{"id":"CLSA-2025-1751285777","summary":"grub2: Fix of 5 CVEs","details":"- CVE-2024-45781: fs/ufs: OOB write in the heap\n- CVE-2024-45782: fs/hfs: strcpy() using the volume name\n- CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy()\n- CVE-2025-0678: squash4: Integer overflow may lead to heap based\n  out-of-bounds write when reading data\n- CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based\n  out-of-bounds write\n- Debrand to Cloudlinux","modified":"2026-05-27T11:18:33.545792749Z","published":"2025-06-30T12:16:22Z","upstream":["CVE-2024-45781","CVE-2024-45782","CVE-2024-56737","CVE-2025-0678","CVE-2025-1125"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1751285777.html"}],"affected":[{"package":{"name":"grub2","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-common","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-common?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-efi-ia32","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-efi-ia32?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-efi-ia32-cdboot","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-efi-ia32-cdboot?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-efi-ia32-modules","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-efi-ia32-modules?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-efi-x64","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-efi-x64?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-efi-x64-cdboot","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-efi-x64-cdboot?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-efi-x64-modules","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-efi-x64-modules?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-pc","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-pc?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-pc-modules","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-pc-modules?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-tools","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-tools?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-tools-extra","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-tools-extra?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}},{"package":{"name":"grub2-tools-minimal","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/grub2-tools-minimal?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-0.87.el7_9.14.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1751285777.json"}}],"schema_version":"1.7.5"}