Bug#966554: grub2-common: BootHole fixes in DSA-4735-1 break dual-boot with Windows

[Janek Stolarek]

Hi Steve,

> Are you using Secure Boot on this machine?
Yes:

[root at skynet : ~] dmesg | grep secu
[    0.000000] secureboot: Secure boot enabled

> Can you please confirm if going back to the previous
> versions of the Grub packages fixes the problem for you?
I can confirm that performing the following downgrade fixes the problem:

[DOWNGRADE] grub-common:amd64 2.02+dfsg1-20+deb10u1 -> 2.02+dfsg1-20
[DOWNGRADE] grub-efi-amd64:amd64 2.02+dfsg1-20+deb10u1 -> 2.02+dfsg1-20
[DOWNGRADE] grub-efi-amd64-bin:amd64 2.02+dfsg1-20+deb10u1 -> 2.02+dfsg1-20
[DOWNGRADE] grub-efi-amd64-signed:amd64 1+2.02+dfsg1+20+deb10u1 -> 1+2.02+dfsg1+20
[DOWNGRADE] grub2-common:amd64 2.02+dfsg1-20+deb10u1 -> 2.02+dfsg1-20

Also, I have seen posts on reddit complaining about the same problem so it's not just me.

Janek