-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 13 Nov 2022 00:53:50 +0000 Source: grub2 Architecture: source Version: 2.06-3~deb11u4 Distribution: bullseye-security Urgency: high Maintainer: GRUB Maintainers <pkg-grub-de...@alioth-lists.debian.net> Changed-By: Steve McIntyre <93...@debian.org> Changes: grub2 (2.06-3~deb11u4) bullseye-security; urgency=high . [ Steve McIntyre ] * Pull in upstream patches to harden font and image handling - CVE-2022-2601, CVE-2022-3775. * Bump SBAT level to 3 for grub-efi packages. Checksums-Sha1: 6b9c838983da933b538809b3a0cacf5c6749301e 7125 grub2_2.06-3~deb11u4.dsc c9f93f1e195ec7a5a21d36a13b469788c0b29f0f 6581924 grub2_2.06.orig.tar.xz 910db38472f2d654a4816a0c3b7b83415502850f 833 grub2_2.06.orig.tar.xz.asc f5367df72327649f3c7cc1ce8684994cfc3dc309 1092828 grub2_2.06-3~deb11u4.debian.tar.xz 4aaf5d4cf7632ee4f5a66151b5101b7d751bcca6 13787 grub2_2.06-3~deb11u4_source.buildinfo Checksums-Sha256: 352afa6d68c6156af2028788ad50f5040fdd68d4d38c76940cff036f5bd62e9c 7125 grub2_2.06-3~deb11u4.dsc b79ea44af91b93d17cd3fe80bdae6ed43770678a9a5ae192ccea803ebb657ee1 6581924 grub2_2.06.orig.tar.xz b4a3a62a308e97537c21b88ba51174e792bfd77492675eef0cfd75a481e62b22 833 grub2_2.06.orig.tar.xz.asc 4fee57f0fd449a69ff8da7b4fee0ab356f287c338fd2b38783c2f079d9fd5524 1092828 grub2_2.06-3~deb11u4.debian.tar.xz 22c1ac1153b6c8a1ef132e659b072701d15e531a14a7e8781fef300ced0b4f87 13787 grub2_2.06-3~deb11u4_source.buildinfo Files: 793f565ec3f8b866d2914a96840d3458 7125 admin optional grub2_2.06-3~deb11u4.dsc cf0fd928b1e5479c8108ee52cb114363 6581924 admin optional grub2_2.06.orig.tar.xz 68de7e4d2280d020bcd5a775f16f4827 833 admin optional grub2_2.06.orig.tar.xz.asc 9f9253d3cdd263493662a979775cbfad 1092828 admin optional grub2_2.06-3~deb11u4.debian.tar.xz 37ade3209e78daaaaf3e3f3271167fdd 13787 admin optional grub2_2.06-3~deb11u4_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQJFBAEBCAAvFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmNyhyMRHDkzc2FtQGRl Ymlhbi5vcmcACgkQWHl5VzRCaE5w8g/+NE1xSSEN7k2qjyGUa3r+x4T7CQXL+ndS CDlaeOAaCI3u5m5R4byAKG6worAXXiWruGx9eP7naeWtlm2vLuiR4hMIQ2Q9x91Y b2cK0EUUbbvHYrA3wAtcWsC9M+8dP/UPjQcKz+DWYdS4uVEn5deAC1rNoxTGcCjj cPYdesPMS4XBhAe14Fz9mY0+u7+aoTOPEt4amkYP7K9c/aBUs3SS4giu+dZ3g940 Jqh20Adg7gtr3LTUH2Ae85GcmsPzqCMypy94Us8lOqE6KJ+rCCcgPWCLGyuLaikL oA2Awg3ZJ+Zk6cRQqbqjg2/AIuMKq9SPF/EJkmccnFf4H7XZe+VKu3DKSDc5svvL H3YVo/rrCYdHnw0XFMbvaP60xyxpInOZxs3JV8RbuCNvSwv9aRUEoVqJpY86V9vp cAHogzN6WLVpK59106CUDzwCk8B2z5RSNXrXRnmpbqbrR8MCpm41AIi1rHPrAH+S vpq8N2oBTYUz95rN6NheCzKmHgaXlP/QUUevfREbZKrLYNjG4TqUXk0UVGWyqtUY 9auSBvjkfp1MTnGU4sIAWjsD5pMaAnAhtjpkrn87k/b/abffaYxY4gIpFhPhC2Fv S7YlGejJZF7qJTlQkWTeV3Ux+8ggYLNcLr2NnOtTddtRo70uSXhQgbUzjgwxzr68 7WYJMjBARK4= =wsCx -----END PGP SIGNATURE-----