grub2: Fix CVE-2015-8370
authorRosen Penev <rosenp@gmail.com>
Thu, 23 Aug 2018 02:07:57 +0000 (19:07 -0700)
committerJo-Philipp Wich <jo@mein.io>
Thu, 23 Aug 2018 05:15:53 +0000 (07:15 +0200)
commit7e73e9128f6a63b9198c88eea97c267810447be4
tree2124e723bd532b77b3047d1a725c02e54dc6f6a8
parentf9469efbfa7ce892651f9a6da713eacbef66f177
grub2: Fix CVE-2015-8370

This CVE is a culmination of multiple integer overflow issues that cause
multiple issues like Denial of Service and authentication bypass.

More info: https://nvd.nist.gov/vuln/detail/CVE-2015-8370

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
package/boot/grub2/Makefile
package/boot/grub2/patches/300-CVE-2015-8370.patch [new file with mode: 0644]