RHSA-2020:3217
An update for grub2, shim, shim-signed, and fwupdate is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. [Updated 3 August 2020] The shim and shim-signed packages distributed with this erratum have a known bug that can cause the boot process to hang on some systems. To prevent boot problems, customers are strongly recommended not to use the shim packages released with this erratum, and instead to apply the newer packages within RHBA-2020:3265, that were released on 1 August 2020 to address this issue.
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fwupdate | ||
| Red Hat Enterprise Linux Server (v. 7) | ||
| Red Hat Enterprise Linux Client Optional (v. 7) | ||
| Red Hat Enterprise Linux Workstation (v. 7) | ||
| Red Hat Enterprise Linux ComputeNode (v. 7) | ||
| Red Hat Enterprise Linux Client (v. 7) | ||
| Red Hat Enterprise Linux Server Optional (v. 7) | ||
| Red Hat Enterprise Linux Workstation Optional (v. 7) | ||
| grub2 | ||
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | ||
| shim |
Timeline
- Jul 29, 2020 CVE Published
- Mar 6, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2020:3217 fix
- https://access.redhat.com/security/updates/classification/#moderate url
- https://access.redhat.com/security/vulnerabilities/grub2bootloader url
- https://access.redhat.com/errata/RHBA-2020:3265 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1616395 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1732765 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1825243 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1852009 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1852014 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1852022 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1852030 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1860978 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1861118 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1861581 url
- https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3217.json advisory