A grub2 security update (aarch64) has been released for Oracle Linux 7.

El-errata: ELSA-2020-5790 Important: Oracle Linux 7 grub2 security update (aarch64)

Oracle Linux Security Advisory ELSA-2020-5790

  http://linux.oracle.com/errata/ELSA-2020-5790.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

aarch64:
grub2-2.02-0.81.0.4.el7.aarch64.rpm
grub2-common-2.02-0.81.0.4.el7.noarch.rpm
grub2-efi-aa64-2.02-0.81.0.4.el7.aarch64.rpm
grub2-efi-aa64-cdboot-2.02-0.81.0.4.el7.aarch64.rpm
grub2-efi-aa64-modules-2.02-0.81.0.4.el7.noarch.rpm
grub2-tools-2.02-0.81.0.4.el7.aarch64.rpm
grub2-tools-extra-2.02-0.81.0.4.el7.aarch64.rpm
grub2-tools-minimal-2.02-0.81.0.4.el7.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/grub2-2.02-0.81.0.4.el7.src.rpm


Description of changes:

[2.02-81.0.4]
- Fix CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310,
CVE-2020-14311,
CVE-2020-15705, CVE-2020-15706, CVE-2020-15707 [Orabug: 31225072]
- Update signing certificate for efi binaries

[2.02-0.81.0.2]
- Enable common subpackage build for aarch64
- Disable RHEL patch 0183-efinet-retransmit-if-our-device-is-busy.patch
to comply with UEFI spec
- increase timeout to 10ms in efinet.c, [Orabug: 27982684]

[2.02-0.81.0.1]
- Update upstream references [Orabug: 30138841]
- build with the updated Oracle certificate
- Restore symlink to grub environment file, that was removed during
grub2-efi update
if grub2 package is also installed on UEFI machines [Orabug: 27345750]
- fix symlink removal scriptlet, to be executed only on removal [Orabug:
19231481]
- Pack files in efidir with disabled rpm verification [Orabug: 27166026]
- Fix comparison in patch for [Orabug: 18504756]
- Remove symlink to grub environment file during uninstall on EFI
platforms [Orabug: 19231481]
- replace dynamic EFI boot folder path generation with predefined
'redhat' (Alex Burmashev)
- update Oracle Linux certificates (Alexey Petrenko)
- Put "with" in menuentry instead of "using" [Orabug: 18504756]
- Use different titles for UEK and RHCK kernels [Orabug: 18504756]
- changed efidir with 0700 access rights, redhat chose another approach
in rhbz#1496952, [Orabug: 28622344]
- revert orabug [Orabug: 27166026] changes