Linux · Security advisory · May 18, 2021

RHSA-2021:1734: Security update for 5 packages

RHSA-2021:1734, released May 18, 2021, fixes 7 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0174
77th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
shim-aa64RHEL 80:15.4-2.el8_1
shim-ia32RHEL 80:15.4-2.el8_1
shim-unsigned-aarch64RHEL 80:15-7.el8_1
shim-unsigned-x64RHEL 80:15.4-4.el8_1
shim-x64RHEL 80:15.4-2.el8_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-14372 grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... 7.5 0.0174 None reported
High CVE-2020-25632 grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... 8.2 0.0115 None reported
High CVE-2021-20225 grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... 7.5 0.0101 None reported
High CVE-2020-25647 grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... 7.6 0.0079 None reported
High CVE-2021-20233 grub2-efi-aa64: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... 8.2 0.0061 None reported
High CVE-2020-27749 grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... 7.5 0.0057 None reported
High CVE-2020-27779 grub2-common: The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable... 7.5 0.0039 None reported
Showing 1 to 7 of 7 1