Debian Linux Security Advisory 2636-2 - A regression in combination with pygrub has been discovered. For the stable distribution (squeeze), these problems have been fixed in version 4.0.1-5.8.
ee72009eb00a50329387ebd0bcc9e9077fd8fb38c3b6a530a660483f4d1cb5f9