shim-review

이 저장소는 shim 서명 요청을 검토하기 위한 것입니다. 요청을 생성하려면: 이 저장소를 클론하세요 바람직하게는 포크하세요 아래 템플릿을 편집하세요 서명할 shim.efi를 추가하세요 빌드 로그를 추가하세요 필요할 수 있는 추가 바이너리/인증서/SHA256 해시를 추가하세요 이 모든 것을 커밋하세요 "myorg-shim-arch-YYYYMMDD" 형식의 태그로 태그하세요 GitHub에 푸시하세요 https://github.com/rhboot/shim-review/issues 에서 태그 링크와 함께 이슈를 제출하세요 이슈에...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk는 개념 증명적극적으로 유지 관리되거나 개선되지 않음 부팅 가능한 이미지로, GRUB2 부트로더를 포함하며 복구 USB 플래시 드라이브의 기반으로 사용되도록 설계되었습니다. 주요 기능: 디스크는 UEFI Secure Boot 모드가 활성화된 상태에서 완전히 작동합니다. 신뢰할 수 없거나, 유효하지 않거나, 서명이 없는 .efi 파일이나 운영 체제를 실행할 수 있습니다. 기능: GRUB2 부트로더 32비트ia32 / 64비트x866...

CVE-2020-14372

CVE-2020-14372: 그다지 안전하지 않은 Secure Boot를 하나의 "간단한 트릭"으로 우회하기 취약점 세부 정보 어느 날 GRUB2 콘솔에 "help"를 입력했더니 정말 "재미있는" 명령들이 보였습니다: readbyte ADDR: ADDR에서 8비트 값 읽기 writebyte ADDR VAL: ADDR에 8비트 값 VAL 쓰기 나는 즉시 가장 재미있는 Secure Boot 우회 방법을 찾았다고 생각했지만, 이 명령들은 Secure Boot에서 다음과 같은 출력을 냅니다: error: Secure Boot...

CVE-2026-97876

A flaw was found in GRUB2. The bootloader insufficiently validates memory addresses passed to the serial configuration command, allowing arbitrary system memory to be targeted instead of a legitimate serial communication device. A local attacker with control over GRUB's boot configuration can...

CVE-2025-0690

CVE-2025-0690: GRUB2 정수 오버플로우 취약점 🛡️ 개요 CVE-2025-0690 는 부트로더 GRUB2 의 정수 오버플로우 취약점으로, 임의 코드 실행 및 Secure Boot 우회 를 허용합니다. 이 결함은 보안 부팅을 위해 GRUB2에 의존하는 시스템에 영향을 미치며, 운영 체제가 시작되기 전에 시스템을 노출시킵니다. 🔍 기술 세부 사항 근본 원인 취약한 명령어 : read 키보드 입력 수신에 사용됨. 문제 : 입력 길이가 32비트 정수 에 저장됩니다. 익스플로잇 메커니즘 : 매우 긴 텍스트 줄을 입력합니다...

Rocky Linux 8.6 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-efi-aa64 / etc Multiple Vulnerabilities (ciqsa-2026_0881)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260881 advisory. This advisory aggregates security fixes for the grub2 SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2022-2601, CVE-2022-3775. Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: fwupd / fwupd-debuginfo / fwupd-debugsource Multiple Vulnerabilities (crlsa-2021_2566)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212566 advisory. grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 grub2: Use-after-free in rmmod command...

Rocky Linux 9 [CIQ] Security Update: grub2-common / grub2-efi-aa64 / grub2-efi-aa64-cdboot / etc Multiple Vulnerabilities (crlsa-2023_0752)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20230752 advisory. grub2: Buffer overflow in grubfontconstructglyph can lead to out-of-bound write and possible secure boot bypass CVE-2022-2601 grub2: Heap based out-of-boun...

Rocky Linux 9 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc (crlsa-2025_20532)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520532 advisory. grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write. CVE-2024-45777 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9.2 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-efi-aa64 / etc Multiple Vulnerabilities (ciqsa-2026_0426)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260426 advisory. This advisory aggregates security fixes for the grub2 SRPM in CIQ LTS 9.2. It addresses 13 CVEs: CVE-2024-45781, CVE-2025-0622, CVE-2024-45783,...

Rocky Linux 8 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc (crlsa-2022_2110)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20222110 advisory. grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content CVE-2021-3981 Tenable has extracted the preceding description block directl...

CentOS Linux 8.5 [TuxCare] Security Update: grub2-common / grub2-efi-ia32 / grub2-efi-ia32-cdboot / etc (CENTOS8.5:CLSA-2026:1771955086)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1771955086 advisory. - A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext...

AlmaLinux 9.2 [TuxCare] Security Update: grub2-common / grub2-efi-aa64-modules / grub2-efi-x64 / etc (ALMALINUX9.2:CLSA-2026:1771409383)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1771409383 advisory. - A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext...

Rocky Linux 9 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc (crlsa-2026_4760)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20264760 advisory. grub2: Missing unregister call for gettext command may lead to use-after-free CVE-2025-61662 Tenable has extracted the preceding description block directly from the...

Rocky Linux 8.8 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-efi-aa64 / etc Multiple Vulnerabilities (ciqsa-2026_0378)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260378 advisory. This advisory aggregates security fixes for the grub2 SRPM in CIQ LTS 8.8. It addresses 4 CVEs: CVE-2025-0624, CVE-2024-1048, CVE-2023-4693, CVE-2023-469...

CentOS Linux 8 [TuxCare] Security Update: grub2-efi-ia32-cdboot / grub2-efi-ia32-modules / grub2-efi-x64 / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1744213211)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1744213211 advisory. - A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bounds of...

AlmaLinux 9.6 [TuxCare] Security Update: grub2-common / grub2-efi-aa64-modules / grub2-efi-x64 / etc (ALMALINUX9.6:CLSA-2026:1771504803)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771504803 advisory. - A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext...

Rocky Linux 8 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc (crlsa-2026_4648)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20264648 advisory. grub2: Missing unregister call for gettext command may lead to use-after-free CVE-2025-61662 Tenable has extracted the preceding description block directly from the...

Rocky Linux 8.6 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-efi-aa64 / etc Multiple Vulnerabilities (ciqsa-2026_1267)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261267 advisory. This advisory aggregates security fixes for the grub2 SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-1048, CVE-2023-4693, CVE-2023-4692. Tenable has...

Rocky Linux 10.1 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc (crlsa-2026_4649)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20264649 advisory. grub2: Missing unregister call for gettext command may lead to use-after-free CVE-2025-61662 Tenable has extracted the preceding description block directly from...