ALSA-2024:3184

Dashboard / Vulnerabilities / ALSA-2024:3184

ALSA-2024:3184

Summary: Moderate: grub2 security update

Details: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048) * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692) * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References: https://access.redhat.com/errata/RHSA-2024:3184, https://access.redhat.com/security/cve/CVE-2023-4692, https://access.redhat.com/security/cve/CVE-2023-4693, https://access.redhat.com/security/cve/CVE-2024-1048, https://bugzilla.redhat.com/2236613, https://bugzilla.redhat.com/2238343, https://bugzilla.redhat.com/2256827, https://errata.almalinux.org/8/ALSA-2024-3184.html