이번 업데이트의 구체적인 목적은 무엇입니까? (새로운 BIOS?)

저는 상당히 오래된 서버인 Dell PowerEdge T20을 소유하고 있습니다.최신BIOS 버전 A20,Dell 업데이트 링크, 링크가 시간 내에 만료되는 경우 업데이트 화면:

오늘 아침 SSH를 통해 이 서버에 연결할 때 사용 가능한 펌웨어 업데이트가 있다는 메시지를 받았습니다. 아래 전체 세부 정보를 참조하세요. 또한 실행할 수 있다고 말했습니다.

fwupdmgr get-upgrades

그것에 대한 정보를 얻으십시오. 그게 제가 한 일입니다.

$ ssh-s
up 18 hours, 31 minutes

1 device has a firmware upgrade available.
Run `fwupdmgr get-upgrades` for more information.

root @ dell-poweredge-t20 /root # fwupdmgr get-upgrades
WARNING: UEFI capsule updates not available or enabled in firmware setup
  See https://github.com/fwupd/fwupd/wiki/PluginFlag:capsules-unsupported for more information.
Devices with no available firmware updates: 
 • Samsung SSD 860 PRO 256GB
 • WDC WD5000BMVU-11A08S0
PowerEdge T20
│
└─UEFI dbx:
  │   Device ID:          362301da643102b9f38477387e2193e57abaa590
  │   Summary:            UEFI Revocation Database
  │   Current version:    77
  │   Minimum Version:    77
  │   Vendor:             UEFI:Linux Foundation
  │   Install Duration:   1 second
  │   GUIDs:              c6682ade-b5ec-57c4-b687-676351208742 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503
  │                       f8ba2887-9411-5c36-9cee-88995bb39731 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503&ARCH_X64
  │   Device Flags:       • Internal device
  │                       • Updatable
  │                       • Supported on remote server
  │                       • Needs a reboot after installation
  │ 
  ├─Secure Boot dbx:
  │     New version:      217
  │     Remote ID:        lvfs
  │     Summary:          UEFI Secure Boot Forbidden Signature Database
  │     License:          Proprietary
  │     Size:             13.8 kB
  │     Created:          2020-07-29
  │     Urgency:          High
  │     Vendor:           Linux Foundation
  │     Duration:         1 second
  │     Flags:            is-upgrade
  │     Description:      
  │     This updates the dbx to the latest release from Microsoft which adds insecure versions of grub and shim to the list of forbidden signatures due to multiple discovered security updates.
  │     
  │     Before installing the update, fwupd will check for any affected executables in the ESP and will refuse to update if it finds any boot binaries signed with any of the forbidden signatures. If the installation fails, you will need to update shim and grub packages before the update can be deployed.
  │     
  │     Once you have installed this dbx update, any DVD or USB installer images signed with the old signatures may not work correctly. You may have to temporarily turn off secure boot when using recovery or installation media, if new images have not been made available by your distribution.
  │   
  ├─Secure Boot dbx:
  │     New version:      211
  │     Remote ID:        lvfs
  │     Summary:          UEFI Secure Boot Forbidden Signature Database
  │     License:          Proprietary
  │     Size:             13.5 kB
  │     Created:          2021-04-29
  │     Urgency:          High
  │     Vendor:           Linux Foundation
  │     Duration:         1 second
  │     Flags:            is-upgrade
  │     Description:      
  │     This updates the dbx to the latest release from Microsoft which adds insecure versions of grub and shim to the list of forbidden signatures due to multiple discovered security updates.
  │   
  └─Secure Boot dbx:
        New version:      190
        Remote ID:        lvfs
        Summary:          UEFI Secure Boot Forbidden Signature Database
        License:          Proprietary
        Size:             14.4 kB
        Created:          2020-07-29
        Urgency:          High
        Vendor:           Linux Foundation
        Duration:         1 second
        Flags:            is-upgrade
        Description:      
        This updates the dbx to the latest release from Microsoft which adds insecure versions of grub and shim to the list of forbidden signatures due to multiple discovered security updates.
      
root @ dell-poweredge-t20 /root # 

Linux를 사용하여 BIOS/UEFI를 업데이트한 적이 없습니다. 내 첫 번째 질문은 다음과 같습니다.

이번 업데이트의 구체적인 목적은 무엇입니까? (새로운 BIOS?)

둘째, 업데이트를 계속해도 안전하며, 단점/장점이 있나요?

감사해요.

노트:

• 서버가 Debian 11을 실행 중입니다.

• 이 컴퓨터에서는 보안 부팅이 비활성화되어 있습니다.

• 비활성화했습니다UEFI 캡슐예방 조치로 BIOS를 업데이트하십시오.