ELSA-2026-5233

ELSA-2026-5233 - grub2 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-04-06

Description

[2.02-0.87.0.29.el7.14]
- Unregister gettext command on module unload [CVE-2025-61662][Orabug: 39112125]

[2.02-0.87.0.27.el7.14]
- Fix OOB write in grub_net_search_config_file() CVE-2025-0624 [Orabug: 37770226]
- Also adds implementation of grub_strlcpy() for clean backport

[2.02-0.87.0.26.el7.14]
- Replace bugzilla.oracle.com reference [Orabug: 35477723]
- Backport kernel EFI allocation pacthes [Orabug: 34301086]
- Add to the list CVE-2021-3695, CVE-2021-3696, CVE-2021-3697,
CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 [JIRA: OLDIS-16371]
- bump SBAT generation [JIRA: OLDIS-16371]
- Cleanup XEN shell script (Alex Burmashev) [Orabug: 33851417]
- Update SBAT data (Alex Burmashev) [Orabug: 33851417]
- efinet: change SNP open call (Alex Burmashev) [Orabug: 32646964]
- disable buggy 0183-efinet-retransmit-if-our-device-is-busy.patch [Orabug: 27982684]
- Patch multiboot2 to the recent state [Orabug: 32950597]
- Enable multiboot2 for UEFI ( non Secureboot ) mode [Orabug: 32950597]
- Update signing certificate [Orabug: 32670043]
- Update shim and certificates dependencies [Orabug: 32670043]
- xfs: Don't attempt to iterate over empty directory [Orabug: 32584717]
- add SBAT metadata for Oracle Linux grub2
- Use similar format for menu entry in grub environment block
- config file. [Orabug: 32172943]
- Fix degradation in multiboot2 code [Orabug: 32069510]
- Update signing certificate for efi binaries
- Update upstream references [Orabug: 30138841]
- Restore symlink to grub environment file, that was removed during grub2-efi update
if grub2 package is also installed on UEFI machines [Orabug: 27345750]
- fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
- Fix comparison in patch for [Orabug: 18504756]
- Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
- replace dynamic EFI boot folder path generation with predefined 'redhat' (Alex Burmashev)
- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.02-087.el7.14]
- Rebuild for signing
- Related: RHEL-23460

[2.02-087.el7.13]
- safemath: add grub_cast for gcc < 5.1
- Related: RHEL-23460

[2.02-087.el7.12]
- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460

[2.02-087.el7.11]
- Bump sbat
- Resolves: CVE-2022-28733

[2.02-087.el7.10]
- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733

[2.02-087.el7.9]
- Bump for signing
- Resolves: #1892860

[2.02-0.87.el7.8]
- Fix accidental reboot in grub_exit
- Resolves: #1892860

Related CVEs

CVE-2025-61662

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	grub2-2.02-0.87.0.29.el7_9.14.src.rpm	996d95936af89e029b2697e1b8913f3cbf7369c854b678d8549bc05203f919c4	-	ol7_x86_64_latest_ELS
	grub2-2.02-0.87.0.29.el7_9.14.x86_64.rpm	663b3619f96d073d41f6b264b99661d4137c1eaa342500384c39cdb823592b21	-	ol7_x86_64_latest_ELS
	grub2-common-2.02-0.87.0.29.el7_9.14.noarch.rpm	89c523761271ea5d06be56d2f892e928d72e112f7bdb6142b28194c34878bc5f	-	ol7_x86_64_latest_ELS
	grub2-efi-ia32-2.02-0.87.0.29.el7_9.14.x86_64.rpm	dae53d98a48262976f296ec66bc17d348a3145076ee5bfcbdf0d68b48dbb6ccc	-	ol7_x86_64_latest_ELS
	grub2-efi-ia32-cdboot-2.02-0.87.0.29.el7_9.14.x86_64.rpm	76902fd9f64f56f529b81bd1012bb4b7b6c13ede80c890a0adfc62b8e3034687	-	ol7_x86_64_latest_ELS
	grub2-efi-ia32-modules-2.02-0.87.0.29.el7_9.14.noarch.rpm	f20a5ff4118936c7f09db896d5bd1ed9919599d91fd92937d15f66d588a50115	-	ol7_x86_64_latest_ELS
	grub2-efi-x64-2.02-0.87.0.29.el7_9.14.x86_64.rpm	7bc486fe86c6c0d5b8b6cfa026de8b768d27fc883349f0488ac698c45467f836	-	ol7_x86_64_latest_ELS
	grub2-efi-x64-cdboot-2.02-0.87.0.29.el7_9.14.x86_64.rpm	436f44e448334b341bb35d1cd4963ee333745aa46eb73fe89bcb1faf187b0254	-	ol7_x86_64_latest_ELS
	grub2-efi-x64-modules-2.02-0.87.0.29.el7_9.14.noarch.rpm	d04902b81d233b79c44f65775ece91e851f649257dfd3b0856f2ce64646c5cec	-	ol7_x86_64_latest_ELS
	grub2-pc-2.02-0.87.0.29.el7_9.14.x86_64.rpm	3ded781d2831e969a7f14acc63768dc6137c9b1d94881194a9ad19a545688fbc	-	ol7_x86_64_latest_ELS
	grub2-pc-modules-2.02-0.87.0.29.el7_9.14.noarch.rpm	d882953cb0385c0fca07790bb197c76dae4aabc84efcd9bd56ed1dec73c61b3d	-	ol7_x86_64_latest_ELS
	grub2-tools-2.02-0.87.0.29.el7_9.14.x86_64.rpm	73ac51734787f9e3eb327fb3f115a81acadadf7d9c017f61aa3d4f41b65571b8	-	ol7_x86_64_latest_ELS
	grub2-tools-extra-2.02-0.87.0.29.el7_9.14.x86_64.rpm	8b035b1936e458c496e32328899a85e73ae0f802383f59d40fe42ca66c47ba0e	-	ol7_x86_64_latest_ELS
	grub2-tools-minimal-2.02-0.87.0.29.el7_9.14.x86_64.rpm	82ffe7f3a655aee59f36352ca2f15feeab217468faa962c972c7a49f90890160	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team