Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2022-5095

Опубликовано: 04 июл. 2022
Источник: oracle-oval
Платформа: Oracle Linux 8

Описание

ELSA-2022-5095: grub2, mokutil, shim, and shim-unsigned-x64 security update (IMPORTANT)

[2.02-123.0.4.el8_6.8]

  • enable multiboot2 [Orabug: 34285558]
  • backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462]
  • backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462]
  • Backport some better script logic for BTRFS support [Orabug: 32448171]
  • Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  • Update Oracle SBAT data [Orabug: 32670033]
  • Use new signing certificate [Orabug: 32670033]
  • Fix various coverity issues [Orabug: 32530657]
  • Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  • Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  • honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  • set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  • Update upstream references [Orabug: 26388226]
  • Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  • fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  • Fix comparison in patch for 18504756
  • Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  • Put 'with' in menuentry instead of 'using' [Orabug: 18504756]
  • Use different titles for UEK and RHCK kernels [Orabug: 18504756]

[2.06-123.el8_6.8]

  • CVE fixes for 2022-06-07
  • CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  • CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  • Resolves: #2031899

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

grub2-common

2.02-123.0.7.el8_6.8

grub2-efi-aa64

2.02-123.0.7.el8_6.8

grub2-efi-aa64-cdboot

2.02-123.0.7.el8_6.8

grub2-efi-aa64-modules

2.02-123.0.7.el8_6.8

grub2-efi-ia32-modules

2.02-123.0.7.el8_6.8

grub2-efi-x64-modules

2.02-123.0.7.el8_6.8

grub2-pc-modules

2.02-123.0.7.el8_6.8

grub2-tools

2.02-123.0.7.el8_6.8

grub2-tools-extra

2.02-123.0.7.el8_6.8

grub2-tools-minimal

2.02-123.0.7.el8_6.8

Oracle Linux x86_64

grub2-common

2.02-123.0.7.el8_6.8

grub2-efi-aa64-modules

2.02-123.0.7.el8_6.8

grub2-efi-ia32

2.02-123.0.7.el8_6.8

grub2-efi-ia32-cdboot

2.02-123.0.7.el8_6.8

grub2-efi-ia32-modules

2.02-123.0.7.el8_6.8

grub2-efi-x64

2.02-123.0.7.el8_6.8

grub2-efi-x64-cdboot

2.02-123.0.7.el8_6.8

grub2-efi-x64-modules

2.02-123.0.7.el8_6.8

grub2-pc

2.02-123.0.7.el8_6.8

grub2-pc-modules

2.02-123.0.7.el8_6.8

grub2-tools

2.02-123.0.7.el8_6.8

grub2-tools-efi

2.02-123.0.7.el8_6.8

grub2-tools-extra

2.02-123.0.7.el8_6.8

grub2-tools-minimal

2.02-123.0.7.el8_6.8

Связанные уязвимости

rocky
около 3 лет назад

Important: grub2, mokutil, shim, and shim-unsigned-x64 security update

rocky
около 3 лет назад

Important: grub2, mokutil, shim, and shim-unsigned-x64 security update

oracle-oval
почти 3 года назад

ELSA-2022-9596: grub2 security update (IMPORTANT)

oracle-oval
почти 3 года назад

ELSA-2022-9595: grub2 security update (IMPORTANT)

oracle-oval
почти 3 года назад

ELSA-2022-5099: grub2 security update (IMPORTANT)

Уязвимость ELSA-2022-5095