{"id":104320,"date":"2022-06-08T15:36:43","date_gmt":"2022-06-08T13:36:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot"},"modified":"2022-06-08T15:36:43","modified_gmt":"2022-06-08T13:36:43","slug":"uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","title":{"rendered":"Zranitelnosti v GRUB2, kter\u00e9 umo\u017e\u0148uj\u00ed obej\u00edt UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V na\u010d\u00edta\u010di GRUB2 bylo odstran\u011bno 7 zranitelnost\u00ed, kter\u00e9 umo\u017e\u0148uj\u00ed obej\u00edt mechanismus UEFI Secure Boot a spustit neov\u011b\u0159en\u00fd k\u00f3d, nap\u0159\u00edklad prov\u00e9st implantaci malwaru, kter\u00fd funguje na \u00farovni na\u010d\u00edta\u010de nebo j\u00e1dra. D\u00e1le byla zaznamen\u00e1na jedna zranitelnost v mezivrstv\u011b shim, kter\u00e1 tak\u00e9 umo\u017e\u0148uje obej\u00edt UEFI Secure Boot. Skupina zranitelnost\u00ed z\u00edskala k\u00f3dov\u00e9 jm\u00e9no Boothole 3, podobn\u011b jako d\u0159\u00edve identifikovan\u00e9 probl\u00e9my v na\u010d\u00edta\u010di.      <\/p>\n<p>Pro odstran\u011bn\u00ed probl\u00e9m\u016f v GRUB2 a shim budou distribuce schopny vyu\u017e\u00edt mechanismus SBAT (UEFI Secure Boot Advanced Targeting), jeho\u017e podpora byla zavedena pro GRUB2, shim a fwupd. SBAT byl vyvinut ve spolupr\u00e1ci s Microsoftem a zahrnuje p\u0159id\u00e1n\u00ed dal\u0161\u00edch metadat do spustiteln\u00fdch soubor\u016f komponent\u016f UEFI, kter\u00e1 obsahuj\u00ed informace o v\u00fdrobci, produktu, komponent\u011b a verzi. Tato metadata jsou digit\u00e1ln\u011b podepsan\u00e1 a mohou b\u00fdt samostatn\u011b zahrnuta do seznam\u016f povolen\u00fdch nebo zak\u00e1zan\u00fdch komponent\u016f pro UEFI Secure Boot.      <\/p>\n<p>Ve v\u011bt\u0161in\u011b linuxov\u00fdch distribuc\u00ed se pro ov\u011b\u0159en\u00e9 spu\u0161t\u011bn\u00ed v re\u017eimu UEFI Secure Boot pou\u017e\u00edv\u00e1 mal\u00e1 vrstva shim, kter\u00e1 je ov\u011b\u0159ena digit\u00e1ln\u00edm podpisem Microsoftu. Tato vrstva ov\u011b\u0159uje GRUB2 vlastn\u00edmi certifik\u00e1ty, co\u017e umo\u017e\u0148uje v\u00fdvoj\u00e1\u0159\u016fm distribuc\u00ed neov\u011b\u0159ovat ka\u017edou aktualizaci j\u00e1dra a GRUB u Microsoftu. Zranitelnosti v GRUB2 umo\u017e\u0148uj\u00ed dos\u00e1hnout vykon\u00e1v\u00e1n\u00ed vlastn\u00edho k\u00f3du ve f\u00e1zi po \u00fasp\u011b\u0161n\u00e9m ov\u011b\u0159en\u00ed shim, ale p\u0159ed spu\u0161t\u011bn\u00edm opera\u010dn\u00edho syst\u00e9mu, co\u017e se prokl\u00edn\u00e1 do \u0159et\u011bzce d\u016fv\u011bry v aktivn\u00edm re\u017eimu Secure Boot a z\u00edsk\u00e1v\u00e1 plnou kontrolu nad dal\u0161\u00edm procesem zav\u00e1d\u011bn\u00ed, v\u010detn\u011b zav\u00e1d\u011bn\u00ed jin\u00e9ho OS, modifikace komponent\u016f opera\u010dn\u00edho syst\u00e9mu a obch\u00e1zen\u00ed ochrany Lockdown.       <\/p>\n<p>Aby bylo mo\u017en\u00e9 odstranit probl\u00e9my v na\u010d\u00edta\u010di, budou muset distribuce vytvo\u0159it nov\u00e9 vnit\u0159n\u00ed digit\u00e1ln\u00ed podpisy a aktualizovat instal\u00e1tory, na\u010d\u00edta\u010de, bal\u00ed\u010dky s j\u00e1drem, fwupd firmwary a shim mezivrstvu. P\u0159ed zaveden\u00edm SBAT bylo aktualizace seznamu odvolan\u00fdch certifik\u00e1t\u016f (dbx, UEFI Revocation List) povinn\u00fdm p\u0159edpokladem pro \u00fapln\u00e9 zablokov\u00e1n\u00ed zranitelnosti, proto\u017ee \u00fato\u010dn\u00edk, bez ohledu na pou\u017eit\u00e9 opera\u010dn\u00ed syst\u00e9m, mohl pro kompromitaci UEFI Secure Boot pou\u017e\u00edt spustiteln\u00fd nosi\u010d se starou zranitelnou verz\u00ed GRUB2, podepsanou digit\u00e1ln\u00edm podpisem.     <\/p>\n<p>M\u00edsto odvol\u00e1n\u00ed podpisu SBAT umo\u017e\u0148uje blokovat jeho pou\u017e\u00edv\u00e1n\u00ed pro jednotliv\u00e9 verze komponent\u016f, ani\u017e by bylo nutn\u00e9 odvol\u00e1vat kl\u00ed\u010de pro Secure Boot. Blokov\u00e1n\u00ed zranitelnost\u00ed pomoc\u00ed SBAT nevy\u017eaduje pou\u017eit\u00ed seznamu odvolan\u00fdch certifik\u00e1t\u016f UEFI (dbx), a prov\u00e1d\u00ed se na \u00farovni v\u00fdm\u011bny vnit\u0159n\u00edho kl\u00ed\u010de pro vytv\u00e1\u0159en\u00ed podpis\u016f a aktualizaci GRUB2, shim a dal\u0161\u00edch dod\u00e1van\u00fdch artefakt\u016f na\u010d\u00edta\u010de. V sou\u010dasn\u00e9 dob\u011b byla podpora SBAT ji\u017e p\u0159id\u00e1na do v\u011bt\u0161iny popul\u00e1rn\u00edch distribuc\u00ed Linux.      <\/p>\n<p>Zji\u0161t\u011bn\u00e9 zranitelnosti:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2021-3696, CVE-2021-3695 - p\u0159ete\u010den\u00ed z\u00e1sobn\u00edku v hald\u011b p\u0159i zpracov\u00e1n\u00ed speci\u00e1ln\u011b form\u00e1tovan\u00fdch PNG obr\u00e1zk\u016f, kter\u00e9 teoreticky lze pou\u017e\u00edt k proveden\u00ed k\u00f3du \u00fato\u010dn\u00edka a obch\u00e1zen\u00ed UEFI Secure Boot. Je uvedeno, \u017ee probl\u00e9m je t\u011b\u017eko zneu\u017eiteln\u00fd, proto\u017ee k vytvo\u0159en\u00ed funk\u010dn\u00edho exploit je t\u0159eba splnit \u0159adu faktor\u016f a m\u00edt znalosti o uspo\u0159\u00e1d\u00e1n\u00ed pam\u011bti.\n<li class=\"l\"> CVE-2021-3697 - p\u0159ete\u010den\u00ed p\u0159i doln\u00edm okraji z\u00e1sobn\u00edku (buffer underflow) v k\u00f3du pro zpracov\u00e1n\u00ed JPEG obr\u00e1zk\u016f. Zneu\u017eit\u00ed tohoto probl\u00e9mu vy\u017eaduje z\u00edsk\u00e1n\u00ed informac\u00ed o uspo\u0159\u00e1d\u00e1n\u00ed pam\u011bti a je p\u0159ibli\u017en\u011b na stejn\u00e9 \u00farovni slo\u017eitosti jako probl\u00e9m s PNG (CVSS 7.5).\n<li class=\"l\"> CVE-2022-28733 \u2014 cel\u00e1 \u010d\u00edsla p\u0159ete\u010den\u00ed v funkci grub_net_recv_ip4_packets(), co\u017e umo\u017e\u0148uje manipulovat s parametrem rsm-&gt;total_len prost\u0159ednictv\u00edm odesl\u00e1n\u00ed speci\u00e1ln\u011b vytvo\u0159en\u00e9ho IP paketu. Probl\u00e9m je ozna\u010den jako nejnebezpe\u010dn\u011bj\u0161\u00ed mezi uveden\u00fdmi zranitelnostmi (CVSS 8.1). P\u0159i \u00fasp\u011b\u0161n\u00e9 exploataci zranitelnost umo\u017e\u0148uje zapisov\u00e1n\u00ed dat mimo hranice vyrovn\u00e1vac\u00ed pam\u011bti prost\u0159ednictv\u00edm alokace v\u011bdom\u011b men\u0161\u00edho po\u010dtu pam\u011bti.\n<li class=\"l\"> CVE-2022-28734 \u2014 jed byte buffer overflow p\u0159i zpracov\u00e1n\u00ed odd\u011blen\u00fdch HTTP hlavi\u010dek. Probl\u00e9m m\u016f\u017ee v\u00e9st k poru\u0161en\u00ed metadat GRUB2 (z\u00e1pis nulov\u00e9ho bytu ihned za koncem vyrovn\u00e1vac\u00ed pam\u011bti) p\u0159i anal\u00fdze speci\u00e1ln\u011b vytvo\u0159en\u00fdch HTTP po\u017eadavk\u016f.\n<li class=\"l\"> CVE-2022-28735 \u2014 probl\u00e9m v ov\u011b\u0159ova\u010di shim_lock, kter\u00fd umo\u017e\u0148uje na\u010d\u00edt\u00e1n\u00ed soubor\u016f, kter\u00e9 se net\u00fdkaj\u00ed j\u00e1dra. Zranitelnost m\u016f\u017ee b\u00fdt vyu\u017eita k na\u010d\u00edt\u00e1n\u00ed nezabezpe\u010den\u00fdch digit\u00e1ln\u011b nepodepsan\u00fdch modul\u016f j\u00e1dra nebo neov\u011b\u0159en\u00e9ho k\u00f3du v re\u017eimu UEFI Secure Boot.\n<li class=\"l\"> CVE-2022-28736 \u2014 p\u0159\u00edstup k ji\u017e uvoln\u011bn\u00e9 oblasti pam\u011bti v funkci grub_cmd_chainloader() prost\u0159ednictv\u00edm opakovan\u00e9ho spu\u0161t\u011bn\u00ed p\u0159\u00edkazu chainloader, kter\u00fd se pou\u017e\u00edv\u00e1 k na\u010d\u00edt\u00e1n\u00ed opera\u010dn\u00edch syst\u00e9m\u016f, kter\u00e9 nejsou podporov\u00e1ny v GRUB2. Exploatace m\u016f\u017ee v\u00e9st k vykon\u00e1n\u00ed k\u00f3du \u00fato\u010dn\u00edka, pokud \u00fato\u010dn\u00edk dok\u00e1\u017ee ur\u010dit zvl\u00e1\u0161tnosti rozd\u011blen\u00ed pam\u011bti v GRUB2.\n<li class=\"l\"> CVE-2022-28737 \u2014 p\u0159ete\u010den\u00ed vyrovn\u00e1vac\u00ed pam\u011bti ve vrstv\u00e1ch shim, kter\u00e9 vznik\u00e1 ve funkci handle_image() p\u0159i na\u010d\u00edt\u00e1n\u00ed a prov\u00e1d\u011bn\u00ed speci\u00e1ln\u011b vytvo\u0159en\u00fdch obraz\u016f EFI.          <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57316\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0435 shim, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot. \u0413\u0440\u0443\u043f\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Boothole 3, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438, \u0440\u0430\u043d\u0435\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104320","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-06-08T13:36:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-06-08T13:36:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnosti v GRUB2, kter\u00e9 umo\u017e\u0148uj\u00ed obej\u00edt UEFI Secure Boot | ProHoster","description":"Ve spu\u0161t\u011bn\u00ed GRUB2 bylo opraveno 7 zranitelnost\u00ed, kter\u00e9 umo\u017e\u0148uj\u00ed obej\u00edt mechanismus UEFI Secure Boot a dos\u00e1hnout spu\u0161t\u011bn\u00ed neov\u011b\u0159en\u00e9ho k\u00f3du, nap\u0159\u00edklad implementovat malware, kter\u00fd funguje na \u00farovni spou\u0161t\u011b\u010de.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-08T13:36:43+00:00","article:modified_time":"2022-06-08T13:36:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104320","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:38:52","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-08 13:37:42","updated":"2026-01-25 11:38:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104320"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104320\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}