ELSA-2026-4649

ELSA-2026-4649 - grub2 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-03-17

Description

[2.12-29.0.1.el10_1.2]
- efinet: Close and reopen card on failure [Orabug: 37808688]
- Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761]
- Fix typo in SBAT metadata [Orabug: 37693946]
- Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946]
- Enable btrfs module [Orabug: 37412995]
- Restored shim related conflicts and provide. [Orabug: 37376920]
- Rework the scripts to cover both in-place upgrade and update scenarios [Orabug: 36768566]
- Support setting custom kernels as default kernels [Orabug: 36043978]
- Bump SBAT metadata for grub to 3 [Orabug: 34872719]
- Fix CVE-2022-3775 [Orabug: 34871953]
- Enable signing for aarch64 EFI
- Fix signing certificate names
- Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986]
- Replaced bugzilla.oracle.com references [Orabug: 34202300]
- Update provided certificate version to 202204 [JIRA: OLDIS-16371]
- Various coverity fixes [JIRA: OLDIS-16371]
- bump SBAT generation
- Update bug url [Orabug: 34202300]
- Revert provided certificate version back to 202102 [JIRA: OLDIS-16371]
- Update signing certificate [JIRA: OLDIS-16371]
- fix SBAT data [JIRA: OLDIS-16371]
- Update requires [JIRA: OLDIS-16371]
- Rebuild for SecureBoot signatures [Orabug: 33801813]
- Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
- Update Oracle SBAT data [Orabug: 32670033]
- Use new signing certificate [Orabug: 32670033]
- honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
- set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
- Update upstream references [Orabug: 26388226]
- Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.12-29.2]
- Try to get gating tests running via fmf/tmt
- Resolves: #RHEL-152849

[2.12-29.1]
- Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free
- Resolves: #RHEL-141580

Related CVEs

CVE-2025-61662

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	grub2-2.12-29.0.1.el10_1.2.src.rpm	5bf0d246ce37f3c51ba2d26e6488143b72c9aa4b65e7c6f64f497314f8f24459	-	ol10_aarch64_baseos_latest
	grub2-2.12-29.0.1.el10_1.2.src.rpm	5bf0d246ce37f3c51ba2d26e6488143b72c9aa4b65e7c6f64f497314f8f24459	-	ol10_aarch64_u1_baseos_patch
	grub2-common-2.12-29.0.1.el10_1.2.noarch.rpm	1b798fc37a6e3895828787d6784a8762749ad9cc8c9af1785756c46a751768ee	-	ol10_aarch64_baseos_latest
	grub2-common-2.12-29.0.1.el10_1.2.noarch.rpm	1b798fc37a6e3895828787d6784a8762749ad9cc8c9af1785756c46a751768ee	-	ol10_aarch64_u1_baseos_patch
	grub2-efi-aa64-2.12-29.0.1.el10_1.2.aarch64.rpm	1f9cbda4dfb96ded05094a735c2ce0d4c41a106bda3c5b73b016368a8238fa06	-	ol10_aarch64_baseos_latest
	grub2-efi-aa64-2.12-29.0.1.el10_1.2.aarch64.rpm	1f9cbda4dfb96ded05094a735c2ce0d4c41a106bda3c5b73b016368a8238fa06	-	ol10_aarch64_u1_baseos_patch
	grub2-efi-aa64-cdboot-2.12-29.0.1.el10_1.2.aarch64.rpm	9d79def7db8fc4904ca1f64a6af3888358290262c4f9c9d44e65f905cee3784a	-	ol10_aarch64_baseos_latest
	grub2-efi-aa64-cdboot-2.12-29.0.1.el10_1.2.aarch64.rpm	9d79def7db8fc4904ca1f64a6af3888358290262c4f9c9d44e65f905cee3784a	-	ol10_aarch64_u1_baseos_patch
	grub2-efi-aa64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a945225d45ae56bbdc8de6bf37db952fec94b098948b7fc5121a1d1b2df1bc56	-	ol10_aarch64_baseos_latest
	grub2-efi-aa64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a945225d45ae56bbdc8de6bf37db952fec94b098948b7fc5121a1d1b2df1bc56	-	ol10_aarch64_u1_baseos_patch
	grub2-efi-x64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a72e7dad9dcf6a4964b7a69cc70f7ac54c8df0ce117242750d4f219246a2c6eb	-	ol10_aarch64_baseos_latest
	grub2-efi-x64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a72e7dad9dcf6a4964b7a69cc70f7ac54c8df0ce117242750d4f219246a2c6eb	-	ol10_aarch64_u1_baseos_patch
	grub2-tools-2.12-29.0.1.el10_1.2.aarch64.rpm	e47a126e330d719e6cc024ef532a6beee7af9e2cf1840ce8d83ab624983ef6c7	-	ol10_aarch64_baseos_latest
	grub2-tools-2.12-29.0.1.el10_1.2.aarch64.rpm	e47a126e330d719e6cc024ef532a6beee7af9e2cf1840ce8d83ab624983ef6c7	-	ol10_aarch64_u1_baseos_patch
	grub2-tools-extra-2.12-29.0.1.el10_1.2.aarch64.rpm	7b4b22241c110f31a3f2b98762def9f0d91c7f9995cea1eca030b1965f456418	-	ol10_aarch64_baseos_latest
	grub2-tools-extra-2.12-29.0.1.el10_1.2.aarch64.rpm	7b4b22241c110f31a3f2b98762def9f0d91c7f9995cea1eca030b1965f456418	-	ol10_aarch64_u1_baseos_patch
	grub2-tools-minimal-2.12-29.0.1.el10_1.2.aarch64.rpm	d3dfb6e10038272fdec5350c8f2724637721b329d38cc4617d439348614e80a4	-	ol10_aarch64_baseos_latest
	grub2-tools-minimal-2.12-29.0.1.el10_1.2.aarch64.rpm	d3dfb6e10038272fdec5350c8f2724637721b329d38cc4617d439348614e80a4	-	ol10_aarch64_u1_baseos_patch
Oracle Linux 10 (x86_64)	grub2-2.12-29.0.1.el10_1.2.src.rpm	5bf0d246ce37f3c51ba2d26e6488143b72c9aa4b65e7c6f64f497314f8f24459	-	ol10_x86_64_baseos_latest
	grub2-2.12-29.0.1.el10_1.2.src.rpm	5bf0d246ce37f3c51ba2d26e6488143b72c9aa4b65e7c6f64f497314f8f24459	-	ol10_x86_64_u1_baseos_patch
	grub2-common-2.12-29.0.1.el10_1.2.noarch.rpm	1b798fc37a6e3895828787d6784a8762749ad9cc8c9af1785756c46a751768ee	-	ol10_x86_64_baseos_latest
	grub2-common-2.12-29.0.1.el10_1.2.noarch.rpm	1b798fc37a6e3895828787d6784a8762749ad9cc8c9af1785756c46a751768ee	-	ol10_x86_64_u1_baseos_patch
	grub2-efi-aa64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a945225d45ae56bbdc8de6bf37db952fec94b098948b7fc5121a1d1b2df1bc56	-	ol10_x86_64_baseos_latest
	grub2-efi-aa64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a945225d45ae56bbdc8de6bf37db952fec94b098948b7fc5121a1d1b2df1bc56	-	ol10_x86_64_u1_baseos_patch
	grub2-efi-x64-2.12-29.0.1.el10_1.2.x86_64.rpm	2abd931cb3adf22b725040357941363d53048f74382f7ee1170d5b0a30fe5e8c	-	ol10_x86_64_baseos_latest
	grub2-efi-x64-2.12-29.0.1.el10_1.2.x86_64.rpm	2abd931cb3adf22b725040357941363d53048f74382f7ee1170d5b0a30fe5e8c	-	ol10_x86_64_u1_baseos_patch
	grub2-efi-x64-cdboot-2.12-29.0.1.el10_1.2.x86_64.rpm	2ab5cab5af3dc93996b24dd6d355c3f5b8e2dabca9ae2fcda95c9a34330baf8d	-	ol10_x86_64_baseos_latest
	grub2-efi-x64-cdboot-2.12-29.0.1.el10_1.2.x86_64.rpm	2ab5cab5af3dc93996b24dd6d355c3f5b8e2dabca9ae2fcda95c9a34330baf8d	-	ol10_x86_64_u1_baseos_patch
	grub2-efi-x64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a72e7dad9dcf6a4964b7a69cc70f7ac54c8df0ce117242750d4f219246a2c6eb	-	ol10_x86_64_baseos_latest
	grub2-efi-x64-modules-2.12-29.0.1.el10_1.2.noarch.rpm	a72e7dad9dcf6a4964b7a69cc70f7ac54c8df0ce117242750d4f219246a2c6eb	-	ol10_x86_64_u1_baseos_patch
	grub2-pc-2.12-29.0.1.el10_1.2.x86_64.rpm	94d71403c2a70d4a9b4f06b7bbf2adc7a669ddebac57ae35f4dbeb126ba5f969	-	ol10_x86_64_baseos_latest
	grub2-pc-2.12-29.0.1.el10_1.2.x86_64.rpm	94d71403c2a70d4a9b4f06b7bbf2adc7a669ddebac57ae35f4dbeb126ba5f969	-	ol10_x86_64_u1_baseos_patch
	grub2-pc-modules-2.12-29.0.1.el10_1.2.noarch.rpm	1335528de6c9521a9e8f1785b530da533a447e8073fc991f2b4ff9aa612f29da	-	ol10_x86_64_baseos_latest
	grub2-pc-modules-2.12-29.0.1.el10_1.2.noarch.rpm	1335528de6c9521a9e8f1785b530da533a447e8073fc991f2b4ff9aa612f29da	-	ol10_x86_64_u1_baseos_patch
	grub2-tools-2.12-29.0.1.el10_1.2.x86_64.rpm	95c28f314a7f18e2420d18795420d8a2191c872cc16abaf2878df96dd110f58b	-	ol10_x86_64_baseos_latest
	grub2-tools-2.12-29.0.1.el10_1.2.x86_64.rpm	95c28f314a7f18e2420d18795420d8a2191c872cc16abaf2878df96dd110f58b	-	ol10_x86_64_u1_baseos_patch
	grub2-tools-efi-2.12-29.0.1.el10_1.2.x86_64.rpm	32b638ad7a3c305d1c7de2c485376b4e21051c49c56e413ec2ddb76675d99c16	-	ol10_x86_64_baseos_latest
	grub2-tools-efi-2.12-29.0.1.el10_1.2.x86_64.rpm	32b638ad7a3c305d1c7de2c485376b4e21051c49c56e413ec2ddb76675d99c16	-	ol10_x86_64_u1_baseos_patch
	grub2-tools-extra-2.12-29.0.1.el10_1.2.x86_64.rpm	c0363080eb85fd495f9d2e505029d4832ee6c92620921085a342c96d8d7f341e	-	ol10_x86_64_baseos_latest
	grub2-tools-extra-2.12-29.0.1.el10_1.2.x86_64.rpm	c0363080eb85fd495f9d2e505029d4832ee6c92620921085a342c96d8d7f341e	-	ol10_x86_64_u1_baseos_patch
	grub2-tools-minimal-2.12-29.0.1.el10_1.2.x86_64.rpm	419fe742ceb6de762b4416cdb2aefde14b189e4a19909b6a099fc719073fd828	-	ol10_x86_64_baseos_latest
	grub2-tools-minimal-2.12-29.0.1.el10_1.2.x86_64.rpm	419fe742ceb6de762b4416cdb2aefde14b189e4a19909b6a099fc719073fd828	-	ol10_x86_64_u1_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team