内容简介：Early this morning, an urgent. The vulnerability itself left a method for system attackers to potentially install "bootkit" malware on a Linux system despite that system being protected with UEFI Secure Boot.Unfortunately, Red Hat's patch to GRUB2 and the
Early this morning, an urgent bug showed up at Red Hat's bugzilla bug tracker—a user discovered that the RHSA_2020:3216 grub2 security update and RHSA-2020:3218 kernel security update rendered an RHEL 8.2 system unbootable. The bug was reported as reproducible on any clean minimal install of Red Hat Enterprise Linux 8.2.
The patches were intended to close a newly discovered vulnerability in the GRUB2 boot manager called BootHole. The vulnerability itself left a method for system attackers to potentially install "bootkit" malware on a Linux system despite that system being protected with UEFI Secure Boot.
RHEL and CentOS
Unfortunately, Red Hat's patch to GRUB2 and the kernel, once applied, are leaving patched systems unbootable. The issue is confirmed to affect RHEL 7.8 and RHEL 8.2, and it may affect RHEL 8.1 and 7.9 as well. RHEL-derivative distribution CentOS is also affected.
Red Hat is currently advising
users not to apply the GRUB2 security patches ( RHSA-2020:3216
or RHSA-2020:3217
) until these issues have been resolved. If you administer a RHEL or CentOS system and believe you may have installed these patches, do not reboot your system
. Downgrade the affected packages using sudo yum downgrade shim\* grub2\* mokutil
and configure yum
not to upgrade those packages by temporarily adding exclude=grub2* shim* mokutil
to /etc/yum.conf
.
If you've already applied the patches and attempted (and failed) to reboot, boot from an RHEL or CentOS DVD in Troubleshooting mode, set up the network , then perform the same steps outlined above in order to restore functionality to your system.
Other distributions
Although the bug was first reported in Red Hat Enterprise Linux, apparently related bug reports are rolling in from other distributions from different families as well. Ubuntu and Debian users are reporting systems which cannot boot after installing GRUB2 updates, and Canonical has issued an advisory including instructions for recovery on affected systems.
Although the impact of the GRUB2 bug is similar, the scope may be different from distribution to distribution; so far it appears the Debian/Ubuntu GRUB2 bug is only affecting
systems which boot in BIOS (not UEFI) mode. A fix has already been committed to Ubuntu's proposed
repository, tested, and released to its updates
repository. The updated and released packages, grub2 (2.02~beta2-
and grub2 (2.04-1ubuntu26.2) focal
, should resolve the problem for Ubuntu users.
For Debian users, the fix
is available in newly committed package grub2 (2.02+dfsg1-20+deb10u2)
.
We do not have any word at this time about flaws in or impact of GRUB2 BootHole patches on other distributions such as Arch, Gentoo, or Clear Linux.
以上就是本文的全部内容，希望对大家的学习有所帮助，也希望大家多多支持 码农网
本站部分资源来源于网络，本站转载出于传递更多信息之目的，版权归原作者或者来源机构所有，如转载稿涉及版权问题，请联系我们。
Java Script深度剖析
卢云鹏、沈维伦、Don Gosselin、李筱青 / 卢云鹏、沈维伦、李筱青 / 北京大学出版社 / 2004-10-1 / 49.0
本书适合于大中专院计算机相关专业作为教材，也是JavaScript初学者以及JavaScript爱好者的理想参考用书。书中详细介绍了基本的JavaScript程序设计原理以及实现它们的语法，内容包括JavaScript简介，变理、函数、对角和事件，数据类型、运算符，结构化逻辑控制结构和语句，窗口和框架，表单，动态HTML和动画，cookie和安全性，服务器端 JavaScript，数据库连接，使用......一起来看看 《Java Script深度剖析》 这本书的介绍吧!
