[Stable Update] 2020-08-16 - Kernels, Plasma, KDE Framework, Systemd, Pamac, VirtualBox, Firefox

[lectrode]

Excerpt from the “Boot-Hole” documentation:

In the course of Eclypsium’s analysis, we have identified a buffer overflow vulnerability in the way that GRUB2 parses content from the GRUB2 config file (grub.cfg). […] As a result, an attacker could modify the contents of the GRUB2 configuration file to ensure that attack code is run before the operating system is loaded. In this way, attackers gain persistence on the device.

In order to exploit this vulnerability, an attacker would already need to have root access to the system (or the ability to boot from external media, which would require physical access - at which point all bets are off anyway).

You only need to re-install grub if you are concerned about this vulnerability. If you just update normally and skip re-installing grub, your system should continue to function like normal.