OESA-2024-1253

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1253

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-1253.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2024-1253

Upstream

CVE-2024-1048

Published

2024-03-08T11:07:09Z

Modified

2025-09-03T06:19:51.974494Z

Summary

grub2 security update

Details

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.

Security Fix(es):

A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.(CVE-2024-1048)

Database specific

{
    "severity": "Low"
}

References

Affected packages

openEuler:20.03-LTS-SP1

grub2

Package

Name: grub2
Purl: pkg:rpm/openEuler/grub2&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.04-32.oe1

Ecosystem specific

{
    "src": [
        "grub2-2.04-32.oe1.src.rpm"
    ],
    "aarch64": [
        "grub2-tools-minimal-2.04-32.oe1.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.04-32.oe1.aarch64.rpm",
        "grub2-tools-2.04-32.oe1.aarch64.rpm",
        "grub2-efi-aa64-2.04-32.oe1.aarch64.rpm",
        "grub2-debugsource-2.04-32.oe1.aarch64.rpm",
        "grub2-tools-extra-2.04-32.oe1.aarch64.rpm",
        "grub2-debuginfo-2.04-32.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "grub2-tools-extra-2.04-32.oe1.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.04-32.oe1.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.04-32.oe1.x86_64.rpm",
        "grub2-efi-x64-2.04-32.oe1.x86_64.rpm",
        "grub2-debuginfo-2.04-32.oe1.x86_64.rpm",
        "grub2-pc-2.04-32.oe1.x86_64.rpm",
        "grub2-efi-ia32-2.04-32.oe1.x86_64.rpm",
        "grub2-tools-minimal-2.04-32.oe1.x86_64.rpm",
        "grub2-tools-efi-2.04-32.oe1.x86_64.rpm",
        "grub2-debugsource-2.04-32.oe1.x86_64.rpm",
        "grub2-tools-2.04-32.oe1.x86_64.rpm"
    ],
    "noarch": [
        "grub2-efi-x64-modules-2.04-32.oe1.noarch.rpm",
        "grub2-efi-ia32-modules-2.04-32.oe1.noarch.rpm",
        "grub2-help-2.04-32.oe1.noarch.rpm",
        "grub2-pc-modules-2.04-32.oe1.noarch.rpm",
        "grub2-efi-aa64-modules-2.04-32.oe1.noarch.rpm",
        "grub2-common-2.04-32.oe1.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2024-1253.json"

openEuler:20.03-LTS-SP4

grub2

Package

Name: grub2
Purl: pkg:rpm/openEuler/grub2&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.04-38.oe2003sp4

Ecosystem specific

{
    "src": [
        "grub2-2.04-38.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "grub2-efi-aa64-2.04-38.oe2003sp4.aarch64.rpm",
        "grub2-tools-minimal-2.04-38.oe2003sp4.aarch64.rpm",
        "grub2-tools-extra-2.04-38.oe2003sp4.aarch64.rpm",
        "grub2-tools-2.04-38.oe2003sp4.aarch64.rpm",
        "grub2-debugsource-2.04-38.oe2003sp4.aarch64.rpm",
        "grub2-debuginfo-2.04-38.oe2003sp4.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.04-38.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "grub2-tools-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-debugsource-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-tools-extra-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-pc-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-tools-efi-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-efi-x64-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-tools-minimal-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-efi-ia32-2.04-38.oe2003sp4.x86_64.rpm",
        "grub2-debuginfo-2.04-38.oe2003sp4.x86_64.rpm"
    ],
    "noarch": [
        "grub2-efi-aa64-modules-2.04-38.oe2003sp4.noarch.rpm",
        "grub2-help-2.04-38.oe2003sp4.noarch.rpm",
        "grub2-pc-modules-2.04-38.oe2003sp4.noarch.rpm",
        "grub2-efi-x64-modules-2.04-38.oe2003sp4.noarch.rpm",
        "grub2-efi-ia32-modules-2.04-38.oe2003sp4.noarch.rpm",
        "grub2-common-2.04-38.oe2003sp4.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2024-1253.json"

openEuler:22.03-LTS

grub2

Package

Name: grub2
Purl: pkg:rpm/openEuler/grub2&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.06-44.oe2203sp3

Ecosystem specific

{
    "src": [
        "grub2-2.06-41.oe2203.src.rpm",
        "grub2-2.06-41.oe2203sp1.src.rpm",
        "grub2-2.06-41.oe2203sp2.src.rpm",
        "grub2-2.06-44.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "grub2-tools-extra-2.06-41.oe2203.aarch64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203.aarch64.rpm",
        "grub2-efi-aa64-2.06-41.oe2203.aarch64.rpm",
        "grub2-tools-2.06-41.oe2203.aarch64.rpm",
        "grub2-debuginfo-2.06-41.oe2203.aarch64.rpm",
        "grub2-debugsource-2.06-41.oe2203.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.06-41.oe2203.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-efi-aa64-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-tools-extra-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-tools-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-efi-aa64-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-tools-extra-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-tools-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-tools-extra-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-tools-minimal-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-debuginfo-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-tools-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-debugsource-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-efi-aa64-2.06-44.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "grub2-debuginfo-2.06-41.oe2203.x86_64.rpm",
        "grub2-efi-ia32-2.06-41.oe2203.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.06-41.oe2203.x86_64.rpm",
        "grub2-efi-x64-2.06-41.oe2203.x86_64.rpm",
        "grub2-tools-2.06-41.oe2203.x86_64.rpm",
        "grub2-debugsource-2.06-41.oe2203.x86_64.rpm",
        "grub2-pc-2.06-41.oe2203.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.06-41.oe2203.x86_64.rpm",
        "grub2-tools-efi-2.06-41.oe2203.x86_64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203.x86_64.rpm",
        "grub2-tools-extra-2.06-41.oe2203.x86_64.rpm",
        "grub2-tools-extra-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-x64-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-pc-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-tools-efi-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-ia32-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-tools-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-x64-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-pc-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-efi-ia32-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-efi-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-extra-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-extra-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-ia32-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-x64-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-tools-minimal-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-tools-efi-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-debugsource-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-pc-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-debuginfo-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-tools-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.06-44.oe2203sp3.x86_64.rpm"
    ],
    "noarch": [
        "grub2-efi-ia32-modules-2.06-41.oe2203.noarch.rpm",
        "grub2-common-2.06-41.oe2203.noarch.rpm",
        "grub2-help-2.06-41.oe2203.noarch.rpm",
        "grub2-efi-x64-modules-2.06-41.oe2203.noarch.rpm",
        "grub2-efi-aa64-modules-2.06-41.oe2203.noarch.rpm",
        "grub2-pc-modules-2.06-41.oe2203.noarch.rpm",
        "grub2-efi-aa64-modules-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-efi-x64-modules-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-help-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-common-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-pc-modules-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-efi-ia32-modules-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-efi-ia32-modules-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-common-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-efi-x64-modules-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-pc-modules-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-help-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-efi-aa64-modules-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-efi-ia32-modules-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-common-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-help-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-efi-x64-modules-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-efi-aa64-modules-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-pc-modules-2.06-44.oe2203sp3.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2024-1253.json"

openEuler:22.03-LTS-SP1

grub2

Package

Name: grub2
Purl: pkg:rpm/openEuler/grub2&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.06-41.oe2203sp1

Ecosystem specific

{
    "src": [
        "grub2-2.06-41.oe2203sp1.src.rpm"
    ],
    "aarch64": [
        "grub2-efi-aa64-cdboot-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-efi-aa64-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-tools-extra-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp1.aarch64.rpm",
        "grub2-tools-2.06-41.oe2203sp1.aarch64.rpm"
    ],
    "x86_64": [
        "grub2-tools-extra-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-x64-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-pc-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-tools-efi-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-ia32-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp1.x86_64.rpm",
        "grub2-tools-2.06-41.oe2203sp1.x86_64.rpm"
    ],
    "noarch": [
        "grub2-efi-aa64-modules-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-efi-x64-modules-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-help-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-common-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-pc-modules-2.06-41.oe2203sp1.noarch.rpm",
        "grub2-efi-ia32-modules-2.06-41.oe2203sp1.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2024-1253.json"

openEuler:22.03-LTS-SP2

grub2

Package

Name: grub2
Purl: pkg:rpm/openEuler/grub2&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.06-41.oe2203sp2

Ecosystem specific

{
    "src": [
        "grub2-2.06-41.oe2203sp2.src.rpm"
    ],
    "aarch64": [
        "grub2-efi-aa64-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-tools-extra-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp2.aarch64.rpm",
        "grub2-tools-2.06-41.oe2203sp2.aarch64.rpm"
    ],
    "x86_64": [
        "grub2-efi-x64-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-pc-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-debugsource-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-efi-ia32-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-efi-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-extra-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-debuginfo-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-tools-minimal-2.06-41.oe2203sp2.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.06-41.oe2203sp2.x86_64.rpm"
    ],
    "noarch": [
        "grub2-efi-ia32-modules-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-common-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-efi-x64-modules-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-pc-modules-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-help-2.06-41.oe2203sp2.noarch.rpm",
        "grub2-efi-aa64-modules-2.06-41.oe2203sp2.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2024-1253.json"

openEuler:22.03-LTS-SP3

grub2

Package

Name: grub2
Purl: pkg:rpm/openEuler/grub2&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.06-44.oe2203sp3

Ecosystem specific

{
    "src": [
        "grub2-2.06-44.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "grub2-tools-extra-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-efi-aa64-cdboot-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-tools-minimal-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-debuginfo-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-tools-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-debugsource-2.06-44.oe2203sp3.aarch64.rpm",
        "grub2-efi-aa64-2.06-44.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "grub2-tools-extra-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-ia32-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-x64-cdboot-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-x64-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-tools-minimal-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-tools-efi-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-debugsource-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-pc-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-debuginfo-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-tools-2.06-44.oe2203sp3.x86_64.rpm",
        "grub2-efi-ia32-cdboot-2.06-44.oe2203sp3.x86_64.rpm"
    ],
    "noarch": [
        "grub2-efi-ia32-modules-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-common-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-help-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-efi-x64-modules-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-efi-aa64-modules-2.06-44.oe2203sp3.noarch.rpm",
        "grub2-pc-modules-2.06-44.oe2203sp3.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2024-1253.json"