ovalId": "oval:com.oracle.elsa:def:202411219",
  "source": "oracle_linux",
  "title": "ELSA-2024-11219:  edk2:20240524 security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2024-11219.html"
}
View JSON API Download JSON