You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa grub2

Sigurnosni nedostatak programskog paketa grub2

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-2c155d7632
2015-11-30 18:49:49.412912
——————————————————————————–

Name : grub2
Product : Fedora 22
Version : 2.02
Release : 0.17.fc22
URL : http://www.gnu.org/software/grub/
Summary : Bootloader with support for Linux, Multiboot and more
Description :
The GRand Unified Bootloader (GRUB) is a highly configurable and customizable
bootloader with modular architecture. It support rich varietyof kernel formats,
file systems, computer architectures and hardware devices. This subpackage
provides support for PC BIOS systems.

——————————————————————————–
Update Information:

Rebuild without multiboot* modules in the EFI image.
——————————————————————————–
References:

[ 1 ] Bug #1264103 – CVE-2015-5281 grub2: modules built in on EFI builds that allow loading arbitrary code, circumventing secure boot
https://bugzilla.redhat.com/show_bug.cgi?id=1264103
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update grub2’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarijo Plepelic
Cert idNCERT-REF-2015-12-0003-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa perl-HTML-Scrubber

Otkriven je sigurnosni nedostatak u programskom paketu perl-HTML-Scrubber. Riječ je o XSS ranjivosti koja napadačima omogućuje umetanje skriptnog i HTML...

Close