Hi, The zstdio overrun fix was merged upstream as a7fc3af86174 (https://gitlab.freedesktop.org/gnu-grub/grub/-/merge_requests/304), after the 2.16 release. The code change is identical to the 0001 patch in my previous mail, and both patches apply unchanged to the 2.16 packaging in experimental as well. Thanks, Logan