#Microsoft used its #AI-powered #SecurityCopilot to discover 20 previously unknown vulnerabilities in the #GRUB2, #UBoot, and #Barebox #opensource #bootloaders.
GRUB2 (GRand Unified Bootloader) is the default boot loader for most #Linux distributions, including Ubuntu, while U-Boot and Barebox are commonly used in embedded and #IoT devices.
https://www.bleepingcomputer.com/news/security/microsoft-uses-ai-to-find-flaws-in-grub2-u-boot-barebox-bootloaders/ #ITSec
#grub2
0 posts0 participants0 posts today
Microsoft AI Security Copilot Finds Hidden Flaws in GRUB2 and Other Bootloaders
#Cybersecurity #Microsoft #SecurityCopilot #GRUB2 #Uboot #Barebox #AI #OpenSourceSecurity #UEFI #Linux #VulnerabilityResearch
Continued thread
So, what to do? First, enter in the 3rd OS (Open SUSE) (before going in Windows!!!) and copy the contents being in /boot/grub/grub.cfg (to use in the 2nd OS, so use some Internet or USB or whatever). Second, in the 2nd OS (Debian-like) paste those contents in a new file /boot/grub/custom.cfg (see https://forums.debian.net/viewtopic.php?p=781500#p781500, https://forums.debian.net/viewtopic.php?t=159094) And 3rd, it is possible you have to replace in that file the entries /boot with entries /@/boot (https://forums.opensuse.org/t/trying-to-dualboot-opensuse-and-linux-mint-by-adding-mint-to-opensuse-grub-but-when-selecting-entry-i-get-error-you-need-to-load-kernel-first/179906).
You can check this in the grub: press c to enter in the command line tool, press ls -l to see the partitions, and for example if (hd0,gpt1) is one of them, 'ls (hd0,gpt1)'+tab will show you the possible paths, being of the form '/boot' or being first '/@' and then '/@/boot'..
Anyway, I got Open SUSE Tumbleweed installed and accessible with Debian Grub2 after all the previous afternoon+evening+night looking for a solution.
2/2
forums.debian.net[Solved] Debian grub does not find Fedora - Debian User Forums
GRUB developers are preparing 73 security patches for 2025 — a major cleanup effort tackling old CVEs, long-standing issues, and security debt. Most fixes are already upstream. #SecureBoot users, keep an eye on this.
Details: https://www.phoronix.com/news/GRUB2-73-Patches-Security-2025
#Linux #Grub #grub2 #Security #OpenSource
www.phoronix.comGRUB Bootloader Received 73 Patches To Fix A Variety Of Recent Security IssuesThe GRUB bootloader saw a set of 73 patches last month for addressing a variety of security flaws that were discovered.
Ask UbuntuSystem is not starting due to an unknown issueFirst the system os showing this:
Then it is showing these boot messages:
Then it is showing only this:
While the system is starting, it shows the above messages, like grub started, grub failed ...
Ask UbuntuSystem is not starting due to unknown issueFirst the system showing this:
Then it is showing these messages:
Then it is showing only this:
While the system is starting, it shows the above messages, like grub started, grub failed boot det...
Continued thread
Is there some simpler way to modify #grub2 so it takes the disk encryption keys from a USB stick during boot? I did it once on Arch, it was a pain to get the syntax right.
Got an #OpenSuse #MicroOS now with encrypted disk that's supposed to boot without screen attached, taking the luks2 keys from a USB stick that gets removed after boot finished.
#Linux #Security
UEFI оказалась не такой уж и сложной технологией.
Оказывается, можно просто создать раздел FAT32 с типом ef, сделать его активным, создать там папку EFI, а в ней BOOT. И положить туда grubx64.efi переименовав его в bootx64.efi. И при перезагрузке прошивка EFI материнской платы сама найдёт этот раздел, залезет в папку EFI/BOOT и загрузит и запустит bootx64.efi. И появится командная строка GRUB2.
Если подложить в правильное место grub.cfg, то появится меню, а не командная строка.
Поскольку я использовал для экспериментов GRUB из ubuntu, то в нём был захардкожен путь /EFI/ubuntu. Соответственно, туда и пришлось класть grub.cfg и grubenv (для удобства).
Но это при условии, если в NVRAM переменные BOOT001, BOOT002 и т.д. отсутствуют или ведут к несуществующим или поломанным загрузчикам. UEFI в первую очередь пытается загрузить файлы загрузчики из этих переменных.
Можно ещё распаковать в EFI раздел rEFInd, который может загружать разные операционные системы в режиме EFI. А поскольку он основывается на GRUB2, тоже умеет напрямую грузить ядро linux.
Well, apparently I've rebooted my test VM a bit prematurely… #grub2 is now 
Send help?
Creation of a Ubuntu-based Server providing PXE and HTTPBoot functionality #networking #server #grub2 #pxe #syslinux
Ask UbuntuCreation of a Ubuntu-based Server providing PXE and HTTPBoot functionalityI am working on an ongoing project which involves having a Server providing PXE and HTTP boot functionality for the install of various Operating Systems
Unfortunately i cannot go into a massive amo...
Petite bouteille à la mer, si vous utilisez la distro #NixOS et que vous avez activé le chiffrement du disque via #LUKS, comment faites vous pour configurer la disposition du clavier dans #GRUB2 pour taper le mot de passe avec un clavier ISO FR ? J'ai testé tout un tas de trucs suggéré ici (https://discourse.nixos.org/t/can-nixos-set-keyboard-for-grub-luks-password/29623) mais rien ne semble fonctionner. Merci bien 
NixOS Discourse · Can NixOS Set Keyboard for Grub/LUKS Password?I’ve used DVORAK keyboard my entire career and have successfully set up NixOS 23.05 to use DVORAK keyboard via following lines in my configuration.nix : services.xserver.xkbVariant = "dvorak’; console.keyMap = “dvorak”; So far, so good. However I’ve also set up my NixOS 23.05 to use LUKS disk encryption which prompts me for my LUKS decryption password during boot via Grub and only responds/decrypts when I enter the password via QWERTY keyboard layout. I’ve searched all manner of NixOS optio...
Replied in thread
#MicroOS and #Tumbleweed users! #GRUB2 with Boot Loader Specification (BLS) is now available, offering dynamic boot entries and improved full-disk #encryption support. Dive into the details and boost your system’s security! 
#FDE #openSUSE https://news.opensuse.org/2024/10/08/grub2-bls/
openSUSE NewsPresenting GRUB2 BLSGRUB2 with BLS is now in MicroOS and Tumbleweed Recently the openSUSE project released for MicroOS and Tumbleweed a new version of the GRUB2 package, with a ...
️
#GRUB2 with #BLS is now available in #MicroOS and #Tumbleweed! 
This update brings dynamic boot entries and better full-disk encryption support. #opensource #openSUSE #Linux #FDE
https://news.opensuse.org/2024/10/08/grub2-bls/
openSUSE NewsPresenting GRUB2 BLSGRUB2 with BLS is now in MicroOS and Tumbleweed Recently the openSUSE project released for MicroOS and Tumbleweed a new version of the GRUB2 package, with a ...