ELSA-2026-4648

ELSA-2026-4648 - grub2 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-03-17

Description

[2.02-170.0.1.el8_10.1]
- Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761]
- Fix typo in SBAT metadata [Orabug: 37693946]
- Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946]
- net/dns: Fix removal of DNS server [Orabug: 37539625]
- net/dns: Simplify error handling of recv_hook() function [Orabug: 37539625]
- net/dns: Add debugging messages in recv_hook() function [Orabug: 37539625]
- net/dns: Fix lookup error when no IPv6 is returned [Orabug: 37539625]
- Use correct os_name on OL
- Backport the support for setting custom kernels as default kernels [Orabug: 36690061]
- Restore correct SBAT entries
- Replaced bugzilla.oracle.com references [Orabug: 35475894]
- efinet: Close and reopen card on failure [Orabug: 35126950]
- Fix CVE-2022-3775 [Orabug: 34867710]
- Bump SBAT metadata for grub to 3 [Orabug: 34871758]
- Enable signing on aarch64
- Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996]
- Enable back btrfs module by default [Orabug: 34377188]
- Backport upstream SNP protocol fixes [Orabug: 34195100]
- Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232]
- enable multiboot2 [Orabug: 34285558]
- backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
- backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
- Backport some better script logic for BTRFS support [Orabug: 32448171]
- Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
- Update Oracle SBAT data [Orabug: 32670033]
- Use new signing certificate [Orabug: 32670033]
- Fix various coverity issues [Orabug: 32530657]
- Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
- Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
- honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
- set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
- Update upstream references [Orabug: 26388226]
- Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
- fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
- Fix comparison in patch for 18504756
- Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.02-170.1]
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141583

[2.02-170]
- fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size
- Resolves: #RHEL-142208

Related CVEs

CVE-2025-61662

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	grub2-2.02-170.0.1.el8_10.1.src.rpm	207d4bfb8b00f6d5f0ee7f8db640ba2cc12188688d7bc262624278436cdd11b7	-	ol8_aarch64_baseos_latest
	grub2-2.02-170.0.1.el8_10.1.src.rpm	207d4bfb8b00f6d5f0ee7f8db640ba2cc12188688d7bc262624278436cdd11b7	-	ol8_aarch64_u10_baseos_patch
	grub2-common-2.02-170.0.1.el8_10.1.noarch.rpm	a4290821cd363dced8f633911ad172e341a4d6955123f0b15e2bbc1248fdd6d0	-	ol8_aarch64_baseos_latest
	grub2-common-2.02-170.0.1.el8_10.1.noarch.rpm	a4290821cd363dced8f633911ad172e341a4d6955123f0b15e2bbc1248fdd6d0	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-aa64-2.02-170.0.1.el8_10.1.aarch64.rpm	0331dace850e74db1e430eaadbbdb277d31354ab74c5c770dcddf919b03c3c42	-	ol8_aarch64_baseos_latest
	grub2-efi-aa64-2.02-170.0.1.el8_10.1.aarch64.rpm	0331dace850e74db1e430eaadbbdb277d31354ab74c5c770dcddf919b03c3c42	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-aa64-cdboot-2.02-170.0.1.el8_10.1.aarch64.rpm	e19dd7431315dcd34462c7acab66942dc8965322404a82d21197ab58165532d3	-	ol8_aarch64_baseos_latest
	grub2-efi-aa64-cdboot-2.02-170.0.1.el8_10.1.aarch64.rpm	e19dd7431315dcd34462c7acab66942dc8965322404a82d21197ab58165532d3	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-aa64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	95546ca3f707c0d1b4419a0b6b9e53d6fde69cbd9e88754cac0b45425bb35589	-	ol8_aarch64_baseos_latest
	grub2-efi-aa64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	95546ca3f707c0d1b4419a0b6b9e53d6fde69cbd9e88754cac0b45425bb35589	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-ia32-modules-2.02-170.0.1.el8_10.1.noarch.rpm	9219c29670e7faf20ff23896916961b16ee0c092f8e9cf97ef51e3aa478d6d2e	-	ol8_aarch64_baseos_latest
	grub2-efi-ia32-modules-2.02-170.0.1.el8_10.1.noarch.rpm	9219c29670e7faf20ff23896916961b16ee0c092f8e9cf97ef51e3aa478d6d2e	-	ol8_aarch64_u10_baseos_patch
	grub2-efi-x64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	f7fe694ee8f8f3bfe90f73d033408f3e5a3b507ffd74b4d58b129e5121a745f1	-	ol8_aarch64_baseos_latest
	grub2-efi-x64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	f7fe694ee8f8f3bfe90f73d033408f3e5a3b507ffd74b4d58b129e5121a745f1	-	ol8_aarch64_u10_baseos_patch
	grub2-pc-modules-2.02-170.0.1.el8_10.1.noarch.rpm	7d89bb8f072a073698e57f43b7a5ce5670d8ddd065c9b231131ef5a1371e32e3	-	ol8_aarch64_baseos_latest
	grub2-pc-modules-2.02-170.0.1.el8_10.1.noarch.rpm	7d89bb8f072a073698e57f43b7a5ce5670d8ddd065c9b231131ef5a1371e32e3	-	ol8_aarch64_u10_baseos_patch
	grub2-tools-2.02-170.0.1.el8_10.1.aarch64.rpm	55f2048d7597f3bb3c9e68bb204134afe8cb84954efacf261d5bc18a9846f758	-	ol8_aarch64_baseos_latest
	grub2-tools-2.02-170.0.1.el8_10.1.aarch64.rpm	55f2048d7597f3bb3c9e68bb204134afe8cb84954efacf261d5bc18a9846f758	-	ol8_aarch64_u10_baseos_patch
	grub2-tools-extra-2.02-170.0.1.el8_10.1.aarch64.rpm	34a8e10afabd52393315e2f70990c30d27c063918cf4e297f05930d995246940	-	ol8_aarch64_baseos_latest
	grub2-tools-extra-2.02-170.0.1.el8_10.1.aarch64.rpm	34a8e10afabd52393315e2f70990c30d27c063918cf4e297f05930d995246940	-	ol8_aarch64_u10_baseos_patch
	grub2-tools-minimal-2.02-170.0.1.el8_10.1.aarch64.rpm	bfc7478bdd3045952fa8aee51a53685093642cfe65efdcbb95a08b6f4ddba776	-	ol8_aarch64_baseos_latest
	grub2-tools-minimal-2.02-170.0.1.el8_10.1.aarch64.rpm	bfc7478bdd3045952fa8aee51a53685093642cfe65efdcbb95a08b6f4ddba776	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	grub2-2.02-170.0.1.el8_10.1.src.rpm	207d4bfb8b00f6d5f0ee7f8db640ba2cc12188688d7bc262624278436cdd11b7	-	ol8_x86_64_baseos_latest
	grub2-2.02-170.0.1.el8_10.1.src.rpm	207d4bfb8b00f6d5f0ee7f8db640ba2cc12188688d7bc262624278436cdd11b7	-	ol8_x86_64_u10_baseos_patch
	grub2-common-2.02-170.0.1.el8_10.1.noarch.rpm	a4290821cd363dced8f633911ad172e341a4d6955123f0b15e2bbc1248fdd6d0	-	ol8_x86_64_baseos_latest
	grub2-common-2.02-170.0.1.el8_10.1.noarch.rpm	a4290821cd363dced8f633911ad172e341a4d6955123f0b15e2bbc1248fdd6d0	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-aa64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	95546ca3f707c0d1b4419a0b6b9e53d6fde69cbd9e88754cac0b45425bb35589	-	ol8_x86_64_baseos_latest
	grub2-efi-aa64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	95546ca3f707c0d1b4419a0b6b9e53d6fde69cbd9e88754cac0b45425bb35589	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-ia32-2.02-170.0.1.el8_10.1.x86_64.rpm	77eb01a9c434f0b0bcf32eb7dbd6fb72af17a3c97a091d8ca76df258ebfd5293	-	ol8_x86_64_baseos_latest
	grub2-efi-ia32-2.02-170.0.1.el8_10.1.x86_64.rpm	77eb01a9c434f0b0bcf32eb7dbd6fb72af17a3c97a091d8ca76df258ebfd5293	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-ia32-cdboot-2.02-170.0.1.el8_10.1.x86_64.rpm	fbe264d2a924d13861cb7b4326cff3397174382dfad8bc46e83b199f2df3b009	-	ol8_x86_64_baseos_latest
	grub2-efi-ia32-cdboot-2.02-170.0.1.el8_10.1.x86_64.rpm	fbe264d2a924d13861cb7b4326cff3397174382dfad8bc46e83b199f2df3b009	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-ia32-modules-2.02-170.0.1.el8_10.1.noarch.rpm	9219c29670e7faf20ff23896916961b16ee0c092f8e9cf97ef51e3aa478d6d2e	-	ol8_x86_64_baseos_latest
	grub2-efi-ia32-modules-2.02-170.0.1.el8_10.1.noarch.rpm	9219c29670e7faf20ff23896916961b16ee0c092f8e9cf97ef51e3aa478d6d2e	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-x64-2.02-170.0.1.el8_10.1.x86_64.rpm	a091c38a65d6f3a5f51dddbf0a587d58200ad31ceb21e06a4af84c7470a82d42	-	ol8_x86_64_baseos_latest
	grub2-efi-x64-2.02-170.0.1.el8_10.1.x86_64.rpm	a091c38a65d6f3a5f51dddbf0a587d58200ad31ceb21e06a4af84c7470a82d42	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-x64-cdboot-2.02-170.0.1.el8_10.1.x86_64.rpm	4ffaac0930ccec83f629e5dab04b0f2caf91d8e0c80c9c3b8c58ba19f6fd2a12	-	ol8_x86_64_baseos_latest
	grub2-efi-x64-cdboot-2.02-170.0.1.el8_10.1.x86_64.rpm	4ffaac0930ccec83f629e5dab04b0f2caf91d8e0c80c9c3b8c58ba19f6fd2a12	-	ol8_x86_64_u10_baseos_patch
	grub2-efi-x64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	f7fe694ee8f8f3bfe90f73d033408f3e5a3b507ffd74b4d58b129e5121a745f1	-	ol8_x86_64_baseos_latest
	grub2-efi-x64-modules-2.02-170.0.1.el8_10.1.noarch.rpm	f7fe694ee8f8f3bfe90f73d033408f3e5a3b507ffd74b4d58b129e5121a745f1	-	ol8_x86_64_u10_baseos_patch
	grub2-pc-2.02-170.0.1.el8_10.1.x86_64.rpm	e2ffe725668898f84e5b6fad08e9e8c5ba908962ce63f75f79e23c78b7a052ea	-	ol8_x86_64_baseos_latest
	grub2-pc-2.02-170.0.1.el8_10.1.x86_64.rpm	e2ffe725668898f84e5b6fad08e9e8c5ba908962ce63f75f79e23c78b7a052ea	-	ol8_x86_64_u10_baseos_patch
	grub2-pc-modules-2.02-170.0.1.el8_10.1.noarch.rpm	7d89bb8f072a073698e57f43b7a5ce5670d8ddd065c9b231131ef5a1371e32e3	-	ol8_x86_64_baseos_latest
	grub2-pc-modules-2.02-170.0.1.el8_10.1.noarch.rpm	7d89bb8f072a073698e57f43b7a5ce5670d8ddd065c9b231131ef5a1371e32e3	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-2.02-170.0.1.el8_10.1.x86_64.rpm	a1d4ffcfbc028940e4356df3261ddcfa41a3f8a73631ef480692d793e515a830	-	ol8_x86_64_baseos_latest
	grub2-tools-2.02-170.0.1.el8_10.1.x86_64.rpm	a1d4ffcfbc028940e4356df3261ddcfa41a3f8a73631ef480692d793e515a830	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-efi-2.02-170.0.1.el8_10.1.x86_64.rpm	e767101ec17bbc933d24e4aa06d068624e664ab557085eb6818d485d8b10c494	-	ol8_x86_64_baseos_latest
	grub2-tools-efi-2.02-170.0.1.el8_10.1.x86_64.rpm	e767101ec17bbc933d24e4aa06d068624e664ab557085eb6818d485d8b10c494	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-extra-2.02-170.0.1.el8_10.1.x86_64.rpm	c8a0dbf1447df86ebec17787a31f128c9fa79fae13f372cda5293aac5d308017	-	ol8_x86_64_baseos_latest
	grub2-tools-extra-2.02-170.0.1.el8_10.1.x86_64.rpm	c8a0dbf1447df86ebec17787a31f128c9fa79fae13f372cda5293aac5d308017	-	ol8_x86_64_u10_baseos_patch
	grub2-tools-minimal-2.02-170.0.1.el8_10.1.x86_64.rpm	83ff3063bb8f80c1b93735cb19ccfbc122c3f785592ec9b35e3e4f6449ec22da	-	ol8_x86_64_baseos_latest
	grub2-tools-minimal-2.02-170.0.1.el8_10.1.x86_64.rpm	83ff3063bb8f80c1b93735cb19ccfbc122c3f785592ec9b35e3e4f6449ec22da	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team