Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Rocky Linux 8 RLSA-2022:5095 Important: Grub2 Boot Loader Security Fix

rocky
Calendar Grey September 2, 2022
Rockylinux Esm H88
AlmaLinux reveals significant security patches for bootloaders and associated software, tackling severe vulnerabilities in grub2.
Important: grub2, mokutil, shim, and shim-unsigned-x64 security update

Summary

An update for grub2, mokutil, shim, and shim-unsigned-x64 is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.


RPMs

grub2-2.02-123.el8_6.8.rocky.0.1.src.rpm

grub2-common-2.02-123.el8_6.8.rocky.0.1.noarch.rpm

grub2-debuginfo-2.02-123.el8_6.8.rocky.0.1.aarch64.rpm

grub2-debuginfo-2.02-123.el8_6.8.rocky.0.1.x86_64.rpm

grub2-debugsource-2.02-123.el8_6.8.rocky.0.1.aarch64.rpm

grub2-debugsource-2.02-123.el8_6.8.rocky.0.1.x86_64.rpm

grub2-efi-aa64-2.02-123.el8_6.8.rocky.0.1.aarch64.rpm

grub2-efi-aa64-cdboot-2.02-123.el8_6.8.rocky.0.1.aarch64.rpm

grub2-efi-aa64-modules-2.02-123.el8_6.8.rocky.0.1.noarch.rpm

grub2-efi-ia32-2.02-123.el8_6.8.rocky.0.1.x86_64.rpm

grub2-efi-ia32-cdboot-2.02-123.el8_6.8.rocky.0.1.x86_64.rpm

grub2-efi-ia32-modules-2.02-123.el8_6.8.rocky.0.1.noarch.rpm

grub2-efi-x64-2.02-123.el8_6.8.rocky.0.1.x86_64.rpm

grub2-efi-x64-cdboot-2.02-123.el8_6.8.rocky.0.1.x86_64.rpm

grub2-efi-x64-modules-2.02-123.el8_6.8.rocky.0.1.noarch.rpm

grub2-pc-2.02-123.el8_6.8.rocky.0.1.x86_64.rpm

grub2-pc-modules-2.02-123.el8_6.8.rocky.0.1.noarch.rpm

grub2-tools-2.02-123.el8_6.8.rocky.0.1.aarch64.rpm

Read the Full Advisory

References

No references

CVES

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3695.json

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3696.json

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3697.json

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28733.json

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28734.json

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28735.json

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-28736.json

Severity
important

Name: RLSA-2022:5095
Affected Products: Rocky Linux 8

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=1991685

https://bugzilla.redhat.com/show_bug.cgi?id=1991686

https://bugzilla.redhat.com/show_bug.cgi?id=1991687

https://bugzilla.redhat.com/show_bug.cgi?id=2083339

https://bugzilla.redhat.com/show_bug.cgi?id=2090463

https://bugzilla.redhat.com/show_bug.cgi?id=2090857

https://bugzilla.redhat.com/show_bug.cgi?id=2090899

https://bugzilla.redhat.com/show_bug.cgi?id=2092613


Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here