[From nobody Thu Nov  5 19:09:08 2026
Received: (at 1151556-close) by bugs.debian.org; 5 Nov 2026 19:08:03 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,
 FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,
 USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 112; hammy, 150; neutral, 158; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload,
 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo.
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:42276)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xP2od-00FE8P-1W for 1151556-close@bugs.debian.org;
 Thu, 05 Nov 2026 19:08:03 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by muffat.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xP2oc-007B0Z-2F for 1151556-close@bugs.debian.org;
 Thu, 05 Nov 2026 19:08:02 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=h79vOBPHGSkqgXTJvpjmffWxhszzCHOxaly9mMVgFx8=; b=m+Eyo7kz2B59p8EzwF5I7Q8yzI
 yHkARzUH+vkaN+IhaWf2+hCw8QNM3B/ECQc+tfZdB4RXaaZgZwCT2+PuTZS+mGvICH88mtVeno2Kt
 9LAOSwgUhmtvEOyaElRp8pYlWCMjud4BkmnU+z8RpD2UxSIlVhJSOP4I253Etw/ooQXoy1zJ0dPfU
 vimqtHeJKp70iEMSneJFEP0+cFH84rL1PPD4VgcC7JA0Ojcr7MVffO6egrieE2/0alfJWSKVSNHWx
 UdN9sWDbbozjqmedLTVR/EYgvJQ/na5D5oF4NDQFsK3fvkkUj0lG5zOlpClxQLsHjVDcQ2fp8tc1x
 ah8dPMSQ==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1xP2ob-00000005DWH-3dMq; Thu, 05 Nov 2026 19:08:01 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: Steve McIntyre &lt;93sam@debian.org&gt;
To: 1151556-close@bugs.debian.org
X-DAK: dak process-upload
X-Debian: DAK
X-Debian-Package: grub2
Debian: DAK
Debian-Changes: grub2_2.14-5_source.changes
Debian-Source: grub2
Debian-Version: 2.14-5
Debian-Architecture: source
Debian-Suite: unstable
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1151556: fixed in grub2 2.14-5
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============7819698920818092438==&quot;
Message-Id: &lt;E1xP2ob-00000005DWH-3dMq@fasolo.debian.org&gt;
Date: Thu, 05 Nov 2026 19:08:01 +0000

--===============7819698920818092438==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: grub2
Source-Version: 2.14-5
Done: Steve McIntyre &lt;93sam@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
grub2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1151556@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve McIntyre &lt;93sam@debian.org&gt; (supplier of updated grub2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 05 Nov 2026 16:51:52 +0100
Source: grub2
Architecture: source
Version: 2.14-5
Distribution: unstable
Urgency: medium
Maintainer: GRUB Maintainers &lt;pkg-grub-devel@alioth-lists.debian.net&gt;
Changed-By: Steve McIntyre &lt;93sam@debian.org&gt;
Closes: 1151556
Changes:
 grub2 (2.14-5) unstable; urgency=3Dmedium
 .
   [ Julian Andres Klode ]
   * Import Leo Sandoval's OpenPGP signing key
   * Update debian/watch file
 .
   [ Fabian Gr=C3=BCnbichler ]
   * Bump SBAT to grub,6 - all applicable fixes from the 2025 CVEs are
     already in version 2.14 upstream.
 .
   [ Steve McIntyre ]
   * Bump SBAT to grub,7 to go with the serial-MMIO secure boot bypass
     fix (CVE-2026-97876)
   * Stop trying to use qemu-system on i386 builds, it's gone away
     there. Closes: #1151556 . No longer build grub-firmware-qemu for
     i386, therefore.
Checksums-Sha1:
 4854633581db7edd49682392b8fff26d43cc516d 7194 grub2_2.14-5.dsc
 e2ba47d91ce2f80155adb14a939fbada3d4613b8 1100348 grub2_2.14-5.debian.tar.xz
 a5ade13545745f23f452e0d54bd319e728b45560 14573 grub2_2.14-5_source.buildinfo
Checksums-Sha256:
 7ac8933e8a17b34f35416904d68eba07e398c14786ef5e089c14ccd3b21a4f41 7194 grub2_=
2.14-5.dsc
 cd7f0765dcc9339732a66307eedd010a3f427218a0ba53b5d37690b1af76752a 1100348 gru=
b2_2.14-5.debian.tar.xz
 6a0ad4dba5a15c468a8c748990bfd9c0f54caf25d6f9c9d0b61d6f2b4d973e39 14573 grub2=
_2.14-5_source.buildinfo
Files:
 29a2ce351280e2e9fcfcb19aa9e277a8 7194 admin optional grub2_2.14-5.dsc
 3a2b3b660a08eca4ce29fc21b2b97ab0 1100348 admin optional grub2_2.14-5.debian.=
tar.xz
 85e9d8d22b38d34041954b7d0c3297d3 14573 admin optional grub2_2.14-5_source.bu=
ildinfo

-----BEGIN PGP SIGNATURE-----

iQJFBAEBCgAvFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmrs0IkRHDkzc2FtQGRl
Ymlhbi5vcmcACgkQWHl5VzRCaE6OEQ/9GF6pMU5qjQiQhEn5kx2VKXkD4rtf28z8
Wpd1IDdf6dznq5MVeaIx/QaBr9Ed3/6sGoVtZT/P44NrFAqIKJaAot/XRA836AsT
fsSbE+5SsYCDMtoagagNVDqJLGDPuzn5E3GsZwO5FS7kONbMY1Q5rvv1c29gtcDJ
3PPZGw2IPpAbGFBKjyZ8ZvRDq/+nWvPdrXP+lSMGKeZY+hzAMks7aWAm2qyPwmjq
SKB63UqVrFLf9/vcsoErAGVQJG3XErqNXisfIf1iui/+B6mXbXLYJcTeo78IzEnG
ByTeF2DhSl8JvZw7660Tbe1HrK1KWdtDMeUE+5l3uAh9GSxJWUU22KMNgZ/lTpqA
s2f/LEazDgxuMkaC8vG/KC/IvczmQLaBpt2N14pJ6QWlWWqYp+ruR7aGt9qeIJJa
lDv2pA8jHnGQVvqz9KFDRVt7iNohcoxt6yiPbQAynfrKLopLVQFPb59Qsr6zL8ud
9RB4/KNUZueHP/mpHURkoS+r5ATpkRNGDr/nnfG7I8s9ZgwszNdWQvdYI5Tsz2sv
MBh3HKluTN6Y/CUsUC9EBsPom7JE8FHTekidt+rryLTqP6dHFQu/97zckC1IkChZ
cV7cJtZZCTpgCXrtrm1DTYicc8Tt/gaovnjMwX08sLviJA3L/mdaHL6DDuu4NXw6
44iuxzDyhE4=3D
=3DpMyb
-----END PGP SIGNATURE-----


--===============7819698920818092438==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCauzUEQAKCRCb9qggYcy5
IbK/AQCyYDMYTg7MQpDJZ457k/QEMimZv3LXQu+kNIYLnUgpzAEAxVwhkEU/3zCX
s+n5NSVqMxr74sutxV8TQHsVi+evZww=
=2MsG
-----END PGP SIGNATURE-----

--===============7819698920818092438==--
]