Red Hat Security AdvisoryRHSA-2015:2401
grub2 security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) grub2-1:2.02-0.29.el7, grub2-efi-1:2.02-0.29.el7, grub2-tools-1:2.02-0.29.el7
- Red Hat Enterprise Linux Client Optional (v. 7) grub2-efi-modules-1:2.02-0.29.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) grub2-1:2.02-0.29.el7, grub2-efi-1:2.02-0.29.el7, grub2-tools-1:2.02-0.29.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) grub2-efi-modules-1:2.02-0.29.el7
- Red Hat Enterprise Linux Server (v. 7) grub2-1:2.02-0.29.el7, grub2-efi-1:2.02-0.29.el7, grub2-tools-1:2.02-0.29.el7
- Red Hat Enterprise Linux Server Optional (v. 7) grub2-efi-modules-1:2.02-0.29.el7
- Red Hat Enterprise Linux Workstation (v. 7) grub2-1:2.02-0.29.el7, grub2-efi-1:2.02-0.29.el7, grub2-tools-1:2.02-0.29.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) grub2-efi-modules-1:2.02-0.29.el7
Fixes 1 record
Priority LOW 13
The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted (1) multiboot…
CVSS 2.0LOW 2.6· Local · No auth · Interaction — · EPSS 0.00337 · Published 2015-11-24 · Fixed CWE-264
