grub2_2.12~rc1-11_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Oct 2023 15:55:25 +0200
Source: grub2
Architecture: source
Version: 2.12~rc1-11
Distribution: unstable
Urgency: medium
Maintainer: GRUB Maintainers <pkg-grub-devel at alioth-lists.debian.net>
Changed-By: Julian Andres Klode <juliank at ubuntu.com>
Changes:
 grub2 (2.12~rc1-11) unstable; urgency=medium
 .
   [ Mate Kukri ]
   * SECURITY UPDATE: Crafted file system images can cause out-of-bounds write
     and may leak sensitive information into the GRUB pager.
     - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-
       label.patch:
       fs/ntfs: Fix an OOB read when parsing a volume label
     - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-bs-for-
       index-at.patch:
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
     - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-dory-
       entries-fr.patch:
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and
       non-resident index attributes
     - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-reading-data-fhe-
       reside.patch:
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA +
       attribute
     - CVE-2023-4693
   * SECURITY UPDATE: Crafted file system images can cause heap-based buffer
     overflow and may allow arbitrary code execution and secure boot bypass.
     - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-write-when-parsing-the-
       ATTRIBUTE_LIST-.patch:
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for
       the $MFT file
     - d/patches/ntfs-cve-fixes/fs-ntfs-Make-code-more-readable.patch
       fs/ntfs: Make code more readable
     - CVE-2023-4692
   * efi: Cleanup peimage.c
 .
   [ Julian Andres Klode ]
   * Bump SBAT to grub,4
Checksums-Sha1:
 4d4e589c43a6a69805e563ae2ca757bdf8211991 7151 grub2_2.12~rc1-11.dsc
 c97e47a9167999420135ba8fd3964a02d0c2f0b5 1073004 grub2_2.12~rc1-11.debian.tar.xz
 63c2b510c7136a62016fb391804cd8b0cdb17eb4 13791 grub2_2.12~rc1-11_source.buildinfo
Checksums-Sha256:
 4b023c64b6ab557ab715580bc86afcaa905820589f2f9881a7cd01bb522c58d8 7151 grub2_2.12~rc1-11.dsc
 a18a10e886fc281f1d8951af2a09d06b9e82647b096567c056a7e02446c54cb2 1073004 grub2_2.12~rc1-11.debian.tar.xz
 e4484edf3feb9591b1f2486b92c90da599c0237bb977450d6d3d2531f1bbdb54 13791 grub2_2.12~rc1-11_source.buildinfo
Files:
 f26e3450de485d0adbaf5fccee56e25a 7151 admin optional grub2_2.12~rc1-11.dsc
 69fab14f3f75c161d76616babccef7d7 1073004 admin optional grub2_2.12~rc1-11.debian.tar.xz
 ae804839e8b11fc8a9fa9fffd9026767 13791 admin optional grub2_2.12~rc1-11_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJDBAEBCgAtFiEET7WIqEwt3nmnTHeHb6RY3R2wP3EFAmUazmIPHGpha0BkZWJp
YW4ub3JnAAoJEG+kWN0dsD9xNFwQAIjh4T7aOxUuiYIaOXrtpM+qP66eYjecwqK2
FQEBm0F7TGAv+X83RsnwwkzmxKGXQpTNt/PAArVryBx+xXr0AQv3kLBdXaSIJtQz
5yT+fhMVRwQqF5kGrTcjkZoRryO7tYHpDRH4gpllI5ggkJbToqqoaQNYcdA+yBWt
8HZ5ujgz8OnaP4ycZS7pwG8eB/HLCPSoPZDcT7Yte4X7Em57ypRIVvKaGFv+xxmc
m7dQo1iOwWUUNKt1bT5v5pnkUw0LFUQnCR8OC3IWejBnNAWe6IFj/rNX0d1oAsso
TNfQoEDLg5Ckgs1sSap7aE9s8rkvVeZd/bzaQvmfEtiN4yu0Op0W2k8w60Ff8aqc
HXNX0wAaMZ1d79DGXD3DK5itDczATtwC6iXqVXwo1uzlvnnSLmrKRtPkx2q2F73Y
n7nBcz4dECywOaVApuH4paRb9nXHfN7fsbIbpBMrSGR8Xs4YAgJqBubMeudbVOx+
4CS6PxUXGV469ePSnJtzkPVqh21IpH/BoQe9Dq1NPMvaeIF1seQr3pXxu2/69tJO
yK1d79EkNbI/dCoWTrPlhv/x/O8UdYGqBwaB6dnqu4P4pYBFvjcW2dxteJ0rQX5g
e7/Owpstqo++bXwEEPzm4cWSyfEY+x55EeEXdgd2HEOByhkq1ye43Y2o4hbhxjCx
Br6oWMc4
=B8oo
-----END PGP SIGNATURE-----