VDB

RHSA-2020:3217

RHSA-2020:3217 PUBLISHED CVSS 5.699999809265137 MEDIUM

An update for grub2, shim, shim-signed, and fwupdate is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. [Updated 3 August 2020] The shim and shim-signed packages distributed with this erratum have a known bug that can cause the boot process to hang on some systems. To prevent boot problems, customers are strongly recommended not to use the shim packages released with this erratum, and instead to apply the newer packages within RHBA-2020:3265, that were released on 1 August 2020 to address this issue.

Risk Scores

CVSS 3.1
5.699999809265137
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected Products

VendorProductVersions
fwupdate
Red Hat Enterprise Linux Server (v. 7)
Red Hat Enterprise Linux Client Optional (v. 7)
Red Hat Enterprise Linux Workstation (v. 7)
Red Hat Enterprise Linux ComputeNode (v. 7)
Red Hat Enterprise Linux Client (v. 7)
Red Hat Enterprise Linux Server Optional (v. 7)
Red Hat Enterprise Linux Workstation Optional (v. 7)
grub2
Red Hat Enterprise Linux ComputeNode Optional (v. 7)
shim

Timeline

  • Jul 29, 2020 CVE Published
  • Mar 6, 2026 CVE Updated
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 50/day Open console ›