< back to search

shield Security update for grub2
SUSE-SLE-Micro-6.0-702

This update for grub2 fixes the following issues - CVE-2025-54770: Missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930). - CVE-2025-54771: grub_file_close() does not properly controls the fs refcount (bsc#1252931). - CVE-2025-61661: Out-of-bounds write in grub_usb_get_string() function (bsc#1252932). - CVE-2025-61662: Missing unregister call for gettext command may lead to use-after-free (bsc#1252933). - CVE-2025-61663: Missing unregister call for normal commands may lead to use-after-free (bsc#1252934). - CVE-2025-61664: Missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935). Changes for grub2: - Bump upstream SBAT generation to 6

cloud_download Downloads

SUSE Linux Micro 6.0 aarch64
  • Packages
    grub2
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm
    grub2-arm64-efi
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm
    grub2-snapper-plugin
    Grub2's snapper plugin
    2.12~rc1-8.1 lock rpm
SUSE Linux Micro 6.0 s390x
  • Packages
    grub2
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm
    grub2-s390x-emu
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm
    grub2-snapper-plugin
    Grub2's snapper plugin
    2.12~rc1-8.1 lock rpm
SUSE Linux Micro 6.0 x86_64
  • Packages
    grub2
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm
    grub2-i386-pc
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm
    grub2-snapper-plugin
    Grub2's snapper plugin
    2.12~rc1-8.1 lock rpm
    grub2-x86_64-efi
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm
    grub2-x86_64-xen
    Bootloader with support for Linux, Multiboot and more
    2.12~rc1-8.1 lock rpm