Julian Andres Klode

Null-pointer dereference in python-apt TagSection.keys()

Red Hat Security Advisory: grub2, mokutil, shim, and shim-unsigned-x64 security update

Red Hat Security Advisory: grub2, mokutil, shim, and shim-unsigned-x64 security update

Red Hat Security Advisory: grub2, mokutil, and shim security update

Red Hat Security Advisory: grub2, mokutil, shim, and shim-unsigned-x64 security update

Red Hat Security Advisory: grub2, mokutil, shim, and shim-unsigned-x64 security update

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.

python-apt downloads from untrusted sources

python-apt uses MD5 for validation