Debian alert DLA-4685-1 (grub2)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4685-1] grub2 security update
Date:
             
 
Wed, 15 Jul 2026 13:19:59 +0200
Message-ID:
             
 
<20260715111959.F2CF75F02024@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4685-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
July 15, 2026                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : grub2
Version        : 2.06-3~deb11u7
CVE ID         : CVE-2024-45774 CVE-2024-45775 CVE-2024-45776 CVE-2024-45777
                 CVE-2024-45778 CVE-2024-45779 CVE-2024-45780 CVE-2024-45781
                 CVE-2024-45782 CVE-2024-45783 CVE-2025-0622 CVE-2025-0624
                 CVE-2025-0677 CVE-2025-0678 CVE-2025-0684 CVE-2025-0685
                 CVE-2025-0686 CVE-2025-0689 CVE-2025-0690 CVE-2025-1118
                 CVE-2025-1125

Several issues were found in the GRUB2 bootloader, which could result
in crashes and potentially execution of arbitrary code. These could
lead to bypass of UEFI Secure Boot on affected systems.

For Debian 11 bullseye, these problems have been fixed in version
2.06-3~deb11u7.

We recommend that you upgrade your grub2 packages.

For the detailed security status of grub2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/grub2

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmpXbNwACgkQnUbEiOQ2
gwILuw/+MAI0+dsYpaMxRi+R3UzWL8Q8dR5ZolHEyYLHqs6jg+8TA7r7ovOomDy0
EZU7dsl8KHNDcYMHWirZelebVgoiP3C+ErxGG+j4YOMvSB8uz0EewLfUD2bBVhkw
LclDechXn1zl22L04WW0EtQitKere4qg/7X8VM4zIpEn6FoMndkra9Qa/MRRMFvB
1+IzzZpCZkuqGHVnmWR6pvFRMFLPiMWDdKXSixec/9ownEM6a4oOGcVEYlisLTTG
tF94g7FmQL8MJ6ebFmZejORe5fUkoti+gD7DM6Vsd2eZnnCjFzx6Co+RYPuEpZ/F
F/wkORbvVNaQ0fZ6nyTRzoMOZ2El9aKJmSnTUhZNXSGZTOWp+WbI98F/PaROddtk
F8fBo8yXwIlot6L+BnhS3X2QMYYfaEiwN1U5uR+Bm0y7+bAt/nPEOpzlfYY/6Nhb
24jSlMbTvrE6boFX+JVwjeDABNQ9cwlqfYYlJhHbroNUnStrXbGreb4o0AVnIeuA
hFfOeKzH/wTomYwWsZmq9873JpFsvFX+CAqOlsR5R4ZCRz0T4zbB1c0iYQz6wKuh
RjhSVq17a7MqqmI95m0/QPHVOU3IiU/9/48YVtM6glNY3wIg2tbW5VIuIDwd1Y8g
/bDvgRZwUJSCFtSBO8NlMZDGgrbRF928LrEdGFKwz4P6FRJJ4I4=
=nGTl
-----END PGP SIGNATURE-----