-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 05 Apr 2024 20:45:55 +0200
Source: grub2
Architecture: source
Version: 2.12-2
Distribution: unstable
Urgency: medium
Maintainer: GRUB Maintainers <pkg-grub-devel@alioth-lists.debian.net>
Changed-By: Julian Andres Klode <jak@debian.org>
Changes:
grub2 (2.12-2) unstable; urgency=medium
.
[ Mate Kukri ]
* Revert peimage to re-use GRUB's image handle (LP: #2057679) (LP: #2054127)
* d/build-efi-images: Make sure downstream didn't remove peimage SBAT
entry
* SECURITY UPDATE: Use-after-free in peimage module [LP: #2054127]
- CVE-2024-2312
.
[ Julian Andres Klode ]
* Bump SBAT level to `grub.peimage,2`; and also bump `grub.debian,5` to
make sure we can revoke any downstream users of peimage that forgot to
include the grub.peimage component if that should become necessary.
Checksums-Sha1:
d031e49f742966cd8573000662dca5a03390fd51 7382 grub2_2.12-2.dsc
9ef29f0fe7b621dbf80fdc0522db50857ec2a6b4 1093592 grub2_2.12-2.debian.tar.xz
e8b7510fc0171d1b32bf0425b8e12664eb6c5bcd 14088 grub2_2.12-2_source.buildinfo
Checksums-Sha256:
4f2a361a0489c69bada56d71971fcaff69f2a238402d43a27772eb4b36be1128 7382 grub2_2.12-2.dsc
d18abe39f859f9c53ef54963ba345b8d436511f61fada45355154908f29091e7 1093592 grub2_2.12-2.debian.tar.xz
181e4dbf3e624c780c9813d1c276289e135dd643e460780bc943a3723ba743d8 14088 grub2_2.12-2_source.buildinfo
Files:
4ef1402fcdf21f6534db5021a817f49c 7382 admin optional grub2_2.12-2.dsc
2f2e004557ae483f73a6a8c7b26e71f5 1093592 admin optional grub2_2.12-2.debian.tar.xz
f569af01676dddbaa3034225c45a701d 14088 admin optional grub2_2.12-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=IdmV
-----END PGP SIGNATURE-----
Attachment:
pgp4WbaCpkfNg.pgp
Description: PGP signature