Multiple New Security Issues Hit GRUB Bootloader Around Secure Boot

[phoronix]

Phoronix: Multiple New Security Issues Hit GRUB Bootloader Around Secure Boot

Last summer the GRUB bootloader was impacted by "BootHole" with security issues hitting its UEFI Secure Boot support while today a new round of vulnerabilities were made public...

http://www.phoronix.com/scan.php?page=news_item&px=GRUB-2021-Secure-Boot-Issues

[angrypie]

If a bootloader can circumvent Secure Boot protections, is it really "secure?"

[mppix]

How about enabling alternative efi boot loaders across the board?

[bzs0]

is rEFInd any safer?

[Cellsheet1]

I stick with EFISTUB.

[OneTimeShot]

Grub is far too big these days...

They should have an option of “press a key to boot to a special OS” rather than the built-in commandline and gui.

We don’t *really* need a boot loader that has all those features... (or at least most people don’t).

just boot my machine, or switch to real OS if I am doing something interactive...

[tuxd3v]

This secure boot thing is causing a lot more troubles than bringing solutions to the table..

[ivan.cwb]

It's time to rewrite GRUB2 in Rust /s.

[juxuanu]

I wonder how will systemd's boot age regarding security issues.

[You-]

This secure boot thing is causing a lot more troubles than bringing solutions to the table..

Not really.

Without secure boot, these things could probably be done by default. By having it you are not getting any worse security than before, but at times it wont be better either due to these types of issues.