Call for testing: grub2 security updates
Bug #1917509 reported by
Steve Beattie
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
grub2 (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
grub2-signed (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
grub2-unsigned (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Several security issues were announced on 2021-03-02, see https:/
As part of this update, a large number of changes were incorporated, both in grub2 and how it is packaged. Updates will initially be published to the -proposed pockets of each release. Testing is greatly appreciated and feedback can be collected on this bug report.
[XXX Fill in information on how to enable proposed and install grub updates here]
To post a comment you must log in.
On my local bare metal groovy install I tested upgrading to the new grub binaries from groovy-proposed and after a reboot my machine successfully booted - I have tried to generalise the instructions for doing this so they can be used on any release:
# enable use of -proposed as per https:/ /wiki.ubuntu. com/Testing/ EnableProposed sources. list.d/ ubuntu- $(lsb_release -cs)-proposed.list archive. ubuntu. com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
cat <<EOF | sudo tee /etc/apt/
# Enable Ubuntu proposed archive
deb http://
EOF
# only selectively upgrade from -proposed preferences. d/proposed- updates
cat <<EOF | sudo tee /etc/apt/
# Configure apt to allow selective installs of packages from proposed
Package: *
Pin: release a=$(lsb_release -cs)-proposed
Pin-Priority: 400
EOF
# get list of packages in -proposed
sudo apt update
# update standard grub2 packages from -proposed efi-amd64- bin/"$( lsb_release -cs)"-proposed \ efi-amd64- signed/ "$(lsb_ release -cs)"-proposed \ common/ "$(lsb_ release -cs)"-proposed \ pc/"$(lsb_ release -cs)"-proposed \ pc-bin/ "$(lsb_ release -cs)"-proposed \ common/ "$(lsb_ release -cs)"-proposed
sudo apt install \
grub-
grub-
grub2-
grub-
grub-
grub-
sudo reboot