Bug#1098319: grub2 CVEs in stable

Sylvain Beucler beuc at beuc.net
Thu Apr 17 14:25:33 BST 2025


Hi,

I'm part of the Debian LTS Team and checking on our grub2 status.

Are there any plans to work on a bullseye update?
(asking because grub2 maintainers have done so in the past, and because 
grub2 is listed at lts-do-call-me:)
https://salsa.debian.org/security-tracker-team/security-tracker/-/blob/master/data/packages/lts-do-call-me

Also, we're not familiar with the Debian signing service. Are there 
additional steps or tests to perform? Is it setup for 
security-master:oldstable?

Last, let us know if we can help with the bookworm update :)

Cheers!
Sylvain Beucler
Debian LTS Team

On Sat, 05 Apr 2025 22:49:40 +0200 Julian Andres Klode <jak at debian.org> 
wrote:
> On April 5, 2025 10:05:27 PM GMT+02:00, Petter Reinholdtsen <pere at hungry.com> wrote:
> >Is there any hope to get these issues fixed in Debian stable too?
> >
> 
> I expect in May I'll upload to stable-proposed-updates if there's no further regressions reported.



More information about the Pkg-grub-devel mailing list