| Summary: | grub2 new security issues CVE-2021-369[5-7], CVE-2022-2601, CVE-2022-3775, CVE-2022-2873[3-7] | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | Thierry Vignaud <thierry.vignaud> |
| Status: | RESOLVED OLD | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | nicolas.salguero |
| Version: | 8 | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Source RPM: | grub2-2.06-16.mga9.src.rpm | CVE: | |
| Status comment: | Patches available from upstream | ||
| Bug Depends on: | |||
| Bug Blocks: | 29762 | ||
|
Description
David Walser
2022-06-08 18:28:05 CEST
David Walser
2022-06-08 18:28:24 CEST
Blocks:
(none) =>
29762 Patch backports from a couple other distro maintainers: https://dev.gentoo.org/~floppym/dist/grub-2.06-backports.tar.xz https://github.com/Foxboron/grub/commits/morten/2.06-backport-security openSUSE has issued an advisory for this today (June 10): https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5IS74LC4GHJQY7AUZBIDXFKHKIROVLHS/ Fedora has issued an advisory for this today (June 10): https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FGYCNFAG7E6EPHZ4MFBJZE3ZDEOCLW7N/ Assigning to tv who has been the principle maintainer of grub2 for some time. Assignee:
bugsquad =>
thierry.vignaud grub2-2.06-17.mga9 has patches for CVEs. Commit message mentions everything but CVE-2022-28737. Oversight or missing patch? RedHat has issued an advisory for this today (June 16): https://access.redhat.com/errata/RHSA-2022:5099 More GRUB2 security issues: https://lists.gnu.org/archive/html/grub-devel/2022-11/msg00059.html Debian has issued an advisory for two new issues on November 15: https://www.debian.org/security/2022/dsa-5280 Summary:
grub2 new security issues CVE-2021-369[5-7], CVE-2022-2873[3-7] =>
grub2 new security issues CVE-2021-369[5-7], CVE-2022-2601, CVE-2022-3775, CVE-2022-2873[3-7] (In reply to David Walser from comment #8) > Debian has issued an advisory for two new issues on November 15: > https://www.debian.org/security/2022/dsa-5280 openSUSE has issued an advisory for this today (November 21): https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MRFPY5QYSYU264DBMYC26WSXJ2PTUVVY/ (In reply to David Walser from comment #8) > Debian has issued an advisory for two new issues on November 15: > https://www.debian.org/security/2022/dsa-5280 Fedora has issued an advisory for this on November 20: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZJAWN5S3M3DAZIITKXB7OCBPCYJKH2ST/ Mageia 8 EOL. Resolution:
(none) =>
OLD |