개요
GRUB2에서 발생하는 취약점에 대한 보안 업데이트를 발표하고, 최신버전 업데이트를 권고하였다.
기술
해결방안
운영체제의 홈페이지를 참고하여 취약점이 해결된 버전으로 업데이트를 적용한다.
- RedHat : RHSA-2020 : 3216, RHBA-2020 : 3262, RHSA-2020 : 3217, RHBA-2020 : 3265
- Debian : Debian 10.5
- Ubuntu : grub-efi-amd64-bin - 2.04-1ubuntu26.1
- CentOS : kernel-4.18.0-193.14.2.el8_2, grub2-2.02-87.el8_2, shim-x64-15-13.el8
- SUSE : grub2 >= 2.02-19.48.1Red Hat :
참고자료
https://www.krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=35546
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011
https://access.redhat.com/security/vulnerabilities/grub2bootloader
https://access.redhat.com/solutions/5272311
https://www.debian.org/security/2020-GRUB-UEFI-SecureBoot/
https://lists.centos.org/pipermail/centos-announce/2020-July/035779.html
https://ubuntu.com/security/notices/USN-4432-1
https://www.suse.com/security/cve/CVE-2020-10713/