Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Oracle Linux 8 ELSA-2024-1063 Important: edk2 Buffer Overflow Patch

oracle
Calendar Grey March 7, 2024
Oracle Linux Logo Esm H88
Crucial security patch released for Oracle Linux 8 tackling critical memory corruption flaws in the edk2 component.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[20220126gitbb1bba3d77-6.el8_9.6] - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842] - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842] - Resolves: RHEL-21842 (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-8]) - Resolves: RHEL-21850 (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-8])

Topics%20covered

Topics Covered

security advisory network security buffer overflow Oracle Linux edk2

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//edk2-20220126gitbb1bba3d77-6.el8_9.6.src.rpm

x86_64

edk2-ovmf-20220126gitbb1bba3d77-6.el8_9.6.noarch.rpm

aarch64

edk2-aarch64-20220126gitbb1bba3d77-6.el8_9.6.noarch.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-45230 CVE-2023-45234

Topics%20covered

Topics Covered

security advisory network security buffer overflow Oracle Linux edk2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here