Stay Secure with the Latest Linux Advisories

security advisorysecurity issuefedora

Fedora 22: 2015-2c155d7632 Critical: Grub2 EFI Module Issue

Rebuild without multiboot* modules in the EFI image.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-2c155d7632 2015-11-30 18:49:49.412912 -------------------------------------------------------------------------------- Name : grub2 Product : Fedora 22 Version : 2.02 Release : 0.17.fc22 URL : Summary : Bootloader with support for Linux, Multiboot and more Description : The GRand Unified Bootloader (GRUB) is a highly configurable and customizable bootloader with modular architecture. It support rich varietyof kernel formats, file systems, computer architectures and hardware devices. This subpackage provides support for PC BIOS systems. -------------------------------------------------------------------------------- Update Information: Rebuild without multiboot* modules in the EFI image. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1264103 - CVE-2015-5281 grub2: modules built in on EFI builds that allow loading arbitrary code, circumventing secure boot https://bugzilla.redhat.com/show_bug.cgi?id=1264103 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update grub2' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Recompile with single boot components in EFI installation for Fedora 22 grub2 vulnerability patch focusing on severerisks.. Grub2 Security Update,Fedora Bootloader,EFI Module Issue. . Severity: Critical. LinuxSecurity.com Team

Nov 30, 2015 •Critical Fedora