Important Photon OS Security Update - PHSA-2026-5.0-90-0742

Updates of 'grub2' packages of Photon OS have been released...

MiracleLinux 9 : grub2-2.06-114.el9_7.ML.1 (AXSA:2025-11476:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11476:11 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. CVE-2024-45777 Tenable has extracted the preceding description block directly from the...

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-61663 affecting package grub2 for versions less than 2.06-26

CVE-2025-61663 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-61664 affecting package grub2 for versions less than 2.06-26

CVE-2025-61664 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-61662 affecting package grub2 for versions less than 2.06-26

CVE-2025-61662 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2021-20233 affecting package grub2 for versions less than 2.06-26

CVE-2021-20233 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2020-7205

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

CVE-2020-10565

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command read or write by a guest through a grub2.cfg file. This allows an untrusted guest to perform arbitrary read or write operations in the context of the grub-bhy...

CVE-2020-10566

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow...

CVE-2025-61663 affecting package grub2 for versions less than 2.06-16

CVE-2025-61663 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2025-61662 affecting package grub2 for versions less than 2.06-16

CVE-2025-61662 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2025-61661 affecting package grub2 for versions less than 2.06-16

CVE-2025-61661 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

Amazon Linux 2 : grub2, --advisory ALAS2-2025-3107 (ALAS-2025-3107)

The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3107 advisory. A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service DoS...

SUSE SLES16: grub2 / grub2-arm64-efi / grub2-common / grub2-i386-pc / etc (SUSE-SU-2025:21212-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:21212-1 advisory. Changes in grub2: - CVE-2025-54771: Fixed grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-54770:...

openSUSE 16 Security Update : grub2 (openSUSE-SU-2025:20163-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20163-1 advisory. Changes in grub2: - CVE-2025-54771: Fixed grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-54770: Fixed missing...

Security update for grub2 (important)

openSUSE security update: security update for grub2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025:20163-1 Rating: important References: bsc1234959 bsc1245636 bsc1245738 bsc1245953 bsc1246231 bsc1247242 bsc1249088 bsc1249385 bsc1252930 bsc1252931...

SUSE-SU-2025:21223-1 Security update for grub2

This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-54770: Fixed missing unregister call for netsetvlan command may lead to use-after-free bsc1252930 - CVE-2025-61662: Fixed...

SUSE-SU-2025:21212-1 Security update for grub2

This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-54770: Fixed missing unregister call for netsetvlan command may lead to use-after-free bsc1252930 - CVE-2025-61662: Fixed...