diff options
| -rw-r--r-- | SbatLevel_Variable.txt | 12 | ||||
| -rw-r--r-- | generate_sbat_var_defs.c | 2 |
2 files changed, 6 insertions, 8 deletions
diff --git a/SbatLevel_Variable.txt b/SbatLevel_Variable.txt index 407f1337..7afdcd0d 100644 --- a/SbatLevel_Variable.txt +++ b/SbatLevel_Variable.txt @@ -118,12 +118,10 @@ grub,4 grub.peimage,2 -Since http boot shim CVE is considerably more serious than then GRUB -ntfs CVEs shim is delivering the shim revocation without the updated -GRUB revocation as a latest payload. - -To revoke both the impacted shim and impacted GRUB binaries: +Revocations for: + - Februady 2025 GRUB CVEs -sbat,1,2024<date TBD> +sbat,1,2025021800 shim,4 -grub,4 +grub,5 + diff --git a/generate_sbat_var_defs.c b/generate_sbat_var_defs.c index 94540bb0..1258e1b2 100644 --- a/generate_sbat_var_defs.c +++ b/generate_sbat_var_defs.c @@ -111,7 +111,7 @@ writefile() "#define GEN_SBAT_VAR_DEFS_H_\n" "#ifndef ENABLE_SHIM_DEVEL\n\n" "#ifndef SBAT_AUTOMATIC_DATE\n" - "#define SBAT_AUTOMATIC_DATE 2023012900\n" + "#define SBAT_AUTOMATIC_DATE 2024040900\n" "#endif /* SBAT_AUTOMATIC_DATE */\n" "#if SBAT_AUTOMATIC_DATE == %d\n" "#define SBAT_VAR_AUTOMATIC_REVOCATIONS\n", |