ESSA-2025:2835: Moderate: SUSE Liberty Linux security update for grub2

[Update Advisories for SUSE Liberty Linux]

# security update for grub2

Announcement ID: ESSA-2025:2835
Rating: Moderate

Cross-References:

  * CVE-2024-45781
  * CVE-2024-45782
  * CVE-2024-56737
  * CVE-2025-0624



CVSS scores:

  * CVE-2024-45781 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-45782 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-56737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  * CVE-2024-56737 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2025-0624 ( SUSE ): 7.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected Products:

  * SUSE Liberty Linux 7 LTSS


An update that solves 4 vulnerabilities can now be installed.

## Description:

Security update for grub2: CVE-2025-0624, CVE-2024-45781, CVE-2024-45782, CVE-2024-56737 fixes

## Package List:

  * SUSE Liberty Linux 7 LTSS:
    * grub2 2.02-0.87.0.4.el7_9
    * grub2-common 2.02-0.87.0.4.el7_9
    * grub2-efi-ia32 2.02-0.87.0.4.el7_9
    * grub2-efi-ia32-cdboot 2.02-0.87.0.4.el7_9
    * grub2-efi-ia32-modules 2.02-0.87.0.4.el7_9
    * grub2-efi-x64 2.02-0.87.0.4.el7_9
    * grub2-efi-x64-cdboot 2.02-0.87.0.4.el7_9
    * grub2-efi-x64-modules 2.02-0.87.0.4.el7_9
    * grub2-pc 2.02-0.87.0.4.el7_9
    * grub2-pc-modules 2.02-0.87.0.4.el7_9
    * grub2-tools 2.02-0.87.0.4.el7_9
    * grub2-tools-extra 2.02-0.87.0.4.el7_9
    * grub2-tools-minimal 2.02-0.87.0.4.el7_9

## References:

  * https://www.suse.com/security/cve/CVE-2024-45781.html
  * https://www.suse.com/security/cve/CVE-2024-45782.html
  * https://www.suse.com/security/cve/CVE-2024-56737.html
  * https://www.suse.com/security/cve/CVE-2025-0624.html