> On Dec 17, 2015, at 11:29 AM, Mike - st257 <silvertip257 at gmail.com> wrote: > > On Thu, Dec 17, 2015 at 1:19 PM, Wes James <comptekki at me.com> wrote: > >> I saw this today: >> >> >> http://linux.slashdot.org/story/15/12/16/040223/0-day-grub2-authentication-bypass-hits-linux >> >> I installed a grub2 update in 7.2 yesterday. Did the update fix this? >> > > From the changelog, I'd say yes. > > ~]# yum changelog 1 grub2 > <...snipped..> > > Listing 1 changelog > > ==================== Installed Packages ===================> 1:grub2-2.02-0.33.el7.centos.1.x86_64 installed > * Wed Dec 16 07:00:00 2015 Karanbir Singh <kbsingh at centos.org> > 2.02-0.33.el7.centos.1 > - Add patch to fix grub password path ( hughesjr ) > > changelog stats. 1 pkg, 1 source pkg, 1 changelog >OK. Thanks. I?ll use that command next time to check. -wes
On Thu, Dec 17, 2015 at 1:41 PM, Wes James <comptekki at me.com> wrote:> > > On Dec 17, 2015, at 11:29 AM, Mike - st257 <silvertip257 at gmail.com> > wrote: > > > > On Thu, Dec 17, 2015 at 1:19 PM, Wes James <comptekki at me.com> wrote: > > > >> I saw this today: > >> > >> > >> > http://linux.slashdot.org/story/15/12/16/040223/0-day-grub2-authentication-bypass-hits-linux > >> > >> I installed a grub2 update in 7.2 yesterday. Did the update fix this? > >> > > > > From the changelog, I'd say yes. > > > > ~]# yum changelog 1 grub2 > > <...snipped..> > > > > Listing 1 changelog > > > > ==================== Installed Packages ===================> > 1:grub2-2.02-0.33.el7.centos.1.x86_64 installed > > * Wed Dec 16 07:00:00 2015 Karanbir Singh <kbsingh at centos.org> > > 2.02-0.33.el7.centos.1 > > - Add patch to fix grub password path ( hughesjr ) > > > > changelog stats. 1 pkg, 1 source pkg, 1 changelog > > > > > OK. Thanks. I?ll use that command next time to check. >Be sure to install yum-plugin-changelog (it's in the base repo) first.> > -wes > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos >-- ---~~.~~--- Mike // SilverTip257 //
On 12/20/2015 06:03 PM, Mike - st257 wrote:> On Thu, Dec 17, 2015 at 1:41 PM, Wes James <comptekki at me.com> wrote: > >> >>> On Dec 17, 2015, at 11:29 AM, Mike - st257 <silvertip257 at gmail.com> >> wrote: >>> >>> On Thu, Dec 17, 2015 at 1:19 PM, Wes James <comptekki at me.com> wrote: >>> >>>> I saw this today: >>>> >>>> >>>> >> http://linux.slashdot.org/story/15/12/16/040223/0-day-grub2-authentication-bypass-hits-linux >>>> >>>> I installed a grub2 update in 7.2 yesterday. Did the update fix this? >>>> >>> >>> From the changelog, I'd say yes. >>> >>> ~]# yum changelog 1 grub2 >>> <...snipped..> >>> >>> Listing 1 changelog >>> >>> ==================== Installed Packages ===================>>> 1:grub2-2.02-0.33.el7.centos.1.x86_64 installed >>> * Wed Dec 16 07:00:00 2015 Karanbir Singh <kbsingh at centos.org> >>> 2.02-0.33.el7.centos.1 >>> - Add patch to fix grub password path ( hughesjr ) >>> >>> changelog stats. 1 pkg, 1 source pkg, 1 changelog >>> >> >> >> OK. Thanks. I?ll use that command next time to check. >> > > Be sure to install yum-plugin-changelog (it's in the base repo) first. > >You can also just run: rpm -q --changelog grub2 | less -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos/attachments/20151221/a7279690/attachment-0001.sig>