6 Mar
2021
6 Mar
'21
07:25
On Fri, Mar 05, 2021 at 08:17:27PM -0000, Frank Krüger wrote:
Hi there
Regarding the security vulnerability of grub2 reported at https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html, is there any resolution for openSUSE to solve this complex issue?
We are working on this. The new grub2 as proposed would currently no longer allow chainloading Windows from grub2, which is a common use-case for openSUSE, so we need to figure out a solution. Note that the grub2 bugs itself largely are not relevant if attackers do not have physical console access. Ciao, Marcus