openSUSE: 2021:0462-1 important: grub2
Description
This update for grub2 fixes the following issues: grub2 implements the new "SBAT" method for SHIM based secure boot revocation. (bsc#1182057) - CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711) - CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883) - CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264) - CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970) - CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262) - CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263) - Fixed chainloading windows on dual boot machine (bsc#1183073) This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-462=1
Package List
- openSUSE Leap 15.2 (i586 x86_64): grub2-2.04-lp152.7.22.7 grub2-branding-upstream-2.04-lp152.7.22.7 grub2-debuginfo-2.04-lp152.7.22.7 grub2-debugsource-2.04-lp152.7.22.7 - openSUSE Leap 15.2 (noarch): grub2-i386-efi-2.04-lp152.7.22.7 grub2-i386-efi-debug-2.04-lp152.7.22.7 grub2-i386-pc-2.04-lp152.7.22.7 grub2-i386-pc-debug-2.04-lp152.7.22.7 grub2-i386-xen-2.04-lp152.7.22.7 grub2-snapper-plugin-2.04-lp152.7.22.7 grub2-systemd-sleep-plugin-2.04-lp152.7.22.7 grub2-x86_64-efi-2.04-lp152.7.22.7 grub2-x86_64-efi-debug-2.04-lp152.7.22.7 grub2-x86_64-xen-2.04-lp152.7.22.7
References
https://www.suse.com/security/cve/CVE-2020-14372.html https://www.suse.com/security/cve/CVE-2020-25632.html https://www.suse.com/security/cve/CVE-2020-25647.html https://www.suse.com/security/cve/CVE-2020-27749.html https://www.suse.com/security/cve/CVE-2020-27779.html https://www.suse.com/security/cve/CVE-2021-20225.html https://www.suse.com/security/cve/CVE-2021-20233.html https://bugzilla.suse.com/1175970 https://bugzilla.suse.com/1176711 https://bugzilla.suse.com/1177883 https://bugzilla.suse.com/1179264 https://bugzilla.suse.com/1179265 https://bugzilla.suse.com/1182057 https://bugzilla.suse.com/1182262 https://bugzilla.suse.com/1182263 https://bugzilla.suse.com/1183073