You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa grub2

Sigurnosni nedostatak programskog paketa grub2

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-c3b4fef3af
2015-11-24 17:51:14.480233
——————————————————————————–

Name : grub2
Product : Fedora 23
Version : 2.02
Release : 0.24.fc23
URL : http://www.gnu.org/software/grub/
Summary : Bootloader with support for Linux, Multiboot and more
Description :
The GRand Unified Bootloader (GRUB) is a highly configurable and customizable
bootloader with modular architecture. It support rich varietyof kernel formats,
file systems, computer architectures and hardware devices. This subpackage
provides support for PC BIOS systems.

——————————————————————————–
Update Information:

Rebuild without multiboot* modules in the EFI image.
——————————————————————————–
References:

[ 1 ] Bug #1264103 – CVE-2015-5281 grub2: modules built in on EFI builds that allow loading arbitrary code, circumventing secure boot
https://bugzilla.redhat.com/show_bug.cgi?id=1264103
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update grub2’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarijo Plepelic
Cert idNCERT-REF-2015-11-0009-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Ranjivost programskog paketa wpa_supplicant

Otkrivena je ranjivost u programskom paketu wpa_supplicant za Fedoru 22. Ranjivost je posljedica cjelobrojnog podljeva izazvanog načinom kojim je wpa_supplicant...

Close