Summary
The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.
Security Fix(es):
* grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | grub2 | 1:2.02-123.el8 |
Vulnerabilities 1
-
Unscored —
A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission s…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1809246
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1899903
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1914575
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2016269
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2020927
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2024170
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2048904
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2061252
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2069157