RockyLinux 10 : grub2 (RLSA-2025:16154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16154 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. CVE-2024-45776 grub2: fs/ufs: OOB write in the heap CVE-2024-45781 grub2:...

RLSA-2025:6990 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: reader/jpe...

EUVD-2025-5596

Malicious code in bioql PyPI...

EUVD-2025-5597

Malicious code in bioql PyPI...

EUVD-2025-5590

Malicious code in bioql PyPI...

EUVD-2023-24243

Malicious code in bioql PyPI...

EUVD-2024-54292

Malicious code in bioql PyPI...

EUVD-2023-54785

Malicious code in bioql PyPI...

EUVD-2024-53381

Malicious code in bioql PyPI...

EUVD-2022-43034

Malicious code in bioql PyPI...

EUVD-2025-14163

Malicious code in bioql PyPI...

EUVD-2025-5580

Malicious code in bioql PyPI...

EUVD-2024-53380

Malicious code in bioql PyPI...

EUVD-2023-53896

Malicious code in bioql PyPI...

RLSA-2025:16154 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

NewStart CGSL MAIN 6.06 : grub2 Multiple Vulnerabilities (NS-SA-2025-0221)

The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by multiple vulnerabilities: - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a...

CLSA-2025-1758891628 grub2: Fix of CVE-2014-4607

CVE-2014-4607: minilzo: Update to minilzo-2.08 to fix integer overflow...

grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled

A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory...

grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks

A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grubmalloc may be called with a smaller...

grub2: command/gpg: Use-after-free due to hooks not being removed on module unload

A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an attacker to force grub2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If...