Has the Boothole vulnerability been fixed?

[Kellynelly]

Hey boys.

I was reading and came across the “boothole” vulnerability, is it still out there or is there a permanent fix for it as it’s kinda confusing with all the articles posted everywhere saying one thing and another. Would appreciate it if someone could enlighten me about this boothole thingy

 

[f33dm3bits]

Yes it has been fixed.

Boot Hole Vulnerability - GRUB 2 boot loader - CVE-2020-10713 - Red Hat Customer Portal

Access Red Hat’s knowledge, guidance, and support through your subscription.

access.redhat.com

 

[Kellynelly]

Yes it has been fixed.

Boot Hole Vulnerability - GRUB 2 boot loader - CVE-2020-10713 - Red Hat Customer Portal

Access Red Hat’s knowledge, guidance, and support through your subscription.

access.redhat.com

Wow, u reply faster than I wrote my question! Thanks btw. How was this vulnerability fixed and do we have to do anything such as updating or ….. I’d like to know more

 

[f33dm3bits]

Here's the general link where the CVE's for mulitple distributions are linked

CVE-2020-10713: “BootHole” GRUB2 Bootloader Arbitrary Code Execution Vulnerability

Recently disclosed vulnerability in GRUB2 bootloader dubbed “BootHole” could allow an attacker to gain silent malicious persistence by attacking the GRUB2 config file, grub.cfg. Background On July 29, researchers at Eclypsium disclosed a high severity vulnerability in the GRand Unified...

www.tenable.com

Here's the one for Debian:

Debian -- Security Information -- DSA-4735-1 grub2