Security update for grub2
SUSE Security Update: Security update for grub2| Announcement ID: | SUSE-SU-2022:2074-1 |
| Rating: | important |
| References: | #1191184 #1191185 #1191186 #1193282 #1197948 #1198460 #1198493 #1198495 #1198496 #1198581 |
| Cross-References: | CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735 CVE-2022-28736 |
| Affected Products: |
|
An update that solves 7 vulnerabilities and has three fixes is now available.
Description:
This update for grub2 fixes the following issues:
Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
- CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184)
- CVE-2021-3696: Fixed that a crafted PNG image could lead to out-of-bound write during huffman table handling (bsc#1191185)
- CVE-2021-3697: Fixed that a crafted JPEG image could lead to buffer underflow write in the heap (bsc#1191186)
- CVE-2022-28733: Fixed fragmentation math in net/ip (bsc#1198460)
- CVE-2022-28734: Fixed an out-of-bound write for split http headers (bsc#1198493)
- CVE-2022-28735: Fixed some verifier framework changes (bsc#1198495)
- CVE-2022-28736: Fixed a use-after-free in chainloader command (bsc#1198496)
- Update SBAT security contact (bsc#1193282)
- Bump grub's SBAT generation to 2
- Use boot disks in OpenFirmware, fixing regression caused when the root LV is completely in the boot LUN (bsc#1197948)
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Manager Server 4.1:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2074=1 - SUSE Manager Retail Branch Server 4.1:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2074=1 - SUSE Manager Proxy 4.1:
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2074=1 - SUSE Linux Enterprise Server for SAP 15-SP2:
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2074=1 - SUSE Linux Enterprise Server 15-SP2-LTSS:
zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2074=1 - SUSE Linux Enterprise Server 15-SP2-BCL:
zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2074=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS:
zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2074=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS:
zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2074=1 - SUSE Enterprise Storage 7:
zypper in -t patch SUSE-Storage-7-2022-2074=1
Package List:
- SUSE Manager Server 4.1 (ppc64le s390x x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- SUSE Manager Server 4.1 (s390x x86_64):
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Manager Server 4.1 (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-powerpc-ieee1275-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Manager Server 4.1 (s390x):
- grub2-s390x-emu-2.04-150200.9.63.2
- SUSE Manager Retail Branch Server 4.1 (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Manager Retail Branch Server 4.1 (x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Manager Proxy 4.1 (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Manager Proxy 4.1 (x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- SUSE Linux Enterprise Server for SAP 15-SP2 (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-powerpc-ieee1275-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64):
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 s390x x86_64):
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Linux Enterprise Server 15-SP2-LTSS (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-powerpc-ieee1275-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Linux Enterprise Server 15-SP2-LTSS (s390x):
- grub2-s390x-emu-2.04-150200.9.63.2
- SUSE Linux Enterprise Server 15-SP2-BCL (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Linux Enterprise Server 15-SP2-BCL (x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
- SUSE Enterprise Storage 7 (aarch64 x86_64):
- grub2-2.04-150200.9.63.2
- grub2-debuginfo-2.04-150200.9.63.2
- grub2-debugsource-2.04-150200.9.63.2
- SUSE Enterprise Storage 7 (noarch):
- grub2-arm64-efi-2.04-150200.9.63.2
- grub2-i386-pc-2.04-150200.9.63.2
- grub2-snapper-plugin-2.04-150200.9.63.2
- grub2-systemd-sleep-plugin-2.04-150200.9.63.2
- grub2-x86_64-efi-2.04-150200.9.63.2
- grub2-x86_64-xen-2.04-150200.9.63.2
References:
- https://www.suse.com/security/cve/CVE-2021-3695.html
- https://www.suse.com/security/cve/CVE-2021-3696.html
- https://www.suse.com/security/cve/CVE-2021-3697.html
- https://www.suse.com/security/cve/CVE-2022-28733.html
- https://www.suse.com/security/cve/CVE-2022-28734.html
- https://www.suse.com/security/cve/CVE-2022-28735.html
- https://www.suse.com/security/cve/CVE-2022-28736.html
- https://bugzilla.suse.com/1191184
- https://bugzilla.suse.com/1191185
- https://bugzilla.suse.com/1191186
- https://bugzilla.suse.com/1193282
- https://bugzilla.suse.com/1197948
- https://bugzilla.suse.com/1198460
- https://bugzilla.suse.com/1198493
- https://bugzilla.suse.com/1198495
- https://bugzilla.suse.com/1198496
- https://bugzilla.suse.com/1198581
SAPソリューションにはSUSE
パブリッククラウド
Security
