Incomplete exclusion of the NTFS module in Grub2 with Secure Boot

Affected packages

grub-efi-amd64-signed 1+2.06+13+pmx6

Details

The NTFS fixes for the issues described in PSA-2025-00005-1 were reverted due to a regression. This was done under the assumption that the NTFS Grub module could not be loaded with Secure Boot enabled. However, this was not the case when the module was part of the monolithic GRUB EFI binary used in default setups that enable Secure Boot. To fix this, exclude the NTFS module from being part of the monolithic GRUB EFI binary.

Fixed in

grub-efi-amd64-signed 1+2.06+13+pmx7

References

PSA-2025-00005-1

This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.