{
  "cves": [
    "CVE-2020-14308",
    "CVE-2020-14310",
    "CVE-2020-14309",
    "CVE-2020-10713",
    "CVE-2020-15705",
    "CVE-2020-15706",
    "CVE-2020-15707",
    "CVE-2020-14311"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[2.02-81.0.4]\n- Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310, CVE-2020-14311,\n  CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 [Orabug: 31225072]\n- Update signing certificate for efi binaries\n\n[2.02-0.81.0.2]\n- Enable common subpackage build for aarch64\n- Disable RHEL patch 0183-efinet-retransmit-if-our-device-is-busy.patch to comply with UEFI spec\n- increase timeout to 10ms in efinet.c, [Orabug: 27982684]\n\n[2.02-0.81.0.1]\n- Update upstream references [Orabug: 30138841]\n- build with the updated Oracle certificate\n- Restore symlink to grub environment file, that was removed during grub2-efi update\n  if grub2 package is also installed on UEFI machines [Orabug: 27345750]\n- fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]\n- Pack files in efidir with disabled rpm verification [Orabug: 27166026]\n- Fix comparison in patch for [Orabug: 18504756]\n- Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]\n- replace dynamic EFI boot folder path generation with predefined 'redhat' (Alex Burmashev)\n- update Oracle Linux certificates (Alexey Petrenko)\n- Put 'with' in menuentry instead of 'using' [Orabug: 18504756]\n- Use different titles for UEK and RHCK kernels [Orabug: 18504756]\n- changed efidir with 0700 access rights, redhat chose another approach in rhbz#1496952, [Orabug: 28622344]\n- revert orabug [Orabug: 27166026] changes",
  "id": "ELSA-2020-5790",
  "ovalId": "oval:com.oracle.elsa:def:20205790",
  "source": "oracle_linux",
  "title": "ELSA-2020-5790:  grub2 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2020-5790.html"
}