An update for grub2 is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP2 and openEuler-22.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2024-1253 Final 1.0 1.0 2024-03-08 Initial 2024-03-08 2024-03-08 openEuler SA Tool V1.0 2024-03-08 grub2 security update An update for grub2 is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP2 and openEuler-22.03-LTS-SP3. GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es): A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.(CVE-2024-1048) An update for grub2 is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP2 and openEuler-22.03-LTS-SP3. openEuler Security has rated this update as having a security impact of low. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Low grub2 https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1253 https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2024-1048 https://nvd.nist.gov/vuln/detail/CVE-2024-1048 openEuler-20.03-LTS-SP1 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP2 openEuler-22.03-LTS-SP3 grub2-tools-minimal-2.04-32.oe1.aarch64.rpm grub2-efi-aa64-cdboot-2.04-32.oe1.aarch64.rpm grub2-tools-2.04-32.oe1.aarch64.rpm grub2-efi-aa64-2.04-32.oe1.aarch64.rpm grub2-debugsource-2.04-32.oe1.aarch64.rpm grub2-tools-extra-2.04-32.oe1.aarch64.rpm grub2-debuginfo-2.04-32.oe1.aarch64.rpm grub2-efi-aa64-2.04-38.oe2003sp4.aarch64.rpm grub2-tools-minimal-2.04-38.oe2003sp4.aarch64.rpm grub2-tools-extra-2.04-38.oe2003sp4.aarch64.rpm grub2-tools-2.04-38.oe2003sp4.aarch64.rpm grub2-debugsource-2.04-38.oe2003sp4.aarch64.rpm grub2-debuginfo-2.04-38.oe2003sp4.aarch64.rpm grub2-efi-aa64-cdboot-2.04-38.oe2003sp4.aarch64.rpm grub2-tools-extra-2.06-41.oe2203.aarch64.rpm grub2-tools-minimal-2.06-41.oe2203.aarch64.rpm grub2-efi-aa64-2.06-41.oe2203.aarch64.rpm grub2-tools-2.06-41.oe2203.aarch64.rpm grub2-debuginfo-2.06-41.oe2203.aarch64.rpm grub2-debugsource-2.06-41.oe2203.aarch64.rpm grub2-efi-aa64-cdboot-2.06-41.oe2203.aarch64.rpm grub2-efi-aa64-cdboot-2.06-41.oe2203sp1.aarch64.rpm grub2-debuginfo-2.06-41.oe2203sp1.aarch64.rpm grub2-efi-aa64-2.06-41.oe2203sp1.aarch64.rpm grub2-debugsource-2.06-41.oe2203sp1.aarch64.rpm grub2-tools-extra-2.06-41.oe2203sp1.aarch64.rpm grub2-tools-minimal-2.06-41.oe2203sp1.aarch64.rpm grub2-tools-2.06-41.oe2203sp1.aarch64.rpm grub2-efi-aa64-2.06-41.oe2203sp2.aarch64.rpm grub2-efi-aa64-cdboot-2.06-41.oe2203sp2.aarch64.rpm grub2-debugsource-2.06-41.oe2203sp2.aarch64.rpm grub2-tools-extra-2.06-41.oe2203sp2.aarch64.rpm grub2-tools-minimal-2.06-41.oe2203sp2.aarch64.rpm grub2-debuginfo-2.06-41.oe2203sp2.aarch64.rpm grub2-tools-2.06-41.oe2203sp2.aarch64.rpm grub2-tools-extra-2.06-44.oe2203sp3.aarch64.rpm grub2-efi-aa64-cdboot-2.06-44.oe2203sp3.aarch64.rpm grub2-tools-minimal-2.06-44.oe2203sp3.aarch64.rpm grub2-debuginfo-2.06-44.oe2203sp3.aarch64.rpm grub2-tools-2.06-44.oe2203sp3.aarch64.rpm grub2-debugsource-2.06-44.oe2203sp3.aarch64.rpm grub2-efi-aa64-2.06-44.oe2203sp3.aarch64.rpm grub2-efi-x64-modules-2.04-32.oe1.noarch.rpm grub2-efi-ia32-modules-2.04-32.oe1.noarch.rpm grub2-help-2.04-32.oe1.noarch.rpm grub2-pc-modules-2.04-32.oe1.noarch.rpm grub2-efi-aa64-modules-2.04-32.oe1.noarch.rpm grub2-common-2.04-32.oe1.noarch.rpm grub2-efi-aa64-modules-2.04-38.oe2003sp4.noarch.rpm grub2-help-2.04-38.oe2003sp4.noarch.rpm grub2-pc-modules-2.04-38.oe2003sp4.noarch.rpm grub2-efi-x64-modules-2.04-38.oe2003sp4.noarch.rpm grub2-efi-ia32-modules-2.04-38.oe2003sp4.noarch.rpm grub2-common-2.04-38.oe2003sp4.noarch.rpm grub2-efi-ia32-modules-2.06-41.oe2203.noarch.rpm grub2-common-2.06-41.oe2203.noarch.rpm grub2-help-2.06-41.oe2203.noarch.rpm grub2-efi-x64-modules-2.06-41.oe2203.noarch.rpm grub2-efi-aa64-modules-2.06-41.oe2203.noarch.rpm grub2-pc-modules-2.06-41.oe2203.noarch.rpm grub2-efi-aa64-modules-2.06-41.oe2203sp1.noarch.rpm grub2-efi-x64-modules-2.06-41.oe2203sp1.noarch.rpm grub2-help-2.06-41.oe2203sp1.noarch.rpm grub2-common-2.06-41.oe2203sp1.noarch.rpm grub2-pc-modules-2.06-41.oe2203sp1.noarch.rpm grub2-efi-ia32-modules-2.06-41.oe2203sp1.noarch.rpm grub2-efi-ia32-modules-2.06-41.oe2203sp2.noarch.rpm grub2-common-2.06-41.oe2203sp2.noarch.rpm grub2-efi-x64-modules-2.06-41.oe2203sp2.noarch.rpm grub2-pc-modules-2.06-41.oe2203sp2.noarch.rpm grub2-help-2.06-41.oe2203sp2.noarch.rpm grub2-efi-aa64-modules-2.06-41.oe2203sp2.noarch.rpm grub2-efi-ia32-modules-2.06-44.oe2203sp3.noarch.rpm grub2-common-2.06-44.oe2203sp3.noarch.rpm grub2-help-2.06-44.oe2203sp3.noarch.rpm grub2-efi-x64-modules-2.06-44.oe2203sp3.noarch.rpm grub2-efi-aa64-modules-2.06-44.oe2203sp3.noarch.rpm grub2-pc-modules-2.06-44.oe2203sp3.noarch.rpm grub2-2.04-32.oe1.src.rpm grub2-2.04-38.oe2003sp4.src.rpm grub2-2.06-41.oe2203.src.rpm grub2-2.06-41.oe2203sp1.src.rpm grub2-2.06-41.oe2203sp2.src.rpm grub2-2.06-44.oe2203sp3.src.rpm grub2-tools-extra-2.04-32.oe1.x86_64.rpm grub2-efi-x64-cdboot-2.04-32.oe1.x86_64.rpm grub2-efi-ia32-cdboot-2.04-32.oe1.x86_64.rpm grub2-efi-x64-2.04-32.oe1.x86_64.rpm grub2-debuginfo-2.04-32.oe1.x86_64.rpm grub2-pc-2.04-32.oe1.x86_64.rpm grub2-efi-ia32-2.04-32.oe1.x86_64.rpm grub2-tools-minimal-2.04-32.oe1.x86_64.rpm grub2-tools-efi-2.04-32.oe1.x86_64.rpm grub2-debugsource-2.04-32.oe1.x86_64.rpm grub2-tools-2.04-32.oe1.x86_64.rpm grub2-tools-2.04-38.oe2003sp4.x86_64.rpm grub2-efi-ia32-cdboot-2.04-38.oe2003sp4.x86_64.rpm grub2-debugsource-2.04-38.oe2003sp4.x86_64.rpm grub2-efi-x64-cdboot-2.04-38.oe2003sp4.x86_64.rpm grub2-tools-extra-2.04-38.oe2003sp4.x86_64.rpm grub2-pc-2.04-38.oe2003sp4.x86_64.rpm grub2-tools-efi-2.04-38.oe2003sp4.x86_64.rpm grub2-efi-x64-2.04-38.oe2003sp4.x86_64.rpm grub2-tools-minimal-2.04-38.oe2003sp4.x86_64.rpm grub2-efi-ia32-2.04-38.oe2003sp4.x86_64.rpm grub2-debuginfo-2.04-38.oe2003sp4.x86_64.rpm grub2-debuginfo-2.06-41.oe2203.x86_64.rpm grub2-efi-ia32-2.06-41.oe2203.x86_64.rpm grub2-efi-ia32-cdboot-2.06-41.oe2203.x86_64.rpm grub2-efi-x64-2.06-41.oe2203.x86_64.rpm grub2-tools-2.06-41.oe2203.x86_64.rpm grub2-debugsource-2.06-41.oe2203.x86_64.rpm grub2-pc-2.06-41.oe2203.x86_64.rpm grub2-efi-x64-cdboot-2.06-41.oe2203.x86_64.rpm grub2-tools-efi-2.06-41.oe2203.x86_64.rpm grub2-tools-minimal-2.06-41.oe2203.x86_64.rpm grub2-tools-extra-2.06-41.oe2203.x86_64.rpm grub2-tools-extra-2.06-41.oe2203sp1.x86_64.rpm grub2-efi-x64-2.06-41.oe2203sp1.x86_64.rpm grub2-pc-2.06-41.oe2203sp1.x86_64.rpm grub2-efi-ia32-cdboot-2.06-41.oe2203sp1.x86_64.rpm grub2-tools-efi-2.06-41.oe2203sp1.x86_64.rpm grub2-efi-ia32-2.06-41.oe2203sp1.x86_64.rpm grub2-debugsource-2.06-41.oe2203sp1.x86_64.rpm grub2-efi-x64-cdboot-2.06-41.oe2203sp1.x86_64.rpm grub2-debuginfo-2.06-41.oe2203sp1.x86_64.rpm grub2-tools-minimal-2.06-41.oe2203sp1.x86_64.rpm grub2-tools-2.06-41.oe2203sp1.x86_64.rpm grub2-efi-x64-2.06-41.oe2203sp2.x86_64.rpm grub2-pc-2.06-41.oe2203sp2.x86_64.rpm grub2-debugsource-2.06-41.oe2203sp2.x86_64.rpm grub2-efi-ia32-2.06-41.oe2203sp2.x86_64.rpm grub2-tools-efi-2.06-41.oe2203sp2.x86_64.rpm grub2-tools-extra-2.06-41.oe2203sp2.x86_64.rpm grub2-efi-ia32-cdboot-2.06-41.oe2203sp2.x86_64.rpm grub2-debuginfo-2.06-41.oe2203sp2.x86_64.rpm grub2-tools-2.06-41.oe2203sp2.x86_64.rpm grub2-tools-minimal-2.06-41.oe2203sp2.x86_64.rpm grub2-efi-x64-cdboot-2.06-41.oe2203sp2.x86_64.rpm grub2-tools-extra-2.06-44.oe2203sp3.x86_64.rpm grub2-efi-ia32-2.06-44.oe2203sp3.x86_64.rpm grub2-efi-x64-cdboot-2.06-44.oe2203sp3.x86_64.rpm grub2-efi-x64-2.06-44.oe2203sp3.x86_64.rpm grub2-tools-minimal-2.06-44.oe2203sp3.x86_64.rpm grub2-tools-efi-2.06-44.oe2203sp3.x86_64.rpm grub2-debugsource-2.06-44.oe2203sp3.x86_64.rpm grub2-pc-2.06-44.oe2203sp3.x86_64.rpm grub2-debuginfo-2.06-44.oe2203sp3.x86_64.rpm grub2-tools-2.06-44.oe2203sp3.x86_64.rpm grub2-efi-ia32-cdboot-2.06-44.oe2203sp3.x86_64.rpm A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks. 2024-03-08 CVE-2024-1048 openEuler-20.03-LTS-SP1 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP2 openEuler-22.03-LTS-SP3 Low 3.3 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L grub2 security update 2024-03-08 https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1253