Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Fedora 39 Security Advisory: FEDORA-2024-69933b0732 DoS in efifs

fedora
Calendar Grey June 11, 2024
Scroller Fedora
Fedora enhances efifs with crucial security patch addressing DoS vulnerability in edk2. Update now to ensure optimal security.
Update bundled edk2 to 20240524 (#2284243)

Summary

Free software EFI/UEFI standalone file system drivers, based on the GRUB 2.0

read-only drivers: AFFS (Amiga Fast FileSystem), BFS (BeOS FileSystem), btrfs,

exFAT, ext2/ext3/ext4, F2FS (experimental), HFS and HFS+ (Mac OS, including

the compression support), ISO9660, JFS (Journaled FileSystem), nilfs2, NTFS

(including compression support), ReiserFS, SFS (Amiga Smart FileSystem), UDF,

UFS/FFS, UFS2/FFS2, XFS, ZFS and more.

Update Information:

Update bundled edk2 to 20240524 (#2284243)

Change Log

* Sun Jun 2 2024 Robert Scheck 1.9-6 - Update bundled edk2 to 20240524 (#2284243) * Wed Jan 24 2024 Fedora Release Engineering - 1.9-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering - 1.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

References


[ 1 ] Bug #2284243 - CVE-2024-1298 edk2: Temporary DoS vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=2284243

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-69933b0732' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: efifs
Product: Fedora 39
Version: 1.9
Release: 6.fc39
Summary: Free software EFI/UEFI standalone file system drivers

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.