Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02772-1

Опубликовано: 12 авг. 2025
Источник: suse-cvrf

Описание

Recommended update for grub2

This update for grub2 fixes the following issues:

  • CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

Other fixes:

  • Fix test -f and -s do not work properly over the network files served via tftp and http (bsc#1246157, bsc#1246237)
  • Skip mount point in grub_find_device function (bsc#1246231)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP6
grub2-2.12-150600.8.34.1
grub2-arm64-efi-2.12-150600.8.34.1
grub2-i386-pc-2.12-150600.8.34.1
grub2-powerpc-ieee1275-2.12-150600.8.34.1
grub2-s390x-emu-2.12-150600.8.34.1
grub2-snapper-plugin-2.12-150600.8.34.1
grub2-systemd-sleep-plugin-2.12-150600.8.34.1
grub2-x86_64-efi-2.12-150600.8.34.1
SUSE Linux Enterprise Module for Server Applications 15 SP6
grub2-x86_64-xen-2.12-150600.8.34.1
openSUSE Leap 15.6
grub2-2.12-150600.8.34.1
grub2-arm64-efi-2.12-150600.8.34.1
grub2-arm64-efi-debug-2.12-150600.8.34.1
grub2-arm64-efi-extras-2.12-150600.8.34.1
grub2-branding-upstream-2.12-150600.8.34.1
grub2-i386-pc-2.12-150600.8.34.1
grub2-i386-pc-debug-2.12-150600.8.34.1
grub2-i386-pc-extras-2.12-150600.8.34.1
grub2-i386-xen-debug-2.12-150600.8.34.1
grub2-powerpc-ieee1275-2.12-150600.8.34.1
grub2-powerpc-ieee1275-debug-2.12-150600.8.34.1
grub2-powerpc-ieee1275-extras-2.12-150600.8.34.1
grub2-s390x-emu-2.12-150600.8.34.1
grub2-s390x-emu-debug-2.12-150600.8.34.1
grub2-s390x-emu-extras-2.12-150600.8.34.1
grub2-snapper-plugin-2.12-150600.8.34.1
grub2-systemd-sleep-plugin-2.12-150600.8.34.1
grub2-x86_64-efi-2.12-150600.8.34.1
grub2-x86_64-efi-debug-2.12-150600.8.34.1
grub2-x86_64-efi-extras-2.12-150600.8.34.1
grub2-x86_64-xen-2.12-150600.8.34.1
grub2-x86_64-xen-debug-2.12-150600.8.34.1
grub2-x86_64-xen-extras-2.12-150600.8.34.1

Ссылки

Описание

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:grub2-2.12-150600.8.34.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:grub2-arm64-efi-2.12-150600.8.34.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:grub2-i386-pc-2.12-150600.8.34.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:grub2-powerpc-ieee1275-2.12-150600.8.34.1
Ссылки