gpp_maybe Security update for grub2

SUSE-SLE-DESKTOP-12-2015-1032

This update for grub2 provides the following fixes and enhancements: Security issue fixed: - Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) Non security issues fixed: - Expand list of grub.cfg search path in PV Xen guests for systems installed on btrfs snapshots. (bsc#946148, bsc#952539) - Add --image switch to force zipl update to specific kernel. (bsc#928131) - Do not use shim lock protocol for reading PE header as it won't be available when secure boot is disabled. (bsc#943380) - Make firmware flaw condition be more precisely detected and add debug message for the case.

• Release Date
  Dec 30 2015
• References
  Bugzilla: 956631, 946148, 952539, 943380, 928131
  CVEs: CVE-2015-8370
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  grub2
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-56.9.4 lock rpm lock src

  grub2-i386-pc
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-56.9.4 lock rpm

  grub2-snapper-plugin
  Grub2's snapper plugin

  2.02~beta2-56.9.4 lock rpm

  grub2-x86_64-efi
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-56.9.4 lock rpm

  grub2-x86_64-xen
  Bootloader with support for Linux, Multiboot and more

  2.02~beta2-56.9.4 lock rpm