openSUSE Security

Download

security@lists.opensuse.org

July 2020

2 participants
1 discussions

[opensuse-security] Re: [security-announce] Heads up: "BootHole" security issue
by mailinglisten＠posteo.de 03 Aug '20

03 Aug '20

Am 29.07.20 um 20:07 schrieb Marcus Meissner: > Hi folks, > > Researchers from Eclypsium just published a new vulnerability in grub2 called > "BootHole". > > We put a highlevel view in a blog: > https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/ > > and our TID: > https://www.suse.com/support/kb/doc/?id=000019673 Unfortunately, neither document gives the complete key id so we can know what SUSE keys precisely are to be changed. If I understand correctly "openSUSE Secure Boot CA" with sha1 fingerprint 46:59:83:8c:82:03:fe:15:52:ad:19:e1:86:09:db:21:7e:3a:d2:4f will stay unchanged? Is the new key available for download somewhere? I have my own set of PK/KEK and import such keys usually manually. Thanks -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

3 6