Red Hat Security Advisory

RHSA-2021:3675

shim and fwupd security update

Released 2021-09-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v. 8.1) shim-unsigned-aarch64-15-7.el8_1, shim-unsigned-x64-15.4-4.el8_1
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) fwupd-1.1.4-4.el8_1, shim-15.4-2.el8_1, shim-aa64-15.4-2.el8_1 +2

TI-2020-15650 CVE-2020-25632 · GHSA-r6r2-gvcm-979j

LOW 38

A flaw was found in grub2 in versions prior to 2.06.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.01152 Published 2021-03-03 Partial fix CWE-416

TI-2021-03528 CVE-2021-20233 · GHSA-257g-8w4g-3cc3

LOW 37

A flaw was found in grub2 in versions prior to 2.06.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00605 Published 2021-03-03 Partial fix CWE-787

TI-2020-11240 CVE-2020-14372 · GHSA-xh73-rjw5-phcw

LOW 36

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.01738 Published 2021-03-03 Partial fix CWE-184

TI-2020-15664 CVE-2020-25647 · GHSA-q9cp-m9vw-25xh

LOW 35

A flaw was found in grub2 in versions prior to 2.06.

CVSS 3.1HIGH 7.6 Physical No auth No interaction EPSS 0.00794 Published 2021-03-03 Partial fix CWE-787

TI-2020-16864 CVE-2020-27779 · GHSA-7p29-8vr2-rmvx

LOW 33

A flaw was found in grub2 in versions prior to 2.06.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.0039 Published 2021-03-03 Partial fix CWE-285

TI-2021-03520 CVE-2021-20225 · GHSA-hmmc-9q6p-vgg6

LOW 32

A flaw was found in grub2 in versions prior to 2.06.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01009 Published 2021-03-03 Partial fix CWE-787

TI-2020-16834 CVE-2020-27749 · GHSA-258p-xh3c-g68w

LOW 30

A flaw was found in grub2 in versions prior to 2.06.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00573 Published 2021-03-03 Partial fix CWE-121