[CentOS] does centos have this grub2 issue?

[Johnny Hughes]

On 12/20/2015 06:03 PM, Mike - st257 wrote:
> On Thu, Dec 17, 2015 at 1:41 PM, Wes James <comptekki at me.com> wrote:
> 
>>
>>> On Dec 17, 2015, at 11:29 AM, Mike - st257 <silvertip257 at gmail.com>
>> wrote:
>>>
>>> On Thu, Dec 17, 2015 at 1:19 PM, Wes James <comptekki at me.com> wrote:
>>>
>>>> I saw this today:
>>>>
>>>>
>>>>
>> http://linux.slashdot.org/story/15/12/16/040223/0-day-grub2-authentication-bypass-hits-linux
>>>>
>>>> I installed a grub2 update in 7.2 yesterday. Did the update fix this?
>>>>
>>>
>>> From the changelog, I'd say yes.
>>>
>>> ~]# yum changelog 1 grub2
>>> <...snipped..>
>>>
>>> Listing 1 changelog
>>>
>>> ==================== Installed Packages ====================
>>> 1:grub2-2.02-0.33.el7.centos.1.x86_64    installed
>>> * Wed Dec 16 07:00:00 2015 Karanbir Singh <kbsingh at centos.org>
>>> 2.02-0.33.el7.centos.1
>>> - Add patch to fix grub password path ( hughesjr )
>>>
>>> changelog stats. 1 pkg, 1 source pkg, 1 changelog
>>>
>>
>>
>> OK. Thanks.  I’ll use that command next time to check.
>>
> 
> Be sure to install yum-plugin-changelog (it's in the base repo) first.
> 
> 

You can also just run:

rpm -q --changelog grub2 | less




-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <http://lists.centos.org/pipermail/centos/attachments/20151221/a7279690/attachment.sig>