—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA256<\/p>\n
=====================================================================
\nRed Hat Security Advisory<\/p>\n
Synopsis: Low: grub2 security, bug fix, and enhancement update
\nAdvisory ID: RHSA-2022:2110-01
\nProduct: Red Hat Enterprise Linux
\nAdvisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:2110
\nIssue date: 2022-05-10
\nCVE Names: CVE-2021-3981
\n=====================================================================<\/p>\n
1. Summary:<\/p>\n
An update for grub2 is now available for Red Hat Enterprise Linux 8.<\/p>\n
Red Hat Product Security has rated this update as having a security impact
\nof Low. A Common Vulnerability Scoring System (CVSS) base score, which
\ngives a detailed severity rating, is available for each vulnerability from
\nthe CVE link(s) in the References section.<\/p>\n
2. Relevant releases\/architectures:<\/p>\n
Red Hat Enterprise Linux BaseOS (v. 8) – aarch64, noarch, ppc64le, x86_64<\/p>\n
3. Description:<\/p>\n
The grub2 packages provide version 2 of the Grand Unified Boot Loader
\n(GRUB), a highly configurable and customizable boot loader with modular
\narchitecture. The packages support a variety of kernel formats, file
\nsystems, computer architectures, and hardware devices.<\/p>\n
Security Fix(es):<\/p>\n
* grub2: Incorrect permission in grub.cfg allow unprivileged user to read
\nthe file content (CVE-2021-3981)<\/p>\n
For more details about the security issue(s), including the impact, a CVSS
\nscore, acknowledgments, and other related information, refer to the CVE
\npage(s) listed in the References section.<\/p>\n
Additional Changes:<\/p>\n
For detailed information on changes in this release, see the Red Hat
\nEnterprise Linux 8.6 Release Notes linked from the References section.<\/p>\n
4. Solution:<\/p>\n
For details on how to apply this update, which includes the changes
\ndescribed in this advisory, refer to:<\/p>\n
https:\/\/access.redhat.com\/articles\/11258<\/p>\n
5. Bugs fixed (https:\/\/bugzilla.redhat.com\/):<\/p>\n
1809246 – [RFE] GRUB does not consider information from proxy dhcp server
\n1899903 – grub2-mkconfig is never run on kernel upgrade even if GRUB_ENABLE_BLSCFG=false
\n1914575 – grub-boot-success.service should not be started inside systemd-nspawn container
\n2016269 – RPM grub2-tools-minimal is shipping prelink config files although prelink is absent in rhel8
\n2020927 – GRUB_TERMINAL_INPUT=at_keyboard makes grub stay on boot menu instead of starting the timeout
\n2024170 – CVE-2021-3981 grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content
\n2048904 – Cannot EFI chainload onto local disk when EFI partition is in Software Raid
\n2061252 – grub on OpenFirmware : search –hint-ieee1275= does not work
\n2069157 – grub2 signed by Red Hat Test Certificate<\/p>\n
6. Package List:<\/p>\n
Red Hat Enterprise Linux BaseOS (v. 8):<\/p>\n
Source:
\ngrub2-2.02-123.el8.src.rpm<\/p>\n
aarch64:
\ngrub2-debuginfo-2.02-123.el8.aarch64.rpm
\ngrub2-debugsource-2.02-123.el8.aarch64.rpm
\ngrub2-efi-aa64-2.02-123.el8.aarch64.rpm
\ngrub2-efi-aa64-cdboot-2.02-123.el8.aarch64.rpm
\ngrub2-tools-2.02-123.el8.aarch64.rpm
\ngrub2-tools-debuginfo-2.02-123.el8.aarch64.rpm
\ngrub2-tools-extra-2.02-123.el8.aarch64.rpm
\ngrub2-tools-extra-debuginfo-2.02-123.el8.aarch64.rpm
\ngrub2-tools-minimal-2.02-123.el8.aarch64.rpm
\ngrub2-tools-minimal-debuginfo-2.02-123.el8.aarch64.rpm<\/p>\n
noarch:
\ngrub2-common-2.02-123.el8.noarch.rpm
\ngrub2-efi-aa64-modules-2.02-123.el8.noarch.rpm
\ngrub2-efi-ia32-modules-2.02-123.el8.noarch.rpm
\ngrub2-efi-x64-modules-2.02-123.el8.noarch.rpm
\ngrub2-pc-modules-2.02-123.el8.noarch.rpm
\ngrub2-ppc64le-modules-2.02-123.el8.noarch.rpm<\/p>\n
ppc64le:
\ngrub2-debuginfo-2.02-123.el8.ppc64le.rpm
\ngrub2-debugsource-2.02-123.el8.ppc64le.rpm
\ngrub2-ppc64le-2.02-123.el8.ppc64le.rpm
\ngrub2-tools-2.02-123.el8.ppc64le.rpm
\ngrub2-tools-debuginfo-2.02-123.el8.ppc64le.rpm
\ngrub2-tools-extra-2.02-123.el8.ppc64le.rpm
\ngrub2-tools-extra-debuginfo-2.02-123.el8.ppc64le.rpm
\ngrub2-tools-minimal-2.02-123.el8.ppc64le.rpm
\ngrub2-tools-minimal-debuginfo-2.02-123.el8.ppc64le.rpm<\/p>\n
x86_64:
\ngrub2-debuginfo-2.02-123.el8.x86_64.rpm
\ngrub2-debugsource-2.02-123.el8.x86_64.rpm
\ngrub2-efi-ia32-2.02-123.el8.x86_64.rpm
\ngrub2-efi-ia32-cdboot-2.02-123.el8.x86_64.rpm
\ngrub2-efi-x64-2.02-123.el8.x86_64.rpm
\ngrub2-efi-x64-cdboot-2.02-123.el8.x86_64.rpm
\ngrub2-pc-2.02-123.el8.x86_64.rpm
\ngrub2-tools-2.02-123.el8.x86_64.rpm
\ngrub2-tools-debuginfo-2.02-123.el8.x86_64.rpm
\ngrub2-tools-efi-2.02-123.el8.x86_64.rpm
\ngrub2-tools-efi-debuginfo-2.02-123.el8.x86_64.rpm
\ngrub2-tools-extra-2.02-123.el8.x86_64.rpm
\ngrub2-tools-extra-debuginfo-2.02-123.el8.x86_64.rpm
\ngrub2-tools-minimal-2.02-123.el8.x86_64.rpm
\ngrub2-tools-minimal-debuginfo-2.02-123.el8.x86_64.rpm<\/p>\n
These packages are GPG signed by Red Hat for security. Our key and
\ndetails on how to verify the signature are available from
\nhttps:\/\/access.redhat.com\/security\/team\/key\/<\/p>\n
7. References:<\/p>\n
https:\/\/access.redhat.com\/security\/cve\/CVE-2021-3981
\nhttps:\/\/access.redhat.com\/security\/updates\/classification\/#low
\nhttps:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/8\/html\/8.6_release_notes\/<\/p>\n
8. Contact:<\/p>\n
The Red Hat security contact is <secalert@redhat.com>. More contact
\ndetails at https:\/\/access.redhat.com\/security\/team\/contact\/<\/p>\n
Copyright 2022 Red Hat, Inc.
\n—–BEGIN PGP SIGNATURE—–
\nVersion: GnuPG v1<\/p>\n
iQIVAwUBYnqRstzjgjWX9erEAQgbGA\/\/Yt1p6YQS2BSVdTiseVPgoc+JJui5N5wn
\n\/YkZy6vGvKSdtaYNegyb4arqW8+qIbLrlNF5j1p16nrZ2a+ONRFxozO866M1FIXa
\nLc6edJKULuW20398JD7Txu4mYnTZO692HLHSYvTsadS6wF+oXm1NqoTnaQBJM6F+
\nMiTxXE6iOb247LTNElA2Zqq+0qGR4EJ84DNmF82Y4OVmcawCpCmVQFPNXRasfhNl
\nEqKuhGvt3vRCW5VY51b6nwC5b+AiAClFkIIlkfaurqgZzPInnX0fZyrO41Jy81So
\nECK+ZZlOpZDhh8r6XnjPVvzVHwY8iG3LvAPvG3UWqwcXViRUheajdL2LhJyPjg9j
\nsf2Q+eVrf9WfKGWdPHsw1+bu08ebHkKdAth6psW7QuUuCjj4AW+X2amm0jE\/eFUi
\nSLiSfh3V7rhpLWaPg+S4ptTyuAswpkXR2smMBmljojfx3wGvJVelO+183asFHR4B
\n+aXSxw05jkiwNZB+7TMdhNiiKkC7TagxeQcMqMqD+yvk8mOeTBNafG7WzbyLO8io
\nHFn8VrzXWc3RHJcyMT3oeR6bBVM3ro1mm8BOiikK1nFwNJtkT0ct+Yj9glwUXmGy
\nEAQempaqwkyyrYtmrIdDu2pp07bO2\/LHHloDm4JF3V8bHfWlHc\/IPEP6QiibSx5P
\nQ+YUwE3ShUs=
\n=ZVXv
\n—–END PGP SIGNATURE—–
\n—
\nRHSA-announce mailing list
\nRHSA-announce@redhat.com
\nhttps:\/\/listman.redhat.com\/mailman\/listinfo\/rhsa-announce<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Low: grub2 security, bug fix, and enhancement update Advisory ID: RHSA-2022:2110-01 Product: Red Hat Enterprise Linux Advisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:2110 Issue date: 2022-05-10 CVE Names: CVE-2021-3981 ===================================================================== 1. Summary: An update for grub2 is now available for Red Hat Enterprise Linux 8. Red Hat …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-24348","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/24348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=24348"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/24348\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=24348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=24348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=24348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}