Stories
Slash Boxes
Comments

SoylentNews is people

posted by chromas on Saturday August 01 2020, @12:44AM   Printer-friendly
from the do-you-have-update-for-my-boothole? dept.

Red Hat and CentOS systems aren’t booting due to BootHole patches:

Early this morning, an urgent bug showed up at Red Hat's bugzilla bug tracker—a user discovered that the RHSA_2020:3216 grub2 security update and RHSA-2020:3218 kernel security update rendered an RHEL 8.2 system unbootable.

[...] The patches were intended to close a newly discovered vulnerability in the GRUB2 boot manager called BootHole.

[...] Unfortunately, Red Hat's patch to GRUB2 and the kernel, once applied, are leaving patched systems unbootable. The issue is confirmed to affect RHEL 7.8 and RHEL 8.2, and it may affect RHEL 8.1 and 7.9 as well. RHEL-derivative distribution CentOS is also affected.

Red Hat is currently advising users not to apply the GRUB2 security patches (RHSA-2020:3216 or RHSA-2020:3217) until these issues have been resolved.

Ubuntu and Debian are also apparently affected.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Interesting) by Anonymous Coward on Saturday August 01 2020, @02:10AM (2 children)

    by Anonymous Coward on Saturday August 01 2020, @02:10AM (#1029588)

    For all the proselytism from open source zealots about how it's supposedly superior, you'd think the code would have fewer bugs. It's remarkable just how low the quality of open source software truly is. It's embarrassingly bad.

    Starting Score:    0  points
    Moderation   +2  
       Interesting=2, Informative=1, Overrated=1, Total=4
    Extra 'Interesting' Modifier   0  

    Total Score:   2  
  • (Score: 5, Informative) by Runaway1956 on Saturday August 01 2020, @02:14AM

    by Runaway1956 (2926) Subscriber Badge on Saturday August 01 2020, @02:14AM (#1029592) Journal

    You're aware that all that boot security shit came from Microsoft, right? It ain't open source. Intel, which dances to the Microsoft tune ain't open source, either.

  • (Score: 2) by RS3 on Saturday August 01 2020, @02:56AM

    by RS3 (6367) on Saturday August 01 2020, @02:56AM (#1029602)

    You're way overgeneralizing. Mistakes happen anywhere. Most of open source is phenomenal. I've never had problems with open source or Linux in 25+ years, including adminning live servers for 13+ years. Most importantly: remember who owns RedHat now.