Hey,
I have a UEFI dbx update listed in Discover.
It wants to update from 20230501 up to 20241101.
Is this kind of update safe to install or are there possible problems that could affect my pc if I take the risk and install it? Like the bootloader getting messed up and I cant boot into linux or my dualboot windows install?
I also currently have secureboot deactivated.
It shouldn’t cause any issues since you have Secure Boot disabled and what the UEFI dbx update modifies is the Secure Boot certificate revocation list.
I know applying that update can cause some headaches if Secure Boot is enabled and its settings are set too restrictively, or the certificate list hasn’t been updated in a while. That happened with my Microsoft Surface Pro 3 back in the Fedora 39 and 40 days, but it hasn’t cropped up again.
That update may disable the signing key for any drivers you have loaded locally (such as vboxdrv, nvidia, etc) but that can easily be recovered after the DBX is updated.
If you have secure boot disabled, then it doesn’t matter.
I would expect that if you boot Windows, it would also like to update the dbx, as the dbx updates ultimately comes from Microsoft.