GRUB: Multiple vulnerabilities Multiple vulnerabilities have been found in GRUB, the worst might allow for circumvention of UEFI Secure Boot. grub 2021-04-30 2021-04-30 734654 773991 local 2.06_rc1 2.06_rc1

GNU GRUB is a multiboot boot loader used by most Linux systems.

Multiple vulnerabilities have been discovered in GRUB. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All GRUB users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=sys-devel/grub-2.06_rc1"

After upgrading, make sure to run the grub-install command with options appropriate for your system. See the GRUB Quick Start guide in the references below for examples. Your system will be vulnerable until this action is performed.

CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-14372 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 GRUB Quick Start guide whissi whissi