grub2_2.12-2_source.changes ACCEPTED into unstable

Fri Apr 5 20:34:45 BST 2024

Thank you for your contribution to Debian.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 05 Apr 2024 20:45:55 +0200
Source: grub2
Architecture: source
Version: 2.12-2
Distribution: unstable
Urgency: medium
Maintainer: GRUB Maintainers <pkg-grub-devel at alioth-lists.debian.net>
Changed-By: Julian Andres Klode <jak at debian.org>
Changes:
 grub2 (2.12-2) unstable; urgency=medium
 .
   [ Mate Kukri ]
   * Revert peimage to re-use GRUB's image handle (LP: #2057679) (LP: #2054127)
   * d/build-efi-images: Make sure downstream didn't remove peimage SBAT
     entry
   * SECURITY UPDATE: Use-after-free in peimage module [LP: #2054127]
     - CVE-2024-2312
 .
   [ Julian Andres Klode ]
   * Bump SBAT level to `grub.peimage,2`; and also bump `grub.debian,5` to
     make sure we can revoke any downstream users of peimage that forgot to
     include the grub.peimage component if that should become necessary.
Checksums-Sha1:
 d031e49f742966cd8573000662dca5a03390fd51 7382 grub2_2.12-2.dsc
 9ef29f0fe7b621dbf80fdc0522db50857ec2a6b4 1093592 grub2_2.12-2.debian.tar.xz
 e8b7510fc0171d1b32bf0425b8e12664eb6c5bcd 14088 grub2_2.12-2_source.buildinfo
Checksums-Sha256:
 4f2a361a0489c69bada56d71971fcaff69f2a238402d43a27772eb4b36be1128 7382 grub2_2.12-2.dsc
 d18abe39f859f9c53ef54963ba345b8d436511f61fada45355154908f29091e7 1093592 grub2_2.12-2.debian.tar.xz
 181e4dbf3e624c780c9813d1c276289e135dd643e460780bc943a3723ba743d8 14088 grub2_2.12-2_source.buildinfo
Files:
 4ef1402fcdf21f6534db5021a817f49c 7382 admin optional grub2_2.12-2.dsc
 2f2e004557ae483f73a6a8c7b26e71f5 1093592 admin optional grub2_2.12-2.debian.tar.xz
 f569af01676dddbaa3034225c45a701d 14088 admin optional grub2_2.12-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=IdmV
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-grub-devel/attachments/20240405/93fea5e0/attachment.sig>