-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 05 Apr 2024 20:50:28 +0200
Source: grub2
Architecture: source
Version: 2.12-2~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: GRUB Maintainers <pkg-grub-devel@alioth-lists.debian.net>
Changed-By: Julian Andres Klode <juliank@ubuntu.com>
Changes:
grub2 (2.12-2~deb13u1) trixie; urgency=medium
.
[ Mate Kukri ]
* Revert peimage to re-use GRUB's image handle (LP: #2057679) (LP: #2054127)
* d/build-efi-images: Make sure downstream didn't remove peimage SBAT
entry
* SECURITY UPDATE: Use-after-free in peimage module [LP: #2054127]
- CVE-2024-2312
.
[ Julian Andres Klode ]
* Bump SBAT level to `grub.peimage,2`; and also bump `grub.debian,5` to
make sure we can revoke any downstream users of peimage that forgot to
include the grub.peimage component if that should become necessary.
Checksums-Sha1:
3f02dff7ddbaf5fd7ae234b5a87727fd4101f881 7414 grub2_2.12-2~deb13u1.dsc
b2758104e70879ab5a935e730a043d8bbc1aa0ee 1093680 grub2_2.12-2~deb13u1.debian.tar.xz
51763ea93603ce54cf00371e24c2d98bb7d6af12 14120 grub2_2.12-2~deb13u1_source.buildinfo
Checksums-Sha256:
5548a71bf2f6e1a1db1ce78f40eb9fd020f088875704589e1b8e99f65a19c655 7414 grub2_2.12-2~deb13u1.dsc
c56fafea39b6ce7c1c6d122eceb5f73f648876644fb57110cdba765edd1a882e 1093680 grub2_2.12-2~deb13u1.debian.tar.xz
d9e32e365a4bd1d3a809dd6503c20b8b894ebf53f096b95f9970f631a81035ee 14120 grub2_2.12-2~deb13u1_source.buildinfo
Files:
250b35997aa65d042a135a52bb4f3fbc 7414 admin optional grub2_2.12-2~deb13u1.dsc
dd636888bc240721bdcf6aae985caeec 1093680 admin optional grub2_2.12-2~deb13u1.debian.tar.xz
7799e9ce990ec274c3f6ed027fd0ec18 14120 admin optional grub2_2.12-2~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=x8rz
-----END PGP SIGNATURE-----
Attachment:
pgpZG3TkWfHae.pgp
Description: PGP signature