Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SUSE Linux 12-SP1: SUSE-SU-2015:2387-1 Important Grub2 Buffer Overflow

suse
Calendar Grey December 29, 2015
Scroller Suse
Crucial patch for grub2 focused on rectifying a buffer overflow issue, aiming to bolster overall system security and stability with enhancements.
An update that solves one vulnerability and has 8 fixes is An update that solves one vulnerability and has 8 fixes is An update that solves one vulnerability and has 8 fixes is now...

Summary

- Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) - Check MS-DOS header to find PE file header. (bsc#954126) - Use dirname for copying Xen kernel and initrd to esp. (bsc#955493) - Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty. (bsc#954519) - Add luks, gcry_rijndael and gcry_sha1 to signed EFI image to support LUKS partition in default setup. (bsc#917427, bsc#955609) - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2015-1027=1

Topics%20covered

Topics Covered

security advisory buffer overflow important SUSE Linux grub2

References

#774666 #917427 #946148 #952539 #954126 #954519

#955493 #955609 #956631

Cross- CVE-2015-8370

Affected Products:

SUSE Linux Enterprise Server 12-SP1

SUSE Linux Enterprise Desktop 12-SP1

https://www.suse.com/security/cve/CVE-2015-8370.html

https://bugzilla.suse.com/show_bug.cgi?id=774666

https://bugzilla.suse.com/show_bug.cgi?id=917427

https://bugzilla.suse.com/show_bug.cgi?id=946148

https://bugzilla.suse.com/show_bug.cgi?id=952539

https://bugzilla.suse.com/show_bug.cgi?id=954126

https://bugzilla.suse.com/show_bug.cgi?id=954519

https://bugzilla.suse.com/show_bug.cgi?id=955493

https://bugzilla.suse.com/show_bug.cgi?id=955609

https://bugzilla.suse.com/show_bug.cgi?id=956631

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:2387-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow important SUSE Linux grub2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.