SUSE-RU-2020:2457-1: important: Recommended update for grub2

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for grub2
______________________________________________________________________________

Announcement ID:    SUSE-RU-2020:2457-1
Rating:             important
References:         #1174567 #1175766 
Affected Products:
                    SUSE Linux Enterprise Module for Server Applications 15-SP2
                    SUSE Linux Enterprise Module for Basesystem 15-SP2
______________________________________________________________________________

   An update that has two recommended fixes can now be
   installed.

Description:

   This update for grub2 fixes the following issues:

   - The GRUB_VERIFY_FLAGS_DEFER_AUTH is enabled regardless secure boot
     status (bsc#1175766)

     A secure boot status check has been added before requesting other
   verifiers to verify external module, therefore external module loading can
   work after shim_lock module is loaded and secure boot turned off.

   - Make consistent check to enable relative path on btrfs (bsc#1174567)

     This fix unified the test in grub-install and grub-mkconfig. The path to
   default or selected btrfs subvolume/snapshot is used if the root file
   system is btrfs and the config has enabled btrfs snapshot booting.


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Server Applications 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP2-2020-2457=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2020-2457=1



Package List:

   - SUSE Linux Enterprise Module for Server Applications 15-SP2 (noarch):

      grub2-x86_64-xen-2.04-9.18.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64):

      grub2-2.04-9.18.1
      grub2-debuginfo-2.04-9.18.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 s390x x86_64):

      grub2-debugsource-2.04-9.18.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (noarch):

      grub2-arm64-efi-2.04-9.18.1
      grub2-i386-pc-2.04-9.18.1
      grub2-powerpc-ieee1275-2.04-9.18.1
      grub2-snapper-plugin-2.04-9.18.1
      grub2-systemd-sleep-plugin-2.04-9.18.1
      grub2-x86_64-efi-2.04-9.18.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (s390x):

      grub2-s390x-emu-2.04-9.18.1


References:

   https://bugzilla.suse.com/1174567
   https://bugzilla.suse.com/1175766