CLSA-2025-1744213211

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLSA-2025-1744213211
Upstream
Published
2025-04-09T15:40:16Z
Modified
2026-05-27T11:35:08.616562651Z
Summary
grub2: Fix of 5 CVEs
Details
  • CVE-2025-0624: net: Out-of-bounds write in grubnetsearch_configfile()
  • CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write
  • CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled
  • CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data
  • CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write
References

Affected packages

TuxCare:CentOS-Stream:8
grub2-common

Package

Name
grub2-common
Purl
pkg:rpm/tuxcare/grub2-common?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-efi-ia32

Package

Name
grub2-efi-ia32
Purl
pkg:rpm/tuxcare/grub2-efi-ia32?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-efi-ia32-cdboot

Package

Name
grub2-efi-ia32-cdboot
Purl
pkg:rpm/tuxcare/grub2-efi-ia32-cdboot?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-efi-ia32-modules

Package

Name
grub2-efi-ia32-modules
Purl
pkg:rpm/tuxcare/grub2-efi-ia32-modules?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-efi-x64

Package

Name
grub2-efi-x64
Purl
pkg:rpm/tuxcare/grub2-efi-x64?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-efi-x64-cdboot

Package

Name
grub2-efi-x64-cdboot
Purl
pkg:rpm/tuxcare/grub2-efi-x64-cdboot?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-efi-x64-modules

Package

Name
grub2-efi-x64-modules
Purl
pkg:rpm/tuxcare/grub2-efi-x64-modules?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-pc

Package

Name
grub2-pc
Purl
pkg:rpm/tuxcare/grub2-pc?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-pc-modules

Package

Name
grub2-pc-modules
Purl
pkg:rpm/tuxcare/grub2-pc-modules?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-tools

Package

Name
grub2-tools
Purl
pkg:rpm/tuxcare/grub2-tools?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-tools-efi

Package

Name
grub2-tools-efi
Purl
pkg:rpm/tuxcare/grub2-tools-efi?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-tools-extra

Package

Name
grub2-tools-extra
Purl
pkg:rpm/tuxcare/grub2-tools-extra?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"
grub2-tools-minimal

Package

Name
grub2-tools-minimal
Purl
pkg:rpm/tuxcare/grub2-tools-minimal?distro=centos-stream-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.02-129.el8.tuxcare.els5

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2025-1744213211.json"