MGASA-2024-0095 Updated grub2 packages fix security vulnerabilities

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a...

Updated grub2 packages fix security vulnerabilities

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a...

CLSA-2024-1711036571 Update of grub2

Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel...

CLSA-2024-1711036007 shim: Fix of 4 CVEs

Make this package installable only on a system having Cloudlinux signed components: grub2 and kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves:...

EulerOS Virtualization 2.11.0 : grub2 (EulerOS-SA-2024-1427)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.1 : grub2 (EulerOS-SA-2024-1399)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1427)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : grub2 (2024-c1fabee30e)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c1fabee30e advisory. Security fix for CVE-2024-1048 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

CVE-2021-3981 affecting package grub2 for versions less than 2.06-14

CVE-2021-3981 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2022-28733 affecting package grub2 for versions less than 2.06-14

CVE-2022-28733 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2021-3696 affecting package grub2 for versions less than 2.06-14

CVE-2021-3696 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2021-3695 affecting package grub2 for versions less than 2.06-14

CVE-2021-3695 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2022-3775 affecting package grub2 for versions less than 2.06-14

CVE-2022-3775 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2022-28735 affecting package grub2 for versions less than 2.06-14

CVE-2022-28735 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2022-28736 affecting package grub2 for versions less than 2.06-14

CVE-2022-28736 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2022-2601 affecting package grub2 for versions less than 2.06-14

CVE-2022-2601 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2021-3697 affecting package grub2 for versions less than 2.06-14

CVE-2021-3697 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

CVE-2022-28734 affecting package grub2 for versions less than 2.06-14

CVE-2022-28734 affecting package grub2 for versions less than 2.06-14. A patched version of the package is available...

Low: grub2

Issue Overview: A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporar...