ELSA-2022-5099

ELSA-2022-5099 - grub2 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2022-06-30

Description

[2.06-27.0.5.el9_0.7]
- Replaced bugzilla.oracle.com references [Orabug: 34202300]
- Update provided certificate version to 202204 [JIRA: OLDIS-16371]
- Various coverity fixes [JIRA: OLDIS-16371]
- bump SBAT generation
- Update bug url [Orabug: 34202300]
- Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
- Update signing certificate [JIRA: OLDIS-16371]
- fix SBAT data [JIRA: OLDIS-16371]
- Update requires [JIRA: OLDIS-16371]
- Rebuild for SecureBoot signatures [Orabug: 33801813]
- Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
- Update Oracle SBAT data [Orabug: 32670033]
- Use new signing certificate [Orabug: 32670033]
- honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
- set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
- Update upstream references [Orabug: 26388226]
- Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.06-27.el9_0.7]
- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2089810

Related CVEs

CVE-2021-3695

CVE-2022-28737

CVE-2022-28734

CVE-2022-28736

CVE-2021-3696

CVE-2021-3697

CVE-2022-28733

CVE-2022-28735

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	grub2-2.06-27.0.6.el9_0.7.src.rpm	33e318c1e473c541d135cbc43fc3f23da1d5cd0c567c9632b1a4598af1a03544	-	ol9_aarch64_baseos_latest
	grub2-2.06-27.0.6.el9_0.7.src.rpm	33e318c1e473c541d135cbc43fc3f23da1d5cd0c567c9632b1a4598af1a03544	-	ol9_aarch64_u0_baseos_patch
	grub2-common-2.06-27.0.6.el9_0.7.noarch.rpm	c9f07ae4c3492139928ace78391ef87f4df5008845cbb6171d4addea93935662	-	ol9_aarch64_baseos_latest
	grub2-common-2.06-27.0.6.el9_0.7.noarch.rpm	c9f07ae4c3492139928ace78391ef87f4df5008845cbb6171d4addea93935662	-	ol9_aarch64_u0_baseos_patch
	grub2-efi-aa64-2.06-27.0.6.el9_0.7.aarch64.rpm	6c8dd1c1cdbe487994b9142b3707dd0dee5292fc832ad1887855bc634a1486e8	-	ol9_aarch64_baseos_latest
	grub2-efi-aa64-2.06-27.0.6.el9_0.7.aarch64.rpm	6c8dd1c1cdbe487994b9142b3707dd0dee5292fc832ad1887855bc634a1486e8	-	ol9_aarch64_u0_baseos_patch
	grub2-efi-aa64-cdboot-2.06-27.0.6.el9_0.7.aarch64.rpm	1a8f926f579084146cc92698dc58e5bfa8063e177126a8b15942867d5ef3bd5d	-	ol9_aarch64_baseos_latest
	grub2-efi-aa64-cdboot-2.06-27.0.6.el9_0.7.aarch64.rpm	1a8f926f579084146cc92698dc58e5bfa8063e177126a8b15942867d5ef3bd5d	-	ol9_aarch64_u0_baseos_patch
	grub2-efi-aa64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	b57b8bc65ee7931e8c5d21e040363f2fa43c46c869669f9e5c5755cadba0013a	-	ol9_aarch64_baseos_latest
	grub2-efi-aa64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	b57b8bc65ee7931e8c5d21e040363f2fa43c46c869669f9e5c5755cadba0013a	-	ol9_aarch64_u0_baseos_patch
	grub2-efi-x64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	46671eaa23b61ef8634cd695822702682d2cd6ed50e469f1d37a675842680672	-	ol9_aarch64_baseos_latest
	grub2-efi-x64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	46671eaa23b61ef8634cd695822702682d2cd6ed50e469f1d37a675842680672	-	ol9_aarch64_u0_baseos_patch
	grub2-tools-2.06-27.0.6.el9_0.7.aarch64.rpm	e1a40717127f3c1c8687ed742a8c76cffd91886b9e6f1cc2a428e6e4b1edd264	-	ol9_aarch64_baseos_latest
	grub2-tools-2.06-27.0.6.el9_0.7.aarch64.rpm	e1a40717127f3c1c8687ed742a8c76cffd91886b9e6f1cc2a428e6e4b1edd264	-	ol9_aarch64_u0_baseos_patch
	grub2-tools-extra-2.06-27.0.6.el9_0.7.aarch64.rpm	d3722beb0c21438df05b01b5c6fd78ae920ebede02fa15e96d875b1c2037b933	-	ol9_aarch64_baseos_latest
	grub2-tools-extra-2.06-27.0.6.el9_0.7.aarch64.rpm	d3722beb0c21438df05b01b5c6fd78ae920ebede02fa15e96d875b1c2037b933	-	ol9_aarch64_u0_baseos_patch
	grub2-tools-minimal-2.06-27.0.6.el9_0.7.aarch64.rpm	b8420526552473ab8aca81f8a388a49a48ea515ee1b9c4b6470efc9abe3d18e3	-	ol9_aarch64_baseos_latest
	grub2-tools-minimal-2.06-27.0.6.el9_0.7.aarch64.rpm	b8420526552473ab8aca81f8a388a49a48ea515ee1b9c4b6470efc9abe3d18e3	-	ol9_aarch64_u0_baseos_patch
Oracle Linux 9 (x86_64)	grub2-2.06-27.0.6.el9_0.7.src.rpm	33e318c1e473c541d135cbc43fc3f23da1d5cd0c567c9632b1a4598af1a03544	-	ol9_x86_64_baseos_latest
	grub2-2.06-27.0.6.el9_0.7.src.rpm	33e318c1e473c541d135cbc43fc3f23da1d5cd0c567c9632b1a4598af1a03544	-	ol9_x86_64_u0_baseos_patch
	grub2-common-2.06-27.0.6.el9_0.7.noarch.rpm	c9f07ae4c3492139928ace78391ef87f4df5008845cbb6171d4addea93935662	-	ol9_x86_64_baseos_latest
	grub2-common-2.06-27.0.6.el9_0.7.noarch.rpm	c9f07ae4c3492139928ace78391ef87f4df5008845cbb6171d4addea93935662	-	ol9_x86_64_u0_baseos_patch
	grub2-efi-aa64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	b57b8bc65ee7931e8c5d21e040363f2fa43c46c869669f9e5c5755cadba0013a	-	ol9_x86_64_baseos_latest
	grub2-efi-aa64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	b57b8bc65ee7931e8c5d21e040363f2fa43c46c869669f9e5c5755cadba0013a	-	ol9_x86_64_u0_baseos_patch
	grub2-efi-x64-2.06-27.0.6.el9_0.7.x86_64.rpm	49a2cf4e97f672f9459213d346f8fc6b02abd72d5e533eec5d3c2476bb9104c4	-	ol9_x86_64_baseos_latest
	grub2-efi-x64-2.06-27.0.6.el9_0.7.x86_64.rpm	49a2cf4e97f672f9459213d346f8fc6b02abd72d5e533eec5d3c2476bb9104c4	-	ol9_x86_64_u0_baseos_patch
	grub2-efi-x64-cdboot-2.06-27.0.6.el9_0.7.x86_64.rpm	0a5318ba4a3f4d47acbea08186cc2dde064a600879ebb2da24fdce2ec6a0b6e9	-	ol9_x86_64_baseos_latest
	grub2-efi-x64-cdboot-2.06-27.0.6.el9_0.7.x86_64.rpm	0a5318ba4a3f4d47acbea08186cc2dde064a600879ebb2da24fdce2ec6a0b6e9	-	ol9_x86_64_u0_baseos_patch
	grub2-efi-x64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	46671eaa23b61ef8634cd695822702682d2cd6ed50e469f1d37a675842680672	-	ol9_x86_64_baseos_latest
	grub2-efi-x64-modules-2.06-27.0.6.el9_0.7.noarch.rpm	46671eaa23b61ef8634cd695822702682d2cd6ed50e469f1d37a675842680672	-	ol9_x86_64_u0_baseos_patch
	grub2-pc-2.06-27.0.6.el9_0.7.x86_64.rpm	f0f74ddc739fdaddcfa7a2917b33a466a96d52445a4d115114fdaa3b75776530	-	ol9_x86_64_baseos_latest
	grub2-pc-2.06-27.0.6.el9_0.7.x86_64.rpm	f0f74ddc739fdaddcfa7a2917b33a466a96d52445a4d115114fdaa3b75776530	-	ol9_x86_64_u0_baseos_patch
	grub2-pc-modules-2.06-27.0.6.el9_0.7.noarch.rpm	111a6024efe4be06a2f60fcc83ea0dfe01dd8737c3df5a5326c8f2ebd7affd87	-	ol9_x86_64_baseos_latest
	grub2-pc-modules-2.06-27.0.6.el9_0.7.noarch.rpm	111a6024efe4be06a2f60fcc83ea0dfe01dd8737c3df5a5326c8f2ebd7affd87	-	ol9_x86_64_u0_baseos_patch
	grub2-tools-2.06-27.0.6.el9_0.7.x86_64.rpm	891333728b5f59df336a8b97b0a0e69b78b0cd3d0a2bfe12521d2bf3f7009c60	-	ol9_x86_64_baseos_latest
	grub2-tools-2.06-27.0.6.el9_0.7.x86_64.rpm	891333728b5f59df336a8b97b0a0e69b78b0cd3d0a2bfe12521d2bf3f7009c60	-	ol9_x86_64_u0_baseos_patch
	grub2-tools-efi-2.06-27.0.6.el9_0.7.x86_64.rpm	cab683c1c43ff6c4a45d1fd66a99dd678dd571b7eb562e3d8defa25bf3c01df5	-	ol9_x86_64_baseos_latest
	grub2-tools-efi-2.06-27.0.6.el9_0.7.x86_64.rpm	cab683c1c43ff6c4a45d1fd66a99dd678dd571b7eb562e3d8defa25bf3c01df5	-	ol9_x86_64_u0_baseos_patch
	grub2-tools-extra-2.06-27.0.6.el9_0.7.x86_64.rpm	70803d47a5a4cd2ceb23352432253ef036ea1298c8297f01230fa2091b42f6dc	-	ol9_x86_64_baseos_latest
	grub2-tools-extra-2.06-27.0.6.el9_0.7.x86_64.rpm	70803d47a5a4cd2ceb23352432253ef036ea1298c8297f01230fa2091b42f6dc	-	ol9_x86_64_u0_baseos_patch
	grub2-tools-minimal-2.06-27.0.6.el9_0.7.x86_64.rpm	4f642f3bb9ee8df73166682a9fa2d5004d926af13e8ba4eda6b62ffc940bc944	-	ol9_x86_64_baseos_latest
	grub2-tools-minimal-2.06-27.0.6.el9_0.7.x86_64.rpm	4f642f3bb9ee8df73166682a9fa2d5004d926af13e8ba4eda6b62ffc940bc944	-	ol9_x86_64_u0_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team