{"id":104320,"date":"2022-06-08T15:36:43","date_gmt":"2022-06-08T13:36:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot"},"modified":"2022-06-08T15:36:43","modified_gmt":"2022-06-08T13:36:43","slug":"uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","title":{"rendered":"Zranite\u013enosti v GRUB2, ktor\u00e9 umo\u017e\u0148uj\u00fa ob\u00eds\u0165 UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V bootloaderi GRUB2 bolo opraven\u00fdch 7 zranite\u013enost\u00ed, ktor\u00e9 umo\u017e\u0148uj\u00fa ob\u00eds\u0165 mechanizmus UEFI Secure Boot a spusti\u0165 neoveren\u00fd k\u00f3d, napr\u00edklad implementova\u0165 malware funguj\u00faci na \u00farovni bootloadera alebo jadra. Navy\u0161e bola zaznamenan\u00e1 jedna zranite\u013enos\u0165 v priese\u010dn\u00edku shim, ktor\u00e1 taktie\u017e umo\u017e\u0148uje ob\u00eds\u0165 UEFI Secure Boot. Skupina zranite\u013enost\u00ed dostala k\u00f3dov\u00e9 meno Boothole 3, pod\u013ea podobn\u00fdch probl\u00e9mov, ktor\u00e9 boli u\u017e predt\u00fdm odhalen\u00e9 v bootloaderi.      <\/p>\n<p>Na odstr\u00e1nenie probl\u00e9mov v GRUB2 a shim distrib\u00facie m\u00f4\u017eu vyu\u017ei\u0165 mechanizmus SBAT (UEFI Secure Boot Advanced Targeting), ktor\u00e9ho podpora bola zaveden\u00e1 pre GRUB2, shim a fwupd. SBAT bol vyvinut\u00fd v spolupr\u00e1ci s Microsoft a zah\u0155\u0148a prid\u00e1vanie dodato\u010dn\u00fdch metad\u00e1t do vykonate\u013en\u00fdch s\u00faborov komponentov UEFI, ktor\u00e9 obsahuj\u00fa inform\u00e1cie o v\u00fdrobcovi, produkte, komponente a verzii. Tieto metad\u00e1ta s\u00fa digit\u00e1lne podp\u00edsan\u00e9 a m\u00f4\u017eu by\u0165 zvl\u00e1\u0161\u0165 zahrnut\u00e9 do zoznamov povolen\u00fdch alebo zak\u00e1zan\u00fdch komponentov pre UEFI Secure Boot.      <\/p>\n<p>V v\u00e4\u010d\u0161ine linuxov\u00fdch distrib\u00faci\u00ed pre overen\u00e9 bootovanie v re\u017eime UEFI Secure Boot sa pou\u017e\u00edva mal\u00fd priese\u010dn\u00edk shim, ktor\u00fd je digit\u00e1lne podp\u00edsan\u00fd Microsoftom. Tento priese\u010dn\u00edk overuje GRUB2 vlastn\u00fdm certifik\u00e1tom, \u010do umo\u017e\u0148uje v\u00fdvoj\u00e1rom distrib\u00faci\u00ed neoverova\u0165 ka\u017ed\u00fa aktualiz\u00e1ciu jadra a GRUB u Microsoftu. Zranite\u013enosti v GRUB2 umo\u017e\u0148uj\u00fa vykonanie vlastn\u00e9ho k\u00f3du po \u00faspe\u0161nej verifik\u00e1cii shim, ale pred na\u010d\u00edtan\u00edm opera\u010dn\u00e9ho syst\u00e9mu, pri\u010dom sa vkladaj\u00fa do re\u0165azca d\u00f4very pri akt\u00edvnom re\u017eime Secure Boot a z\u00edskavaj\u00fa pln\u00fa kontrolu nad \u010fal\u0161\u00edm procesom bootovania, vr\u00e1tane na\u010d\u00edtania in\u00e9ho opera\u010dn\u00e9ho syst\u00e9mu, modifik\u00e1cie komponentov opera\u010dn\u00e9ho syst\u00e9mu a obch\u00e1dzania ochrany Lockdown.       <\/p>\n<p>Na odstr\u00e1nenie probl\u00e9mov v bootloaderi bud\u00fa musie\u0165 distrib\u00facie vytvori\u0165 nov\u00e9 vn\u00fatorn\u00e9 digit\u00e1lne podpisy a aktualizova\u0165 in\u0161tal\u00e1tory, bootloadery, bal\u00edky s jadrom, fwupd firmv\u00e9r a shim priese\u010dn\u00edk. Pred zaveden\u00edm SBAT bola aktualiz\u00e1cia zoznamu odvolan\u00fdch certifik\u00e1tov (dbx, UEFI Revocation List) povinnou podmienkou na \u00fapln\u00e9 zablokovanie zranite\u013enosti, preto\u017ee \u00fato\u010dn\u00edk, bez oh\u013eadu na pou\u017e\u00edvan\u00fd opera\u010dn\u00fd syst\u00e9m, mohol na kompromit\u00e1ciu UEFI Secure Boot vyu\u017ei\u0165 bootovac\u00ed m\u00e9dium so starou zranite\u013enou verziou GRUB2, digit\u00e1lne podp\u00edsanou.     <\/p>\n<p>Namiesto zru\u0161enia podpisu SBAT umo\u017e\u0148uje blokova\u0165 jeho pou\u017e\u00edvanie pre jednotliv\u00e9 verzie komponentov bez potreby zru\u0161i\u0165 k\u013e\u00fa\u010de pre Secure Boot. Blokovanie zranite\u013enost\u00ed prostredn\u00edctvom SBAT nevy\u017eaduje pou\u017eitie zoznamu zru\u0161en\u00fdch certifik\u00e1tov UEFI (dbx) a vykon\u00e1va sa na \u00farovni v\u00fdmeny intern\u00e9ho k\u013e\u00fa\u010da na generovanie podpisov a aktualiz\u00e1ciu GRUB2, shim a \u010fal\u0161\u00edch dod\u00e1van\u00fdch distribu\u010dn\u00fdch zav\u00e1dzac\u00edch artefaktov. V s\u00fa\u010dasnosti bola podpora SBAT u\u017e pridan\u00e1 do v\u00e4\u010d\u0161iny popul\u00e1rnych distrib\u00faci\u00ed Linuxu.      <\/p>\n<p>Odhalen\u00e9 zranite\u013enosti:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2021-3696, CVE-2021-3695 - prete\u010denie vyrovn\u00e1vacej pam\u00e4te v hromade pri spracov\u00e1van\u00ed \u0161peci\u00e1lne form\u00e1tovan\u00fdch PNG obr\u00e1zkov, ktor\u00e9 teoreticky m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 na vykon\u00e1vanie k\u00f3du \u00fato\u010dn\u00edka a ob\u00eddenie UEFI Secure Boot. Poznamen\u00e1va sa, \u017ee probl\u00e9m je \u0165a\u017eko zneu\u017eite\u013en\u00fd, preto\u017ee na vytvorenie funk\u010dn\u00e9ho exploitu je potrebn\u00e9 zoh\u013eadni\u0165 mno\u017estvo faktorov a ma\u0165 inform\u00e1cie o rozlo\u017een\u00ed pam\u00e4te.\n<li class=\"l\"> CVE-2021-3697 - prete\u010denie vyrovn\u00e1vacej pam\u00e4te cez doln\u00fa hranicu (buffer underflow) v k\u00f3de spracovania JPEG obr\u00e1zkov. Zneu\u017eitie probl\u00e9mu si vy\u017eaduje z\u00edskanie inform\u00e1ci\u00ed o rozlo\u017een\u00ed pam\u00e4te a nach\u00e1dza sa pribli\u017ene na tej istej \u00farovni zlo\u017eitosti ako probl\u00e9m s PNG (CVSS 7.5).\n<li class=\"l\"> CVE-2022-28733 \u2014 celo\u010d\u00edslen\u00e9 prete\u010denie vo funkcii grub_net_recv_ip4_packets(), ktor\u00e9 umo\u017e\u0148uje ovplyvni\u0165 parameter rsm-&gt;total_len prostredn\u00edctvom zaslania \u0161peci\u00e1lne zostaven\u00e9ho IP paketu. Probl\u00e9m je ozna\u010den\u00fd ako najnebezpe\u010dnej\u0161ia z uveden\u00fdch zranite\u013enost\u00ed (CVSS 8.1). Pri \u00faspe\u0161nej exploit\u00e1cii zranite\u013enos\u0165 umo\u017e\u0148uje zap\u00edsa\u0165 d\u00e1ta mimo hran\u00edc vyrovn\u00e1vacej pam\u00e4te prostredn\u00edctvom pridelenia zjavne men\u0161ej ve\u013ekosti pam\u00e4te.\n<li class=\"l\"> CVE-2022-28734 \u2014 jednobajtov\u00e9 prete\u010denie vyrovn\u00e1vacej pam\u00e4te pri spracov\u00e1van\u00ed rozdelen\u00fdch HTTP hlavi\u010diek. Probl\u00e9m m\u00f4\u017ee vies\u0165 k po\u0161kodeniu metad\u00e1t GRUB2 (zaznamenanie nulov\u00e9ho bajtu hne\u010f za koncom vyrovn\u00e1vacej pam\u00e4te) pri anal\u00fdze \u0161peci\u00e1lne zostaven\u00fdch HTTP po\u017eiadaviek.\n<li class=\"l\"> CVE-2022-28735 \u2014 probl\u00e9m vo verifik\u00e1tore shim_lock, ktor\u00fd umo\u017e\u0148uje na\u010d\u00edta\u0165 s\u00fabory, ktor\u00e9 nie s\u00fa spojen\u00e9 s jadrom. Zranite\u013enos\u0165 m\u00f4\u017ee by\u0165 vyu\u017eit\u00e1 na na\u010d\u00edtanie v re\u017eime UEFI Secure Boot nezavret\u00fdch digit\u00e1lne podp\u00edsan\u00fdch modulov jadra alebo neoveren\u00e9ho k\u00f3du.\n<li class=\"l\"> CVE-2022-28736 \u2014 pr\u00edstup k u\u017e uvo\u013enenej oblasti pam\u00e4te vo funkcii grub_cmd_chainloader() prostredn\u00edctvom opakovan\u00e9ho spustenia pr\u00edkazu chainloader, ktor\u00fd sa pou\u017e\u00edva na na\u010d\u00edtanie opera\u010dn\u00fdch syst\u00e9mov, ktor\u00e9 nie s\u00fa podporovan\u00e9 v GRUB2. Exploit\u00e1cia m\u00f4\u017ee vies\u0165 k vykonaniu k\u00f3du \u00fato\u010dn\u00edka, ak sa \u00fato\u010dn\u00edkovi podar\u00ed ur\u010di\u0165 charakteristiky rozde\u013eovania pam\u00e4te v GRUB2.\n<li class=\"l\"> CVE-2022-28737 \u2014 prete\u010denie vyrovn\u00e1vacej pam\u00e4te v medzivrstve shim, ktor\u00e9 vznik\u00e1 vo funkcii handle_image() pri na\u010d\u00edtan\u00ed a vykon\u00e1van\u00ed \u0161peci\u00e1lne zostaven\u00fdch obrazov EFI.          <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57316\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0438\u043b\u0438 \u044f\u0434\u0440\u0430. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0435 shim, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot. \u0413\u0440\u0443\u043f\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Boothole 3, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438, \u0440\u0430\u043d\u0435\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104320","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-06-08T13:36:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-06-08T13:36:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enosti v GRUB2, ktor\u00e9 umo\u017e\u0148uj\u00fa ob\u00eds\u0165 UEFI Secure Boot | ProHoster","description":"Vo bootloaderi GRUB2 bolo odstr\u00e1nen\u00fdch 7 zranite\u013enost\u00ed, ktor\u00e9 umo\u017e\u0148ovali ob\u00eds\u0165 mechanizmus UEFI Secure Boot a dosiahnu\u0165 spustenie neoveren\u00e9ho k\u00f3du, napr\u00edklad vykona\u0165 vkladanie \u0161kodliv\u00e9ho softv\u00e9ru, ktor\u00fd funguje na \u00farovni bootloadera.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c UEFI Secure Boot \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-v-grub2-pozvolyayushhie-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-06-08T13:36:43+00:00","article:modified_time":"2022-06-08T13:36:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104320","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:38:52","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-06-08 13:37:42","updated":"2026-01-25 11:38:52","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/104320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=104320"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/104320\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=104320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=104320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=104320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}