ALSA-2025:2867

Source
https://errata.almalinux.org/9/ALSA-2025-2867.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2025:2867.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2025:2867
Related
Published
2025-03-17T00:00:00Z
Modified
2025-03-21T12:17:16Z
Summary
Important: grub2 security update
Details

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

  • grub2: net: Out-of-bounds write in grubnetsearchconfigfile() (CVE-2025-0624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9 / grub2-common

Package

Name
grub2-common
Purl
pkg:rpm/almalinux/grub2-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-efi-aa64

Package

Name
grub2-efi-aa64
Purl
pkg:rpm/almalinux/grub2-efi-aa64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-efi-aa64-cdboot

Package

Name
grub2-efi-aa64-cdboot
Purl
pkg:rpm/almalinux/grub2-efi-aa64-cdboot

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-efi-aa64-modules

Package

Name
grub2-efi-aa64-modules
Purl
pkg:rpm/almalinux/grub2-efi-aa64-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-efi-x64

Package

Name
grub2-efi-x64
Purl
pkg:rpm/almalinux/grub2-efi-x64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-efi-x64-cdboot

Package

Name
grub2-efi-x64-cdboot
Purl
pkg:rpm/almalinux/grub2-efi-x64-cdboot

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-efi-x64-modules

Package

Name
grub2-efi-x64-modules
Purl
pkg:rpm/almalinux/grub2-efi-x64-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-pc

Package

Name
grub2-pc
Purl
pkg:rpm/almalinux/grub2-pc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-pc-modules

Package

Name
grub2-pc-modules
Purl
pkg:rpm/almalinux/grub2-pc-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-ppc64le

Package

Name
grub2-ppc64le
Purl
pkg:rpm/almalinux/grub2-ppc64le

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-ppc64le-modules

Package

Name
grub2-ppc64le-modules
Purl
pkg:rpm/almalinux/grub2-ppc64le-modules

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-tools

Package

Name
grub2-tools
Purl
pkg:rpm/almalinux/grub2-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-tools-efi

Package

Name
grub2-tools-efi
Purl
pkg:rpm/almalinux/grub2-tools-efi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-tools-extra

Package

Name
grub2-tools-extra
Purl
pkg:rpm/almalinux/grub2-tools-extra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1

AlmaLinux:9 / grub2-tools-minimal

Package

Name
grub2-tools-minimal
Purl
pkg:rpm/almalinux/grub2-tools-minimal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.06-94.el9_5.alma.1