Debian/grub2: unknown
A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the password_pbkdf2 directive in the fi
Action: Upgrade grub2 to 2.00-20 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.00-20 | - |
Fixed versions
| 2.00-20 |
Sources
published · modified · JSON