ALSA-2024:2456

See a problem?
Source
https://errata.almalinux.org/9/ALSA-2024-2456.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:2456.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2024:2456
Related
Published
2024-04-30T00:00:00Z
Modified
2024-05-07T15:07:50Z
Summary
Moderate: grub2 security update
Details

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

  • grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048)
  • grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692)
  • grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:9 / grub2-common

Package

Name
grub2-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-efi-aa64

Package

Name
grub2-efi-aa64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-efi-aa64-cdboot

Package

Name
grub2-efi-aa64-cdboot

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-efi-aa64-modules

Package

Name
grub2-efi-aa64-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-efi-x64

Package

Name
grub2-efi-x64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-efi-x64-cdboot

Package

Name
grub2-efi-x64-cdboot

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-efi-x64-modules

Package

Name
grub2-efi-x64-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-pc

Package

Name
grub2-pc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-pc-modules

Package

Name
grub2-pc-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-ppc64le

Package

Name
grub2-ppc64le

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-ppc64le-modules

Package

Name
grub2-ppc64le-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-tools

Package

Name
grub2-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-tools-efi

Package

Name
grub2-tools-efi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-tools-extra

Package

Name
grub2-tools-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1

AlmaLinux:9 / grub2-tools-minimal

Package

Name
grub2-tools-minimal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-77.el9.alma.1