[PLUG] shim vuln

[jeff via plug <plug@lists.phillylinux.org>]

Critical vulnerability affecting most Linux distros allows for bootkits

https://arstechnica.com/security/2024/02/critical-vulnerability-affecting-most-linux-distros-allows-for-bootkits/


The vulnerability resides in shim, which in the context of Linux is a 
small component that runs in the firmware early in the boot process 
before the operating system has started. More specifically, the shim 
accompanying virtually all Linux distributions plays a crucial role in 
secure boot, a protection built into most modern computing devices to 
ensure every link in the boot process comes from a verified, trusted 
supplier. Successful exploitation of the vulnerability allows attackers 
to neutralize this mechanism by executing malicious firmware at the 
earliest stages of the boot process before the Unified Extensible 
Firmware Interface firmware has loaded and handed off control to the 
operating system.
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug