RLSA-2022:2110
Dashboard / Vulnerabilities / RLSA-2022:2110
Summary: Low: grub2 security, bug fix, and enhancement update
Details: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fix(es): * grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.
References: https://errata.rockylinux.org/RLSA-2022:2110, https://bugzilla.redhat.com/show_bug.cgi?id=1809246, https://bugzilla.redhat.com/show_bug.cgi?id=1899903, https://bugzilla.redhat.com/show_bug.cgi?id=1914575, https://bugzilla.redhat.com/show_bug.cgi?id=2016269, https://bugzilla.redhat.com/show_bug.cgi?id=2020927, https://bugzilla.redhat.com/show_bug.cgi?id=2024170, https://bugzilla.redhat.com/show_bug.cgi?id=2048904, https://bugzilla.redhat.com/show_bug.cgi?id=2061252, https://bugzilla.redhat.com/show_bug.cgi?id=2069157
Affected packages
Package
Name: grub2
Purl: pkg:rpm/rocky-linux/grub2?distro=rocky-linux-8-6-legacy&epoch=1
Affected ranges
Type: ECOSYSTEM
Events:
