Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 39: FEDORA-2024-d09797f550 Critical GRUB2 Out-of-Bounds Fix

fedora
Calendar Grey April 29, 2024
Dist Fedora Esm H88
Ubuntu 23 updates critical kernel vulnerabilities for enhanced protection and system reliability.
Security fix for CVE-2023-4692 Security fix for CVE-2023-4693 Fri Apr 12 2024 Nicolas Frayer nfrayer@redhat.com - 2.06-120 fs/xfs: Handle non-continuous data blocks in directory ex...

Summary

The GRand Unified Bootloader (GRUB) is a highly configurable and

customizable bootloader with modular architecture. It supports a rich

variety of kernel formats, file systems, computer architectures and

hardware devices.

Update Information:

Security fix for CVE-2023-4692 Security fix for CVE-2023-4693 Fri Apr 12 2024 Nicolas Frayer nfrayer@redhat.com - 2.06-120 fs/xfs: Handle non-continuous data blocks in directory extents Related: #2254370 Fri Mar 08 2024 Nicolas Frayer nfrayer@redhat.com - 2.06-119 GRUB2 NTFS driver vulnerabilities (CVE-2023-4692) (CVE-2023-4693) Resolves: #2236613 Resolves: #2241978 Resolves: #2241976 Resolves: #2238343

Topics%20covered

Topics Covered

security advisory critical Fedora system update out-of-bounds bootloader GRUB2

Change Log

* Fri Apr 12 2024 Nicolas Frayer - 2.06-120 - fs/xfs: Handle non-continuous data blocks in directory extents - Related: #2254370 * Fri Mar 8 2024 Nicolas Frayer - 2.06-119 - GRUB2 NTFS driver vulnerabilities - (CVE-2023-4692) - (CVE-2023-4693) - Resolves: #2236613 - Resolves: #2241978 - Resolves: #2241976 - Resolves: #2238343

References


[ 1 ] Bug #2236613 - CVE-2023-4692 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution https://bugzilla.redhat.com/show_bug.cgi?id=2236613 [ 2 ] Bug #2238343 - CVE-2023-4693 grub2: out-of-bounds read at fs/ntfs.c https://bugzilla.redhat.com/show_bug.cgi?id=2238343

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-d09797f550' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: grub2
Product: Fedora 39
Version: 2.06
Release: 120.fc39
URL:
Summary: Bootloader with support for Linux, Multiboot and more

Topics%20covered

Topics Covered

security advisory critical Fedora system update out-of-bounds bootloader GRUB2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here