Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
89
security advisoryfedorasystem updateFedora 37: FEDORA-2023-ca393d660a Critical: edk2 Firmware Update
include latest dbx update (may 9th, black lotus edition). ---- drop ASSERT from NestedInterruptTplLib (rhbz#2183336).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-ca393d660a 2023-06-01 02:15:50.704988 --------------------------------------------------------------------------------Name : edk2 Product : Fedora 37 Version : 20230301gitf80f052277c8 Release : 26.fc37 URL : https://www.tianocore.org/ Summary : UEFI firmware for 64-bit virtual machines Description : EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. This package contains sample 64-bit UEFI firmware builds for QEMU and KVM. --------------------------------------------------------------------------------Update Information: include latest dbx update (may 9th, black lotus edition). ---- drop ASSERT from NestedInterruptTplLib (rhbz#2183336). --------------------------------------------------------------------------------ChangeLog: * Fri May 5 2023 Gerd Hoffmann - 20230301gitf80f052277c8-4 - drop ASSERT from NestedInterruptTplLib (rhbz#2183336). - add tpm probe fixes. --------------------------------------------------------------------------------References: [ 1 ] Bug #2183336 - 20230301 EDK2-ovmf fails to boot windows iso https://bugzilla.redhat.com/show_bug.cgi?id=2183336 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-ca393d660a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jun 01, 2023
•Critical
Fedora
91
security advisorygentoomultiple vulnerabilitiesGentoo: GLSA-202104-05 Normal: GRUB Multiple Threats Detected
Multiple vulnerabilities have been found in GRUB, the worst might allow for circumvention of UEFI Secure Boot.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202104-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: GRUB: Multiple vulnerabilities Date: April 30, 2021 Bugs: #734654, #773991 ID: 202104-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in GRUB, the worst might allow for circumvention of UEFI Secure Boot. Background ========= GNU GRUB is a multiboot boot loader used by most Linux systems. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-devel/grub < 2.06_rc1 > = 2.06_rc1 Description ========== Multiple vulnerabilities have been discovered in GRUB. Please review the CVE identifiers referenced below for details. Impact ===== Please review the referenced CVE identifiers for details. Workaround ========= There is no known workaround at this time. Resolution ========= All GRUB users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =sys-devel/grub-2.06_rc1" After upgrading, make sure to run the grub-install command with options appropriate for your system. See the GRUB Quick Start guide in the references below for examples. Your system will be vulnerable until this action is performed. References ========= [ 1 ] CVE-2020-10713 https://nvd.nist.gov/vuln/detail/CVE-2020-10713 [ 2 ] CVE-2020-14308 https://nvd.nist.gov/vuln/detail/CVE-2020-14308 [ 3 ] CVE-2020-14309 https://nvd.nist.gov/vuln/detail/CVE-2020-14309 [ 4 ] CVE-2020-14310 https://nvd.nist.gov/vuln/detail/CVE-2020-14310 [ 5 ] CVE-2020-14311 https://nvd.nist.gov/vuln/detail/CVE-2020-14311 [ 6 ] CVE-2020-14372 https://nvd.nist.gov/vuln/detail/CVE-2020-14372 [ 7 ] CVE-2020-15705 https://nvd.nist.gov/vuln/detail/CVE-2020-15705 [ 8 ] CVE-2020-15706 https://nvd.nist.gov/vuln/detail/CVE-2020-15706 [ 9 ] CVE-2020-15707 https://nvd.nist.gov/vuln/detail/CVE-2020-15707 [ 10 ] CVE-2020-25632 https://nvd.nist.gov/vuln/detail/CVE-2020-25632 [ 11 ] CVE-2020-25647 https://nvd.nist.gov/vuln/detail/CVE-2020-25647 [ 12 ] CVE-2020-27749 https://nvd.nist.gov/vuln/detail/CVE-2020-27749 [ 13 ] CVE-2020-27779 https://nvd.nist.gov/vuln/detail/CVE-2020-27779 [ 14 ] CVE-2021-20225 https://nvd.nist.gov/vuln/detail/CVE-2021-20225 [ 15 ] CVE-2021-20233 https://nvd.nist.gov/vuln/detail/CVE-2021-20233 [ 16 ] GRUB Quick Start guide https://wiki.gentoo.org/wiki/GRUB2_Quick_Start Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202104-05 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Apr 30, 2021
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!