The version 2 of the Grand Unified Bootloader (GRUB), a highly configurable and customizable bootloader with modular architecture. The packages support a variety of Linux kernel formats, file systems, computer architectures, and hardware devices.
Hector Marco and Ismael Ripoll discovered that GRUB incorrectly handled the backspace key when configured to use authentication (in username and password prompts). A local attacker could use this issue to bypass GRUB password protection and gain administrative access to the system.
All grub2 users are advised to upgrade to the updated packages, which contain backported patches to correct these issues.