ELBA-2025-8409

ELBA-2025-8409 - grub2 bug fix update

Type:BUG
Impact:NA
Release Date:2025-06-10

Description


[2.02-167.0.1]
- Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761]
- Fix typo in SBAT metadata [Orabug: 37693946]
- Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946]
- net/dns: Fix removal of DNS server [Orabug: 37539625]
- net/dns: Simplify error handling of recv_hook() function [Orabug: 37539625]
- net/dns: Add debugging messages in recv_hook() function [Orabug: 37539625]
- net/dns: Fix lookup error when no IPv6 is returned [Orabug: 37539625]
- Use correct os_name on OL
- Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
- Restore correct SBAT entries
- Replaced bugzilla.oracle.com references [Orabug: 35475894]
- efinet: Close and reopen card on failure [Orabug: 35126950]
- Fix CVE-2022-3775 [Orabug: 34867710]
- Bump SBAT metadata for grub to 3 [Orabug: 34871758]
- Enable signing on aarch64
- Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
- Enable back btrfs module by default [Orabug: 34377188]
- Backport upstream SNP protocol fixes [Orabug: 34195100]
- Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
- enable multiboot2 [Orabug: 34285558]
- backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
- backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
- Backport some better script logic for BTRFS support [Orabug: 32448171]
- Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
- Update Oracle SBAT data [Orabug: 32670033]
- Use new signing certificate [Orabug: 32670033]
- Fix various coverity issues [Orabug: 32530657]
- Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
- Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
- honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
- set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
- Update upstream references [Orabug: 26388226]
- Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
- fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
- Fix comparison in patch for 18504756
- Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.02-167]
- 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present
- Resolves: #RHEL-80168

[2.02-166]
- Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set
- Resolves: #RHEL-86913




Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) grub2-2.02-167.0.1.el8_10.src.rpm7d37fdb8922456b5fec9fa2a08d3418386c9b5440ab25cba43bf221aab28824b-ol8_aarch64_baseos_latest
grub2-2.02-167.0.1.el8_10.src.rpm7d37fdb8922456b5fec9fa2a08d3418386c9b5440ab25cba43bf221aab28824b-ol8_aarch64_u10_baseos_patch
grub2-common-2.02-167.0.1.el8_10.noarch.rpm28160b813ee3fb541e6b2804abf703c219f50911d8958130e5d6dbcdf179f8e2-ol8_aarch64_baseos_latest
grub2-common-2.02-167.0.1.el8_10.noarch.rpm28160b813ee3fb541e6b2804abf703c219f50911d8958130e5d6dbcdf179f8e2-ol8_aarch64_u10_baseos_patch
grub2-efi-aa64-2.02-167.0.1.el8_10.aarch64.rpm915243679e2f96e5e336549e2491c6a1accf98ef349206c8d027293a57efdc36-ol8_aarch64_baseos_latest
grub2-efi-aa64-2.02-167.0.1.el8_10.aarch64.rpm915243679e2f96e5e336549e2491c6a1accf98ef349206c8d027293a57efdc36-ol8_aarch64_u10_baseos_patch
grub2-efi-aa64-cdboot-2.02-167.0.1.el8_10.aarch64.rpm45b1097d3a0eb278deee78d76f63d24d81ef41177d6e8bd28d6def1a060fc46e-ol8_aarch64_baseos_latest
grub2-efi-aa64-cdboot-2.02-167.0.1.el8_10.aarch64.rpm45b1097d3a0eb278deee78d76f63d24d81ef41177d6e8bd28d6def1a060fc46e-ol8_aarch64_u10_baseos_patch
grub2-efi-aa64-modules-2.02-167.0.1.el8_10.noarch.rpmecf1e1ebb810635dfd4edd5142f8b2d17fd41cf4e6f92d07fe2d43106c7a395f-ol8_aarch64_baseos_latest
grub2-efi-aa64-modules-2.02-167.0.1.el8_10.noarch.rpmecf1e1ebb810635dfd4edd5142f8b2d17fd41cf4e6f92d07fe2d43106c7a395f-ol8_aarch64_u10_baseos_patch
grub2-efi-ia32-modules-2.02-167.0.1.el8_10.noarch.rpm58c5dbd9498eb2da78af0a6130cf8d962fa1b8eb7f1d3f7cbf24433f51a32de7-ol8_aarch64_baseos_latest
grub2-efi-ia32-modules-2.02-167.0.1.el8_10.noarch.rpm58c5dbd9498eb2da78af0a6130cf8d962fa1b8eb7f1d3f7cbf24433f51a32de7-ol8_aarch64_u10_baseos_patch
grub2-efi-x64-modules-2.02-167.0.1.el8_10.noarch.rpmd0614f9d2805e72be84969a069f52ebae24f5ac7da0c3e38f980acf1a6fc2801-ol8_aarch64_baseos_latest
grub2-efi-x64-modules-2.02-167.0.1.el8_10.noarch.rpmd0614f9d2805e72be84969a069f52ebae24f5ac7da0c3e38f980acf1a6fc2801-ol8_aarch64_u10_baseos_patch
grub2-pc-modules-2.02-167.0.1.el8_10.noarch.rpm334a8f96faa36720b72ecc10631b9bb3a57ac450c1ba382cb9f1322d96cc0018-ol8_aarch64_baseos_latest
grub2-pc-modules-2.02-167.0.1.el8_10.noarch.rpm334a8f96faa36720b72ecc10631b9bb3a57ac450c1ba382cb9f1322d96cc0018-ol8_aarch64_u10_baseos_patch
grub2-tools-2.02-167.0.1.el8_10.aarch64.rpm94e634844e04b1422be8fd6f9130cf2081073d8c72a6a92ef5424bd827e1f54e-ol8_aarch64_baseos_latest
grub2-tools-2.02-167.0.1.el8_10.aarch64.rpm94e634844e04b1422be8fd6f9130cf2081073d8c72a6a92ef5424bd827e1f54e-ol8_aarch64_u10_baseos_patch
grub2-tools-extra-2.02-167.0.1.el8_10.aarch64.rpmbfc86e52072495fcb4f8709c8503dfeea91e6ed4867446b11044060e9edeed54-ol8_aarch64_baseos_latest
grub2-tools-extra-2.02-167.0.1.el8_10.aarch64.rpmbfc86e52072495fcb4f8709c8503dfeea91e6ed4867446b11044060e9edeed54-ol8_aarch64_u10_baseos_patch
grub2-tools-minimal-2.02-167.0.1.el8_10.aarch64.rpm0d405a7e3ceee4fed501546da6fb134c87670dd82b00dc038a92758fc7b2b423-ol8_aarch64_baseos_latest
grub2-tools-minimal-2.02-167.0.1.el8_10.aarch64.rpm0d405a7e3ceee4fed501546da6fb134c87670dd82b00dc038a92758fc7b2b423-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) grub2-2.02-167.0.1.el8_10.src.rpm7d37fdb8922456b5fec9fa2a08d3418386c9b5440ab25cba43bf221aab28824b-ol8_x86_64_baseos_latest
grub2-2.02-167.0.1.el8_10.src.rpm7d37fdb8922456b5fec9fa2a08d3418386c9b5440ab25cba43bf221aab28824b-ol8_x86_64_u10_baseos_patch
grub2-common-2.02-167.0.1.el8_10.noarch.rpm28160b813ee3fb541e6b2804abf703c219f50911d8958130e5d6dbcdf179f8e2-ol8_x86_64_baseos_latest
grub2-common-2.02-167.0.1.el8_10.noarch.rpm28160b813ee3fb541e6b2804abf703c219f50911d8958130e5d6dbcdf179f8e2-ol8_x86_64_u10_baseos_patch
grub2-efi-aa64-modules-2.02-167.0.1.el8_10.noarch.rpmecf1e1ebb810635dfd4edd5142f8b2d17fd41cf4e6f92d07fe2d43106c7a395f-ol8_x86_64_baseos_latest
grub2-efi-aa64-modules-2.02-167.0.1.el8_10.noarch.rpmecf1e1ebb810635dfd4edd5142f8b2d17fd41cf4e6f92d07fe2d43106c7a395f-ol8_x86_64_u10_baseos_patch
grub2-efi-ia32-2.02-167.0.1.el8_10.x86_64.rpmc496adea397d5c98854beedd9e38e2653f118b231aebc3a0a379645dc591c942-ol8_x86_64_baseos_latest
grub2-efi-ia32-2.02-167.0.1.el8_10.x86_64.rpmc496adea397d5c98854beedd9e38e2653f118b231aebc3a0a379645dc591c942-ol8_x86_64_u10_baseos_patch
grub2-efi-ia32-cdboot-2.02-167.0.1.el8_10.x86_64.rpma56a108ddf84f3ab9c1b153b4b7ef35b4758bc949f957c711e47816d70e9e5d7-ol8_x86_64_baseos_latest
grub2-efi-ia32-cdboot-2.02-167.0.1.el8_10.x86_64.rpma56a108ddf84f3ab9c1b153b4b7ef35b4758bc949f957c711e47816d70e9e5d7-ol8_x86_64_u10_baseos_patch
grub2-efi-ia32-modules-2.02-167.0.1.el8_10.noarch.rpm58c5dbd9498eb2da78af0a6130cf8d962fa1b8eb7f1d3f7cbf24433f51a32de7-ol8_x86_64_baseos_latest
grub2-efi-ia32-modules-2.02-167.0.1.el8_10.noarch.rpm58c5dbd9498eb2da78af0a6130cf8d962fa1b8eb7f1d3f7cbf24433f51a32de7-ol8_x86_64_u10_baseos_patch
grub2-efi-x64-2.02-167.0.1.el8_10.x86_64.rpmc5a7bb7c9bc5d9fa3f8684ac5e98c448e95e3975c6cfcd8a5787fff9bf72178e-ol8_x86_64_baseos_latest
grub2-efi-x64-2.02-167.0.1.el8_10.x86_64.rpmc5a7bb7c9bc5d9fa3f8684ac5e98c448e95e3975c6cfcd8a5787fff9bf72178e-ol8_x86_64_u10_baseos_patch
grub2-efi-x64-cdboot-2.02-167.0.1.el8_10.x86_64.rpm6bf2d6227b327a0f1ba90b2a1a2bf2f51b90d37b597ca4131ccf351a10d09994-ol8_x86_64_baseos_latest
grub2-efi-x64-cdboot-2.02-167.0.1.el8_10.x86_64.rpm6bf2d6227b327a0f1ba90b2a1a2bf2f51b90d37b597ca4131ccf351a10d09994-ol8_x86_64_u10_baseos_patch
grub2-efi-x64-modules-2.02-167.0.1.el8_10.noarch.rpmd0614f9d2805e72be84969a069f52ebae24f5ac7da0c3e38f980acf1a6fc2801-ol8_x86_64_baseos_latest
grub2-efi-x64-modules-2.02-167.0.1.el8_10.noarch.rpmd0614f9d2805e72be84969a069f52ebae24f5ac7da0c3e38f980acf1a6fc2801-ol8_x86_64_u10_baseos_patch
grub2-pc-2.02-167.0.1.el8_10.x86_64.rpm8875d14fc47ed2a3550e37257d43bc554bd96694254a0f23a47ec693ac3f1c83-ol8_x86_64_baseos_latest
grub2-pc-2.02-167.0.1.el8_10.x86_64.rpm8875d14fc47ed2a3550e37257d43bc554bd96694254a0f23a47ec693ac3f1c83-ol8_x86_64_u10_baseos_patch
grub2-pc-modules-2.02-167.0.1.el8_10.noarch.rpm334a8f96faa36720b72ecc10631b9bb3a57ac450c1ba382cb9f1322d96cc0018-ol8_x86_64_baseos_latest
grub2-pc-modules-2.02-167.0.1.el8_10.noarch.rpm334a8f96faa36720b72ecc10631b9bb3a57ac450c1ba382cb9f1322d96cc0018-ol8_x86_64_u10_baseos_patch
grub2-tools-2.02-167.0.1.el8_10.x86_64.rpm779095930bce7571a7faf9bff68369c2e0e5c58fbe13f64b3127282a9eef42f6-ol8_x86_64_baseos_latest
grub2-tools-2.02-167.0.1.el8_10.x86_64.rpm779095930bce7571a7faf9bff68369c2e0e5c58fbe13f64b3127282a9eef42f6-ol8_x86_64_u10_baseos_patch
grub2-tools-efi-2.02-167.0.1.el8_10.x86_64.rpm9514a61d66cfa2c768c14c35add754d320462ac05cf7b035f108c3192990c3d3-ol8_x86_64_baseos_latest
grub2-tools-efi-2.02-167.0.1.el8_10.x86_64.rpm9514a61d66cfa2c768c14c35add754d320462ac05cf7b035f108c3192990c3d3-ol8_x86_64_u10_baseos_patch
grub2-tools-extra-2.02-167.0.1.el8_10.x86_64.rpm45c117820c7f9f6866ec70da1821384799645f287fafc1f80af62c415c616432-ol8_x86_64_baseos_latest
grub2-tools-extra-2.02-167.0.1.el8_10.x86_64.rpm45c117820c7f9f6866ec70da1821384799645f287fafc1f80af62c415c616432-ol8_x86_64_u10_baseos_patch
grub2-tools-minimal-2.02-167.0.1.el8_10.x86_64.rpmb4a98f9e62855b46aba151505caa4f6c3e3b9285b78fdfe3b413a46ec20b9455-ol8_x86_64_baseos_latest
grub2-tools-minimal-2.02-167.0.1.el8_10.x86_64.rpmb4a98f9e62855b46aba151505caa4f6c3e3b9285b78fdfe3b413a46ec20b9455-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete