[SECURITY] [DSA 5519-1] grub2 security update

2023-10-0619:03:15

lists.debian.org

grub2

ntfs

debian

upgrade

secure boot

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.6%

JSON

Debian Security Advisory DSA-5519-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
October 06, 2023 https://www.debian.org/security/faq

Package : grub2
CVE ID : CVE-2023-4692 CVE-2023-4693

Maxim Suhanov discovered multiple vulnerabilities in GURB2's code to
handle NTFS filesystems, which may result in a Secure Boot bypass.

For the oldstable distribution (bullseye), these problems have been fixed
in version 2.06-3~deb11u6.

For the stable distribution (bookworm), these problems have been fixed in
version 2.06-13+deb12u1.

We recommend that you upgrade your grub2 packages.

For the detailed security status of grub2 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/grub2

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian11armhfgrub-mount-udeb< 2.06-3~deb11u6grub-mount-udeb_2.06-3~deb11u6_armhf.deb
Debian12mips64elgrub-common-dbgsym< 2.06-13+deb12u1grub-common-dbgsym_2.06-13+deb12u1_mips64el.deb
Debian11amd64grub2-common-dbgsym< 2.06-3~deb11u6grub2-common-dbgsym_2.06-3~deb11u6_amd64.deb
Debian10i386grub-common-dbgsym< 2.06-3~deb10u4grub-common-dbgsym_2.06-3~deb10u4_i386.deb
Debian10armhfgrub-efi-arm-dbg< 2.06-3~deb10u4grub-efi-arm-dbg_2.06-3~deb10u4_armhf.deb
Debian12amd64grub-coreboot-dbg< 2.06-13+deb12u1grub-coreboot-dbg_2.06-13+deb12u1_amd64.deb
Debian10amd64grub-linuxbios< 2.06-3~deb10u4grub-linuxbios_2.06-3~deb10u4_amd64.deb
Debian11arm64grub2-common< 2.06-3~deb11u6grub2-common_2.06-3~deb11u6_arm64.deb
Debian12amd64grub-emu< 2.06-13+deb12u1grub-emu_2.06-13+deb12u1_amd64.deb
Debian12armhfgrub-efi-arm-bin< 2.06-13+deb12u1grub-efi-arm-bin_2.06-13+deb12u1_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	armhf	grub-mount-udeb	< 2.06-3~deb11u6	grub-mount-udeb_2.06-3~deb11u6_armhf.deb
Debian	12	mips64el	grub-common-dbgsym	< 2.06-13+deb12u1	grub-common-dbgsym_2.06-13+deb12u1_mips64el.deb
Debian	11	amd64	grub2-common-dbgsym	< 2.06-3~deb11u6	grub2-common-dbgsym_2.06-3~deb11u6_amd64.deb
Debian	10	i386	grub-common-dbgsym	< 2.06-3~deb10u4	grub-common-dbgsym_2.06-3~deb10u4_i386.deb
Debian	10	armhf	grub-efi-arm-dbg	< 2.06-3~deb10u4	grub-efi-arm-dbg_2.06-3~deb10u4_armhf.deb
Debian	12	amd64	grub-coreboot-dbg	< 2.06-13+deb12u1	grub-coreboot-dbg_2.06-13+deb12u1_amd64.deb
Debian	10	amd64	grub-linuxbios	< 2.06-3~deb10u4	grub-linuxbios_2.06-3~deb10u4_amd64.deb
Debian	11	arm64	grub2-common	< 2.06-3~deb11u6	grub2-common_2.06-3~deb11u6_arm64.deb
Debian	12	amd64	grub-emu	< 2.06-13+deb12u1	grub-emu_2.06-13+deb12u1_amd64.deb
Debian	12	armhf	grub-efi-arm-bin	< 2.06-13+deb12u1	grub-efi-arm-bin_2.06-13+deb12u1_armhf.deb