summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--SbatLevel_Variable.txt12
1 files changed, 12 insertions, 0 deletions
diff --git a/SbatLevel_Variable.txt b/SbatLevel_Variable.txt
index 42a388e4..0c61f306 100644
--- a/SbatLevel_Variable.txt
+++ b/SbatLevel_Variable.txt
@@ -97,6 +97,18 @@ shim,4
grub,3
grub.debian,4
+
+Revocations for:
+ - January 2024 shim CVEs
+ - October 2023 grub CVEs
+ - Debian/Ubuntu (peimage) CVE-2024-2312
+
+sbat,1,2024040900
+shim,4
+grub,4
+grub.peimage,2
+
+
Since http boot shim CVE is considerably more serious than then GRUB
ntfs CVEs shim is delivering the shim revocation without the updated
GRUB revocation as a latest payload.