Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02725-1

Опубликовано: 07 авг. 2025
Источник: suse-cvrf

Описание

Security update for grub2

This update for grub2 fixes the following issues:

  • CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

Список пакетов

Image SLES12-SP5-Azure-BYOS
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-Azure-HPC-BYOS
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-Azure-HPC-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-Azure-SAP-BYOS
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-Azure-SAP-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-Azure-Standard-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-EC2-BYOS
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
grub2-x86_64-xen-2.02-190.1
Image SLES12-SP5-EC2-ECS-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
grub2-x86_64-xen-2.02-190.1
Image SLES12-SP5-EC2-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
grub2-x86_64-xen-2.02-190.1
Image SLES12-SP5-EC2-SAP-BYOS
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
grub2-x86_64-xen-2.02-190.1
Image SLES12-SP5-EC2-SAP-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
grub2-x86_64-xen-2.02-190.1
Image SLES12-SP5-GCE-BYOS
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-GCE-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-GCE-SAP-BYOS
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-GCE-SAP-On-Demand
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-x86_64-efi-2.02-190.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
grub2-2.02-190.1
grub2-i386-pc-2.02-190.1
grub2-snapper-plugin-2.02-190.1
grub2-systemd-sleep-plugin-2.02-190.1
grub2-x86_64-efi-2.02-190.1
grub2-x86_64-xen-2.02-190.1

Ссылки

Описание

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:grub2-2.02-190.1
Image SLES12-SP5-Azure-BYOS:grub2-i386-pc-2.02-190.1
Image SLES12-SP5-Azure-BYOS:grub2-x86_64-efi-2.02-190.1
Image SLES12-SP5-Azure-HPC-BYOS:grub2-2.02-190.1
Ссылки