Source: grub2
Version: 2.14-3
Severity: serious
Tags: security
X-Debbugs-Cc: [email protected], Debian Security Team 
<[email protected]>

This bug is already public due to uncoordinated disclosure in

  https://www.openwall.com/lists/oss-security/2026/09/13/5

GRUB upstream has a fix for this bug in the latest release (2.16); I'm
working on backporting this for older releases now.

-- 
Steve McIntyre, Cambridge, UK.                                [email protected]
"...In the UNIX world, people tend to interpret `non-technical user'
 as meaning someone who's only ever written one device driver." -- Daniel Pead

Attachment: signature.asc
Description: PGP signature

Reply via email to