Ubuntu 15.10 USN-2836-1 Moderate: GRUB Password Protection Bypass

ubuntu

December 15, 2015

GRUB password protection can be bypassed.

Summary

GRUB password protection can be bypassed.

Software Description:

- grub2: GRand Unified Bootloader

Details:

Hector Marco and Ismael Ripoll discovered that GRUB incorrectly handled

the backspace key when configured to use authentication. A local attacker

could use this issue to bypass GRUB password protection.

Topics Covered

security advisory authentication issue ubuntu grub protection bypass

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  grub2-common                    2.02~beta2-29ubuntu0.2

Ubuntu 15.04:
  grub2-common                    2.02~beta2-22ubuntu1.4

Ubuntu 14.04 LTS:
  grub2-common                    2.02~beta2-9ubuntu1.6

Ubuntu 12.04 LTS:
  grub2-common                    1.99-21ubuntu3.19

After a standard system update you need to reboot your computer to make
all the necessary changes.