ELBA-2024-8854

ELBA-2024-8854 - grub2 bug fix update

Type:	BUG
Severity:	NA
Release Date:	2024-11-06

Description

[2.02-158.0.1]
- Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
- Restore correct SBAT entries
- Replaced bugzilla.oracle.com references [Orabug: 35475894]
- efinet: Close and reopen card on failure [Orabug: 35126950]
- Fix CVE-2022-3775 [Orabug: 34867710]
- Bump SBAT metadata for grub to 3 [Orabug: 34871758]
- Enable signing on aarch64
- Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
- Enable back btrfs module by default [Orabug: 34377188]
- Backport upstream SNP protocol fixes [Orabug: 34195100]
- Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
- enable multiboot2 [Orabug: 34285558]
- backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
- backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
- Backport some better script logic for BTRFS support [Orabug: 32448171]
- Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
- Update Oracle SBAT data [Orabug: 32670033]
- Use new signing certificate [Orabug: 32670033]
- Fix various coverity issues [Orabug: 32530657]
- Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
- Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
- honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
- set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
- Update upstream references [Orabug: 26388226]
- Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
- fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
- Fix comparison in patch for 18504756
- Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.02-158]
- grub-mkconfig.in: turn off executable owner bit
- Resolves: #RHEL-58835

[2.02-157]
- 20-grub-install: fix SELinux security type context for BLS
- Resolves: #RHEL-4395

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	grub2-2.02-158.0.1.el8_10.src.rpm	a274fcc858354101e5cb658217f80aab	-	ol8_aarch64_baseos_latest
	grub2-2.02-158.0.1.el8_10.src.rpm	a274fcc858354101e5cb658217f80aab	-	ol8_aarch64_u10_baseos_patch
	grub2-common-2.02-158.0.1.el8_10.noarch.rpm	aaab98d3cf217b734fedb93aca5e2d81	-	ol8_aarch64_baseos_latest
	grub2-common-2.02-158.0.1.el8_10.noarch.rpm	aaab98d3cf217b734fedb93aca5e2d81	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-aa64-2.02-158.0.1.el8_10.aarch64.rpm	5f438d4e25c6c80cd80116e40c419c91	-	ol8_aarch64_baseos_latest
	grub2-efi-aa64-2.02-158.0.1.el8_10.aarch64.rpm	5f438d4e25c6c80cd80116e40c419c91	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-aa64-cdboot-2.02-158.0.1.el8_10.aarch64.rpm	946ac012f154a3ad901ce36025d2a262	-	ol8_aarch64_baseos_latest
	grub2-efi-aa64-cdboot-2.02-158.0.1.el8_10.aarch64.rpm	946ac012f154a3ad901ce36025d2a262	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-aa64-modules-2.02-158.0.1.el8_10.noarch.rpm	7b4f012d9a8000444bf0e784422b5897	-	ol8_aarch64_baseos_latest
	grub2-efi-aa64-modules-2.02-158.0.1.el8_10.noarch.rpm	7b4f012d9a8000444bf0e784422b5897	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-ia32-modules-2.02-158.0.1.el8_10.noarch.rpm	4334f3dd6d9022d787c3992d167396fe	-	ol8_aarch64_baseos_latest
	grub2-efi-ia32-modules-2.02-158.0.1.el8_10.noarch.rpm	4334f3dd6d9022d787c3992d167396fe	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-x64-modules-2.02-158.0.1.el8_10.noarch.rpm	8b68aa7a6e51ce45642de2ed23d966f7	-	ol8_aarch64_baseos_latest
	grub2-efi-x64-modules-2.02-158.0.1.el8_10.noarch.rpm	8b68aa7a6e51ce45642de2ed23d966f7	-	ol8_aarch64_u10_baseos_patch
	grub2-pc-modules-2.02-158.0.1.el8_10.noarch.rpm	923c8a5d12e1445678f1afaca8a68920	-	ol8_aarch64_baseos_latest
	grub2-pc-modules-2.02-158.0.1.el8_10.noarch.rpm	923c8a5d12e1445678f1afaca8a68920	-	ol8_aarch64_u10_baseos_patch
	grub2-tools-2.02-158.0.1.el8_10.aarch64.rpm	56ef40f85f8f900356c9df30f7d26082	-	ol8_aarch64_baseos_latest
	grub2-tools-2.02-158.0.1.el8_10.aarch64.rpm	56ef40f85f8f900356c9df30f7d26082	-	ol8_aarch64_u10_baseos_patch
	grub2-tools-extra-2.02-158.0.1.el8_10.aarch64.rpm	766754d8b75b9ebef93b9d283d113d6a	-	ol8_aarch64_baseos_latest
	grub2-tools-extra-2.02-158.0.1.el8_10.aarch64.rpm	766754d8b75b9ebef93b9d283d113d6a	-	ol8_aarch64_u10_baseos_patch
	grub2-tools-minimal-2.02-158.0.1.el8_10.aarch64.rpm	cbf86dd2bdb0c46b1df2a5d902aa4390	-	ol8_aarch64_baseos_latest
	grub2-tools-minimal-2.02-158.0.1.el8_10.aarch64.rpm	cbf86dd2bdb0c46b1df2a5d902aa4390	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	grub2-2.02-158.0.1.el8_10.src.rpm	a274fcc858354101e5cb658217f80aab	-	ol8_x86_64_baseos_latest
	grub2-2.02-158.0.1.el8_10.src.rpm	a274fcc858354101e5cb658217f80aab	-	ol8_x86_64_u10_baseos_patch
	grub2-common-2.02-158.0.1.el8_10.noarch.rpm	aaab98d3cf217b734fedb93aca5e2d81	-	ol8_x86_64_baseos_latest
	grub2-common-2.02-158.0.1.el8_10.noarch.rpm	aaab98d3cf217b734fedb93aca5e2d81	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-aa64-modules-2.02-158.0.1.el8_10.noarch.rpm	7b4f012d9a8000444bf0e784422b5897	-	ol8_x86_64_baseos_latest
	grub2-efi-aa64-modules-2.02-158.0.1.el8_10.noarch.rpm	7b4f012d9a8000444bf0e784422b5897	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-ia32-2.02-158.0.1.el8_10.x86_64.rpm	24ba48065dc2c416285bd219e7df939f	-	ol8_x86_64_baseos_latest
	grub2-efi-ia32-2.02-158.0.1.el8_10.x86_64.rpm	24ba48065dc2c416285bd219e7df939f	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-ia32-cdboot-2.02-158.0.1.el8_10.x86_64.rpm	87b4062f229367dad3fc578064b3d8a9	-	ol8_x86_64_baseos_latest
	grub2-efi-ia32-cdboot-2.02-158.0.1.el8_10.x86_64.rpm	87b4062f229367dad3fc578064b3d8a9	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-ia32-modules-2.02-158.0.1.el8_10.noarch.rpm	4334f3dd6d9022d787c3992d167396fe	-	ol8_x86_64_baseos_latest
	grub2-efi-ia32-modules-2.02-158.0.1.el8_10.noarch.rpm	4334f3dd6d9022d787c3992d167396fe	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-x64-2.02-158.0.1.el8_10.x86_64.rpm	fd1d60b7aa8bd3cbee36290c10fe739b	-	ol8_x86_64_baseos_latest
	grub2-efi-x64-2.02-158.0.1.el8_10.x86_64.rpm	fd1d60b7aa8bd3cbee36290c10fe739b	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-x64-cdboot-2.02-158.0.1.el8_10.x86_64.rpm	90fa95016cd213c0747e90e31f9c7e74	-	ol8_x86_64_baseos_latest
	grub2-efi-x64-cdboot-2.02-158.0.1.el8_10.x86_64.rpm	90fa95016cd213c0747e90e31f9c7e74	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-x64-modules-2.02-158.0.1.el8_10.noarch.rpm	8b68aa7a6e51ce45642de2ed23d966f7	-	ol8_x86_64_baseos_latest
	grub2-efi-x64-modules-2.02-158.0.1.el8_10.noarch.rpm	8b68aa7a6e51ce45642de2ed23d966f7	-	ol8_x86_64_u10_baseos_patch
	grub2-pc-2.02-158.0.1.el8_10.x86_64.rpm	62496f7156c508c49414995fbc6ecd3e	-	ol8_x86_64_baseos_latest
	grub2-pc-2.02-158.0.1.el8_10.x86_64.rpm	62496f7156c508c49414995fbc6ecd3e	-	ol8_x86_64_u10_baseos_patch
	grub2-pc-modules-2.02-158.0.1.el8_10.noarch.rpm	923c8a5d12e1445678f1afaca8a68920	-	ol8_x86_64_baseos_latest
	grub2-pc-modules-2.02-158.0.1.el8_10.noarch.rpm	923c8a5d12e1445678f1afaca8a68920	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-2.02-158.0.1.el8_10.x86_64.rpm	e6229b04746f491c4398d150735e975a	-	ol8_x86_64_baseos_latest
	grub2-tools-2.02-158.0.1.el8_10.x86_64.rpm	e6229b04746f491c4398d150735e975a	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-efi-2.02-158.0.1.el8_10.x86_64.rpm	acff0fee95ac1680ef12419d20e8ab0c	-	ol8_x86_64_baseos_latest
	grub2-tools-efi-2.02-158.0.1.el8_10.x86_64.rpm	acff0fee95ac1680ef12419d20e8ab0c	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-extra-2.02-158.0.1.el8_10.x86_64.rpm	730b2268849e01916128f45bb1301a80	-	ol8_x86_64_baseos_latest
	grub2-tools-extra-2.02-158.0.1.el8_10.x86_64.rpm	730b2268849e01916128f45bb1301a80	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-minimal-2.02-158.0.1.el8_10.x86_64.rpm	e6ac32148c4bad1744f8ec0369ad2180	-	ol8_x86_64_baseos_latest
	grub2-tools-minimal-2.02-158.0.1.el8_10.x86_64.rpm	e6ac32148c4bad1744f8ec0369ad2180	-	ol8_x86_64_u10_baseos_patch