Source: grub2 Version: 2.14-3 Severity: serious Tags: security X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
This bug is already public due to uncoordinated disclosure in https://www.openwall.com/lists/oss-security/2026/09/13/5 GRUB upstream has a fix for this bug in the latest release (2.16); I'm working on backporting this for older releases now. -- Steve McIntyre, Cambridge, UK. [email protected] "...In the UNIX world, people tend to interpret `non-technical user' as meaning someone who's only ever written one device driver." -- Daniel Pead
signature.asc
Description: PGP signature

