ELSA-2021-9076

ELSA-2021-9076 - grub2 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-03-02

Description

[2.02-0.87.0.7]
- Fix CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749
CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 [Orabug: 32530657]
- Fix various coverity issues [Orabug: 32530657]
- Add SBAT metadata to grubx64.efi [Orabug: 32530657]

[2.02-0.87.0.5]
- Use similar format for menu entry in grub environment block
- config file. [Orabug: 32172943]

[2.02-0.87.0.3]
- Fix degradation in multiboot2 code [Orabug: 32069510]

[2.02-0.87.0.1]
- Update signing certificate for efi binaries
- Update upstream references [Orabug: 30138841]
- Restore symlink to grub environment file, that was removed during grub2-efi update
if grub2 package is also installed on UEFI machines [Orabug: 27345750]
- fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
- Fix comparison in patch for [Orabug: 18504756]
- Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
- replace dynamic EFI boot folder path generation with predefined 'redhat' (Alex Burmashev)
- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

Related CVEs

CVE-2020-14372

CVE-2020-25632

CVE-2020-25647

CVE-2020-27749

CVE-2020-27779

CVE-2021-20225

CVE-2021-20233

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	grub2-2.02-0.87.0.7.el7.src.rpm	b22b3369f1f6491b2dc2b017d93df9b3	ELBA-2021-9158
	grub2-2.02-0.87.0.7.el7.aarch64.rpm	7110d863b8acec589f6d9af2014409ea	ELBA-2021-9158
	grub2-common-2.02-0.87.0.7.el7.noarch.rpm	a458c526ee191109b731b7ccbd86918f	ELBA-2021-9158
	grub2-efi-aa64-2.02-0.87.0.7.el7.aarch64.rpm	43d7285d97ec4545ffb00c16971de62d	ELBA-2021-9158
	grub2-efi-aa64-cdboot-2.02-0.87.0.7.el7.aarch64.rpm	cd68ea63ec9722984a47a17f4e7fb652	ELBA-2021-9158
	grub2-tools-2.02-0.87.0.7.el7.aarch64.rpm	8dd4c1e165a8ab278f1f67229991efc8	ELBA-2021-9158
	grub2-tools-extra-2.02-0.87.0.7.el7.aarch64.rpm	839a65a544379d7dbd396eadf649e2bf	ELBA-2021-9158
	grub2-tools-minimal-2.02-0.87.0.7.el7.aarch64.rpm	a8dba60e8ed5169e1454d596a6767a3e	ELBA-2021-9158
Oracle Linux 7 (x86_64)	grub2-2.02-0.87.0.7.el7.src.rpm	b22b3369f1f6491b2dc2b017d93df9b3	ELBA-2021-9158
	grub2-2.02-0.87.0.7.el7.x86_64.rpm	f3e810bf4c2dc962831c50c48b917abe	ELBA-2021-9158
	grub2-common-2.02-0.87.0.7.el7.noarch.rpm	a458c526ee191109b731b7ccbd86918f	ELBA-2021-9158
	grub2-efi-ia32-2.02-0.87.0.7.el7.x86_64.rpm	959e06c1b66ebe10fed48594c6fbeb94	ELBA-2021-9158
	grub2-efi-ia32-cdboot-2.02-0.87.0.7.el7.x86_64.rpm	f04d30e71b3a8bbfc7f75596b1ec4a25	ELBA-2021-9158
	grub2-efi-ia32-modules-2.02-0.87.0.7.el7.noarch.rpm	8e098a90de58f137057797b040d0f5d1	ELBA-2021-9158
	grub2-efi-x64-2.02-0.87.0.7.el7.x86_64.rpm	17adce2a7595f82186196760d9eeb5fb	ELBA-2021-9158
	grub2-efi-x64-cdboot-2.02-0.87.0.7.el7.x86_64.rpm	da2d23faf6a144dd3deae4a02e3731fa	ELBA-2021-9158
	grub2-efi-x64-modules-2.02-0.87.0.7.el7.noarch.rpm	bc2e5c041ef7b25bcabd8b384c9e97fa	ELBA-2021-9158
	grub2-pc-2.02-0.87.0.7.el7.x86_64.rpm	ff366b691e1241afa8d4ec281de3a422	ELBA-2021-9158
	grub2-pc-modules-2.02-0.87.0.7.el7.noarch.rpm	b43ab524aa3def04ce6f1bae8e53ab6f	ELBA-2021-9158
	grub2-tools-2.02-0.87.0.7.el7.x86_64.rpm	b4125b493b48763d73a45cbaaacac264	ELBA-2021-9158
	grub2-tools-extra-2.02-0.87.0.7.el7.x86_64.rpm	1d2d04539340c842c1c3166e88b47319	ELBA-2021-9158
	grub2-tools-minimal-2.02-0.87.0.7.el7.x86_64.rpm	483f376f9ac343dce18bfdd92b937e67	ELBA-2021-9158

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team