RLSA-2026:4760

Synopsis

Moderate: grub2 security update

Description

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

* grub2: Missing unregister call for gettext command may lead to use-after-free (CVE-2025-61662)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2414683

CVEs

CVE-2025-61662

Affected packages

Rocky Linux 9 x86_64 - BaseOS

grub2-1:2.06-114.el9_7.1.rocky.0.1.src.rpm grub2-common-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-debugsource-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-efi-aa64-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-efi-x64-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-efi-x64-cdboot-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-efi-x64-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-pc-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-pc-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-tools-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-tools-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-tools-efi-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-tools-efi-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-tools-extra-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-tools-extra-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-tools-minimal-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm grub2-tools-minimal-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.x86_64.rpm

Rocky Linux 9 aarch64 - BaseOS

grub2-1:2.06-114.el9_7.1.rocky.0.1.src.rpm grub2-common-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-debugsource-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-efi-aa64-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-efi-aa64-cdboot-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-efi-aa64-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-efi-x64-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-tools-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-tools-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-tools-extra-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-tools-extra-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-tools-minimal-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm grub2-tools-minimal-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.aarch64.rpm

Rocky Linux 9 s390x - BaseOS

grub2-1:2.06-114.el9_7.1.rocky.0.1.src.rpm

Rocky Linux 9 ppc64le - BaseOS

grub2-1:2.06-114.el9_7.1.rocky.0.1.src.rpm grub2-common-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-debugsource-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-efi-aa64-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-efi-x64-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-ppc64le-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-ppc64le-modules-1:2.06-114.el9_7.1.rocky.0.1.noarch.rpm grub2-tools-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-tools-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-tools-extra-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-tools-extra-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-tools-minimal-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm grub2-tools-minimal-debuginfo-1:2.06-114.el9_7.1.rocky.0.1.ppc64le.rpm