[CLSA-2026:1794443942] ovmf: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-11-12 19:19:25 UTC
Description:
- CVE-2021-38578: integer underflow in SmmEntryPoint CommBuffer size check - CVE-2026-97631: PXE ICMP error buffer overflow
CVEs fixed:
Updated packages:
  • AAVMF-20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch.rpm
    sha:da89547e7d4b2bc6c5ca5c65649f9a6eda18e6266f03fda5fbbb4a6e0a465216
  • OVMF-20180508-6.gitee3198e672e2.el7.tuxcare.els2.noarch.rpm
    sha:95fd39557d1144824e5bfd4a2f76435a07c4cdde3f85aa3d9ed76f8307353483
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.