[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [linux_var] grub2 0-day

To: linux_var - LUG di Varese e Provincia Mailing List <talking@ml.linuxvar.it>
Subject: Re: [linux_var] grub2 0-day
From: Luigi B <luigi.b@alice.it>
Date: Fri, 18 Dec 2015 18:08:48 +0100
Authentication-results: mx.google.com; spf=pass (google.com: domain of talking-bounces@ml.linuxvar.it designates 79.143.178.54 as permitted sender) smtp.mailfrom=talking-bounces@ml.linuxvar.it; dkim=pass header.i=@ml.linuxvar.it
Delivered-to: unknown
Delivered-to: jacopogg83@gmail.com
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ml.linuxvar.it; s=mail; t=1450458547; bh=Rgg/7s4PFHKV6qIqynpA35iWF+JP5gre2mXIVRYLY/g=; h=To:References:From:Date:In-Reply-To:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Reply-To; z=To:=20linux_var=20-=20LUG=20di=20Varese=20e=20Provincia=20Mailing =20List=20<talking@ml.linuxvar.it>|References:=20<CAFzX3+c9D5y=3D5 COXW8v6FOJnePCN3XN7SNjHJAp=3DEe0bmHyE=3Dw@mail.gmail.com>|From:=20 Luigi=20B=20<luigi.b@alice.it>|Date:=20Fri,=2018=20Dec=202015=2018 :08:48=20+0100|In-Reply-To:=20<CAFzX3+c9D5y=3D5COXW8v6FOJnePCN3XN7 SNjHJAp=3DEe0bmHyE=3Dw@mail.gmail.com>|Subject:=20Re:=20[linux_var ]=20grub2=200-day|List-Id:=20linux_var=20-=20LUG=20di=20Varese=20e =20Provincia=20Mailing=20List=0D=0A=20<talking.ml.linuxvar.it>|Lis t-Unsubscribe:=20<http://ml.linuxvar.it/cgi-bin/mailman/options/ta lking>,=0D=0A=20<mailto:talking-request@ml.linuxvar.it?subject=3Du nsubscribe>|List-Archive:=20<http://ml.linuxvar.it/pipermail/talki ng/>|List-Post:=20<mailto:talking@ml.linuxvar.it>|List-Help:=20<ma ilto:talking-request@ml.linuxvar.it?subject=3Dhelp>|List-Subscribe :=20<http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking>,=0D=0 A=20<mailto:talking-request@ml.linuxvar.it?subject=3Dsubscribe>|Re ply-To:=20linux_var=20-=20LUG=20di=20Varese=20e=20Provincia=20Mail ing=20List=0D=0A=20<talking@ml.linuxvar.it>; b=G+aLLrSxEMQy2z8OVuRTwGpavaiUOc6H1+vv+/Sm+NhPjCYYwgNlntM68Exsd6nkq 1EXOikHHgOcARoxGeCaJkToMDz+RiBKBsKQfaB+FbenMD7ylxPNqfa+b5/kukTD27N vImpx+80s48nv0eqj76o0hnxc1lETexj/XdJle/8=
In-reply-to: <CAFzX3+c9D5y=5COXW8v6FOJnePCN3XN7SNjHJAp=Ee0bmHyE=w@mail.gmail.com>
List-archive: <http://ml.linuxvar.it/pipermail/talking/>
List-help: <mailto:talking-request@ml.linuxvar.it?subject=help>
List-id: linux_var - LUG di Varese e Provincia Mailing List <talking.ml.linuxvar.it>
List-post: <mailto:talking@ml.linuxvar.it>
List-subscribe: <http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking>, <mailto:talking-request@ml.linuxvar.it?subject=subscribe>
List-unsubscribe: <http://ml.linuxvar.it/cgi-bin/mailman/options/talking>, <mailto:talking-request@ml.linuxvar.it?subject=unsubscribe>
References: <CAFzX3+c9D5y=5COXW8v6FOJnePCN3XN7SNjHJAp=Ee0bmHyE=w@mail.gmail.com>
Reply-to: linux_var - LUG di Varese e Provincia Mailing List <talking@ml.linuxvar.it>
Sender: "Talking" <talking-bounces@ml.linuxvar.it>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0 Thunderbird/38.4.0

Il 18/12/2015 11:01, Mr. P|pex ha scritto:

ciao
segnalo l'articolo che parla di un bug abbastanza grave

http://punto-informatico.it/4290469/PI/News/grub2-violare-boot-loader-linux-basta-insistere.aspx

http://news.softpedia.com/news/zero-day-grub2-vulnerability-hits-linux-users-patch-available-for-ubuntu-rhel-497688.shtml

bye
GM


Dal changelog di Slackware:

Fri Dec 18 05:28:25 UTC 2015
patches/packages/grub-2.00-x86_64-3_slack14.1.txz:  Rebuilt.
  Patched bug where password protection during system startup may be
  bypassed by hitting the backspace key 28 times giving a rescue shell.
  Thanks to Hector Marco and Ismael Ripoll.
  For more information, see:
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8370
  (* Security fix *)
_______________________________________________
Talking mailing list
Talking@ml.linuxvar.it
http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking

References:
- [linux_var] grub2 0-day
  - From: "Mr. P|pex" <gianluca@pipex.name>

Prev by Date: Re: [linux_var] grub2 0-day
Next by Date: [linux_var] Perl6 è stato rilasciato!
Previous by thread: Re: [linux_var] grub2 0-day
Next by thread: [linux_var] Perl6 è stato rilasciato!
Index(es):
- Date
- Thread