grub2: Fix CVE-2015-8370
authorRosen Penev <rosenp@gmail.com>
Thu, 23 Aug 2018 02:07:57 +0000 (19:07 -0700)
committerJo-Philipp Wich <jo@mein.io>
Thu, 30 Aug 2018 11:16:20 +0000 (13:16 +0200)
commita0569f5e812bbe27d460085d7e4430a87c55bf95
tree69e57f4eb1f499170eae3244e7c38962beea43cb
parent30758ee10e82a06ac4ed65f15d4cd93989f23fe6
grub2: Fix CVE-2015-8370

This CVE is a culmination of multiple integer overflow issues that cause
multiple issues like Denial of Service and authentication bypass.

More info: https://nvd.nist.gov/vuln/detail/CVE-2015-8370

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7e73e9128f6a63b9198c88eea97c267810447be4)
package/boot/grub2/Makefile
package/boot/grub2/patches/300-CVE-2015-8370.patch [new file with mode: 0644]