from Hacker News

Multiple GRUB2 vulnerabilities – 2022/11/15

by jakobdabo on 11/17/22, 5:42 PM with 3 comments

• by fulafel on 11/17/22, 6:16 PM

  So apparently Grub inputs are security critical because it's been blessed to be a part of the TCB of secure boot systems.

  Previously: https://eclypsium.com/2021/04/14/boothole-how-it-started-how...

• by tinus_hn on 11/17/22, 7:54 PM

  Why is the attacker able to supply a crafted font? Why isn’t that cryptographically signed?