Re: Bug#991691: Possible CVE-2014-5461 in grub2

2021-08-09 Thread Daniel Kiper
Hi, On Fri, Jul 30, 2021 at 08:55:06PM +0400, Movses Tovmasyan wrote: > Package: grub2 > Version: 2.02~beta3-5+deb9u2 > Tags: patch > > grub2 uses the obsolete version of minilua > (single-file port of Lua) which has CVE-2014-5461 > Patch attached below. Thanks for the report. This patch does not

Bug#991691: Possible CVE-2014-5461 in grub2

2021-07-30 Thread Movses Tovmasyan
Package: grub2 Version: 2.02~beta3-5+deb9u2 Tags: patch grub2 uses the obsolete version of minilua (single-file port of Lua) which has CVE-2014-5461 Patch attached below. patch Description: Binary data ___ Grub-devel mailing list Grub-devel@gnu.org htt