Skip to content
OpenAdvisories
High ELSA-2019-4869 1 CVE

Important: grub2 security update (Oracle Linux 8)

Published Dec 17, 2019 · Updated Dec 17, 2019

Ecosystem: Oracle Linux

Summary

[2.02-78.0.2]
- grub-set-bootflag: fix grubenv update method, fix CVE-2019-14865 [Orabug: 30607067]

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 8 grub2-common 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-aa64 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-aa64-cdboot 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-aa64-modules 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-ia32 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-ia32-cdboot 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-ia32-modules 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-x64 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-x64-cdboot 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-efi-x64-modules 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-pc 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-pc-modules 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-tools 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-tools-efi 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-tools-extra 1:2.02-78.0.2.el8
Oracle Linux · 8 grub2-tools-minimal 1:2.02-78.0.2.el8

Vulnerabilities 1

  • Medium 5.9
    CVE-2019-14865

    A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pre…

    [UNKNOWN] grub2