diff options
| author | Julian Andres Klode <julian.klode@canonical.com> | 2024-04-05 21:57:07 +0200 |
|---|---|---|
| committer | Peter Jones <pjones@redhat.com> | 2024-04-09 12:40:44 -0400 |
| commit | 63edf92f8ae11b884bc7d24aecb8229cbc4ae014 (patch) | |
| tree | 6fba10c1b425948c7ddf16e4aaf4823df7dff853 | |
| parent | 126a07ebc30bbd203b6966465b058da741b2654b (diff) | |
| download | efi-boot-shim-63edf92f8ae11b884bc7d24aecb8229cbc4ae014.tar.gz efi-boot-shim-63edf92f8ae11b884bc7d24aecb8229cbc4ae014.zip | |
sbat: Add grub.peimage,2 to latest (CVE-2024-2312)
Add the previous latest level to the switch for automatic.
Signed-off-by: Julian Andres Klode <julian.klode@canonical.com>
| -rw-r--r-- | include/sbat_var_defs.h | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/include/sbat_var_defs.h b/include/sbat_var_defs.h index f8cba029..04d708f2 100644 --- a/include/sbat_var_defs.h +++ b/include/sbat_var_defs.h @@ -47,6 +47,8 @@ #define SBAT_VAR_AUTOMATIC_REVOCATIONS "shim,2\ngrub,3\n" #elif SBAT_AUTOMATIC_DATE == 2023012900 #define SBAT_VAR_AUTOMATIC_REVOCATIONS "shim,2\ngrub,3\ngrub.debian,4\n" +#elif SBAT_AUTOMATIC_DATE == 2024010900 +#define SBAT_VAR_AUTOMATIC_REVOCATIONS "shim,4\ngrub,3\ngrub.debian,4\n" #else #error "Unknown SBAT_AUTOMATIC_DATE" #endif /* SBAT_AUTOMATIC_DATE == */ @@ -56,10 +58,10 @@ SBAT_VAR_AUTOMATIC_REVOCATIONS /* - * Revocations for January 2024 shim CVEs + * Revocations for January 2024 shim CVEs + Debian/Ubuntu (peimage) CVE-2024-2312 */ -#define SBAT_VAR_LATEST_DATE "2024010900" -#define SBAT_VAR_LATEST_REVOCATIONS "shim,4\ngrub,3\ngrub.debian,4\n" +#define SBAT_VAR_LATEST_DATE "2024040500" +#define SBAT_VAR_LATEST_REVOCATIONS "shim,4\ngrub,3\ngrub.debian,4\ngrub.peimage,2\n" #define SBAT_VAR_LATEST \ SBAT_VAR_SIG SBAT_VAR_VERSION SBAT_VAR_LATEST_DATE "\n" \ SBAT_VAR_LATEST_REVOCATIONS |