Slackware: 2015-351-01: grub Security Update
Summary
Here are the details from the Slackware 14.1 ChangeLog: patches/packages/grub-2.00-i486-3_slack14.1.txz: Rebuilt. Patched bug where password protection during system startup may be bypassed by hitting the backspace key 28 times giving a rescue shell. Thanks to Hector Marco and Ismael Ripoll. For more information, see: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8370 (* Security fix *)
Where Find New Packages
Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.
Updated package for Slackware 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/grub-2.00-i486-3_slack14.1.txz
Updated package for Slackware x86_64 14.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/grub-2.00-x86_64-3_slack14.1.txz
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:
MD5 Signatures
Slackware 14.1 package:
5de408a0c4faa8c4cb7fbf926d983b17 grub-2.00-i486-3_slack14.1.txz
Slackware x86_64 14.1 package:
8c7c4da23a03536fc5306fce459d0695 grub-2.00-x86_64-3_slack14.1.txz
Slackware -current package:
5a416c513f561c91bb8fc1387f6622d3 a/grub-2.00-i586-3.txz
Slackware x86_64 -current package:
37119f35ad70e576303636cd3e9b4f0e a/grub-2.00-x86_64-3.txz
Installation Instructions
Installation instructions: Upgrade the package as root: # upgradepkg grub-2.00-i486-3_slack14.1.txz