Debian/grub2: medium 6.4
A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if
Action: Upgrade grub2 to 2.06-13+deb12u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.06-13+deb12u2 | - |
Fixed versions
| 2.06-13+deb12u2 |
Sources
published · modified · JSON