-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Oct 2023 16:11:34 +0200 Source: grub2 Binary: grub-common grub-common-dbgsym grub-coreboot grub-coreboot-bin grub-coreboot-dbg grub-efi grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-dbg grub-efi-amd64-signed-template grub-efi-ia32 grub-efi-ia32-bin grub-efi-ia32-dbg grub-emu grub-emu-dbg grub-emu-dbgsym grub-firmware-qemu grub-ieee1275 grub-ieee1275-bin grub-ieee1275-dbg grub-linuxbios grub-mount-udeb grub-pc grub-pc-bin grub-pc-bin-dbgsym grub-pc-dbg grub-rescue-pc grub-theme-starfield grub-xen grub-xen-bin grub-xen-dbg grub-xen-host grub2 grub2-common grub2-common-dbgsym Architecture: amd64 Version: 2.06-13+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Julian Andres Klode Description: grub-common - GRand Unified Bootloader (common files) grub-coreboot - GRand Unified Bootloader, version 2 (Coreboot version) grub-coreboot-bin - GRand Unified Bootloader, version 2 (Coreboot modules) grub-coreboot-dbg - GRand Unified Bootloader, version 2 (Coreboot debug files) grub-efi - GRand Unified Bootloader, version 2 (dummy package) grub-efi-amd64 - GRand Unified Bootloader, version 2 (EFI-AMD64 version) grub-efi-amd64-bin - GRand Unified Bootloader, version 2 (EFI-AMD64 modules) grub-efi-amd64-dbg - GRand Unified Bootloader, version 2 (EFI-AMD64 debug files) grub-efi-amd64-signed-template - GRand Unified Bootloader, version 2 (EFI-AMD64 signing template) grub-efi-ia32 - GRand Unified Bootloader, version 2 (EFI-IA32 version) grub-efi-ia32-bin - GRand Unified Bootloader, version 2 (EFI-IA32 modules) grub-efi-ia32-dbg - GRand Unified Bootloader, version 2 (EFI-IA32 debug files) grub-emu - GRand Unified Bootloader, version 2 (emulated version) grub-emu-dbg - GRand Unified Bootloader, version 2 (emulated debug files) grub-firmware-qemu - GRUB firmware image for QEMU grub-ieee1275 - GRand Unified Bootloader, version 2 (Open Firmware version) grub-ieee1275-bin - GRand Unified Bootloader, version 2 (Open Firmware modules) grub-ieee1275-dbg - GRand Unified Bootloader, version 2 (Open Firmware debug files) grub-linuxbios - GRand Unified Bootloader, version 2 (dummy package) grub-mount-udeb - export GRUB filesystems using FUSE (udeb) grub-pc - GRand Unified Bootloader, version 2 (PC/BIOS version) grub-pc-bin - GRand Unified Bootloader, version 2 (PC/BIOS modules) grub-pc-dbg - GRand Unified Bootloader, version 2 (PC/BIOS debug files) grub-rescue-pc - GRUB bootable rescue images, version 2 (PC/BIOS version) grub-theme-starfield - GRand Unified Bootloader, version 2 (starfield theme) grub-xen - GRand Unified Bootloader, version 2 (Xen version) grub-xen-bin - GRand Unified Bootloader, version 2 (Xen modules) grub-xen-dbg - GRand Unified Bootloader, version 2 (Xen debug files) grub-xen-host - GRand Unified Bootloader, version 2 (Xen host version) grub2 - GRand Unified Bootloader, version 2 (dummy package) grub2-common - GRand Unified Bootloader (common files for version 2) Changes: grub2 (2.06-13+deb12u1) bookworm-security; urgency=medium . [ Mate Kukri ] * SECURITY UPDATE: Crafted file system images can cause out-of-bounds write and may leak sensitive information into the GRUB pager. - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume- label.patch: fs/ntfs: Fix an OOB read when parsing a volume label - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-bs-for- index-at.patch: fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-dory- entries-fr.patch: fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-reading-data-fhe- reside.patch: fs/ntfs: Fix an OOB read when reading data from the resident $DATA + attribute - CVE-2023-4693 * SECURITY UPDATE: Crafted file system images can cause heap-based buffer overflow and may allow arbitrary code execution and secure boot bypass. - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-write-when-parsing-the- ATTRIBUTE_LIST-.patch: fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file - d/patches/ntfs-cve-fixes/fs-ntfs-Make-code-more-readable.patch fs/ntfs: Make code more readable - CVE-2023-4692 . [ Julian Andres Klode ] * Bump SBAT to grub,4 Checksums-Sha1: e75b3c8515fea989380fa8fa3e8b5cd2fc0e82ca 12320304 grub-common-dbgsym_2.06-13+deb12u1_amd64.deb 46cff1331e4460b7a02374906f04974c500afd63 2708792 grub-common_2.06-13+deb12u1_amd64.deb 9019fa507a80864ce1fb240ca29780b320457e9c 634884 grub-coreboot-bin_2.06-13+deb12u1_amd64.deb bc4e2820d6cbddcc0e1d305f1c57b640af044334 2907016 grub-coreboot-dbg_2.06-13+deb12u1_amd64.deb f9051f2ab07325556e5ffc09d49ca44205038999 45648 grub-coreboot_2.06-13+deb12u1_amd64.deb 7cfafb46ed9cba6be0318cb30f6adce63a2b5db3 1573828 grub-efi-amd64-bin_2.06-13+deb12u1_amd64.deb a603cc851821d5893d364ccdccf11021f95ba1c2 3483076 grub-efi-amd64-dbg_2.06-13+deb12u1_amd64.deb 6eca145b6d9bb9ee8ecf7c608d7ef0f5f349c3f6 184080 grub-efi-amd64-signed-template_2.06-13+deb12u1_amd64.deb 8196ed5b432fb80fbdd7539726ecfb07f5696008 45660 grub-efi-amd64_2.06-13+deb12u1_amd64.deb 2abc44a3e14e0ac9fc3fc4e06989b3d2bfbf1453 1464060 grub-efi-ia32-bin_2.06-13+deb12u1_amd64.deb 87e906eda4ddd3b21613b4777a19b43b32e38ff8 3146512 grub-efi-ia32-dbg_2.06-13+deb12u1_amd64.deb 1378e2d5eb838ed0ec243dce135373df817c3716 45688 grub-efi-ia32_2.06-13+deb12u1_amd64.deb 1cebace7f59bf2ddf07ef45bef4e964c0041fb0b 2388 grub-efi_2.06-13+deb12u1_amd64.deb e12ec7c6c39ea377206054fded987b95e672a7b1 2720532 grub-emu-dbg_2.06-13+deb12u1_amd64.deb d7bc2cd079c01c86a4089f98f8d330006d700a0c 34364 grub-emu-dbgsym_2.06-13+deb12u1_amd64.deb f17f38c58c05e67a704ce3d1d18412f1e0b1d3d1 4225668 grub-emu_2.06-13+deb12u1_amd64.deb 5bf5c35b77b419f313220ebe8b1e9be6647f1420 781836 grub-firmware-qemu_2.06-13+deb12u1_amd64.deb 83a9fac2f045bf547222199141a211f0bc2fc0cf 621552 grub-ieee1275-bin_2.06-13+deb12u1_amd64.deb 90bf8e66d48106b82bcd184860e5a505cc5124d0 2873784 grub-ieee1275-dbg_2.06-13+deb12u1_amd64.deb 1865735df928f932feaac9c9e148f9372423d45f 45652 grub-ieee1275_2.06-13+deb12u1_amd64.deb 3e2a90481de3daf9f7dd1e5faaa7f0b61f1e66ec 2360 grub-linuxbios_2.06-13+deb12u1_amd64.deb c1f0ba318a6c5e83f35c7be765660ad9ca3f84c6 425996 grub-mount-udeb_2.06-13+deb12u1_amd64.udeb fd2862fd67d63c0379ed35be4fe3a2c8df9a576e 1197548 grub-pc-bin-dbgsym_2.06-13+deb12u1_amd64.deb 7d26daad5128cd40a3ac015a87ed03ffe175a114 997184 grub-pc-bin_2.06-13+deb12u1_amd64.deb 25c2362ec3fa1bb286cccc1985c850b1ceb9b405 3133304 grub-pc-dbg_2.06-13+deb12u1_amd64.deb 5b36be8bfdb143ef0d79d5da21ae2232ad86b657 136504 grub-pc_2.06-13+deb12u1_amd64.deb 1caa1f4f97e7b61fd278b622d7eea40f2fb34530 2491712 grub-rescue-pc_2.06-13+deb12u1_amd64.deb 3e5e0f97fe49b801fdaeb0adf5f0d42494ad4396 2155240 grub-theme-starfield_2.06-13+deb12u1_amd64.deb 077853ebcc15b3b52065d8f400b586bcab951274 1012768 grub-xen-bin_2.06-13+deb12u1_amd64.deb 915a3748fce162fc811cbfe1e4e72c92e76af22f 7389024 grub-xen-dbg_2.06-13+deb12u1_amd64.deb 688729de9282b6660df0ecf080ee5b267b7210b1 1176400 grub-xen-host_2.06-13+deb12u1_amd64.deb 5de8722c6818906be6d8c0b9c776d56f3fa1cf18 45612 grub-xen_2.06-13+deb12u1_amd64.deb b4a4ac0d6a10f8f56bdf140338943120dd20c40c 1546864 grub2-common-dbgsym_2.06-13+deb12u1_amd64.deb 3ed220a7bec0df3272b898bdeb52d509da46db72 614008 grub2-common_2.06-13+deb12u1_amd64.deb 4041778f3b2c179b2dad6cfc91c13ecdb1eb9ec5 23357 grub2_2.06-13+deb12u1_amd64-buildd.buildinfo 48c02a8ab59b9799f6bf64bc44d470b1fe45ad73 2364 grub2_2.06-13+deb12u1_amd64.deb Checksums-Sha256: e027b3ba8de775efdd48a43ace6b58254380266e3c4d6b82f94fe3f01e8969b1 12320304 grub-common-dbgsym_2.06-13+deb12u1_amd64.deb 0e04e5339cd45398ae32406651f4f5bdd54c2a271aeea9aa3d95b571888a19f3 2708792 grub-common_2.06-13+deb12u1_amd64.deb 221623d8ae9adcb5eab9f5a8560a681642de06ec74a8fe28851eb7c420e9a04f 634884 grub-coreboot-bin_2.06-13+deb12u1_amd64.deb 46997ce3542a55ba24275d8a421af658f072dffd67d262cb03e97e5001aa2330 2907016 grub-coreboot-dbg_2.06-13+deb12u1_amd64.deb 28306d4f5793b3e64b0171fdc99238d68e21ec467c87cb6049a891d8eec805a4 45648 grub-coreboot_2.06-13+deb12u1_amd64.deb 9fa0ed9484dc92f3239802b1e3dda402720cf9a5d8d2b653154399641b5e8ef5 1573828 grub-efi-amd64-bin_2.06-13+deb12u1_amd64.deb 3b0bd9aae6c08d3bd377052f8fcfb8845b86cb9afcf863b77b549848f768f259 3483076 grub-efi-amd64-dbg_2.06-13+deb12u1_amd64.deb d7b528b97dda909e72570dc1994e8f547a0a84168a4ed11ee86572d34a8107bf 184080 grub-efi-amd64-signed-template_2.06-13+deb12u1_amd64.deb 5047a6c75af9c6abb81afecb88376c5dad7b72a83ed017fca9b3a1eb41b66181 45660 grub-efi-amd64_2.06-13+deb12u1_amd64.deb 65704dc4f952cab538b69eb437985eac9930e6310aabc551fe4f07c81a7b87b7 1464060 grub-efi-ia32-bin_2.06-13+deb12u1_amd64.deb c39503cb05b6de158f370aa6f8c87ded18aaf8d00edad901162bf6969b996a9b 3146512 grub-efi-ia32-dbg_2.06-13+deb12u1_amd64.deb 8ea584581ac8b6b9d9e3029185b69f6de4737e3ceca4755c16bdb26d3692d3b2 45688 grub-efi-ia32_2.06-13+deb12u1_amd64.deb 1a1eb3113b3c3edb3a726957e66751bad863bd83e4c593a89736c77c35ceb838 2388 grub-efi_2.06-13+deb12u1_amd64.deb 339b5be509e1619b0d3ac274b47b26d713ddf6fe5d92d64bc6c3172082ce7c7f 2720532 grub-emu-dbg_2.06-13+deb12u1_amd64.deb 0d5f6dec93d3e18380c9585c7e15ac28bc55328afe5b086a77de5281c6232c8d 34364 grub-emu-dbgsym_2.06-13+deb12u1_amd64.deb fa9eeb9993d04ba37fca6828244cbb2ed347aed6e64f2da072f117b55b691e6b 4225668 grub-emu_2.06-13+deb12u1_amd64.deb 3d97175772a3c130262c42d85f51966cd2d01c58f7fea61350feda47ed948586 781836 grub-firmware-qemu_2.06-13+deb12u1_amd64.deb a888b599d151caa46491a22251b7b94ad70a56c469ffeecdc26bc2922f685ba9 621552 grub-ieee1275-bin_2.06-13+deb12u1_amd64.deb cd138d8cf0895f9dd08ba2f43fb729baaa66fb2e7e3a7fe0bd246ee53fe447d5 2873784 grub-ieee1275-dbg_2.06-13+deb12u1_amd64.deb dc881e440cf3b9a44ede43f70fd8c31e36104726b4cd847ced182069480d90eb 45652 grub-ieee1275_2.06-13+deb12u1_amd64.deb 221fc6e256ad534f75a0d1cfc2907002784d2e89201c7bbc10ef26f73d7c2b5d 2360 grub-linuxbios_2.06-13+deb12u1_amd64.deb 35511c65ed8028df82e7ea38d75db3424b7d46b0005bda1f05ffab4806662756 425996 grub-mount-udeb_2.06-13+deb12u1_amd64.udeb cb6c1944049b21162c825ecf7bcd138650875fc87a88e58484a59b892bf35849 1197548 grub-pc-bin-dbgsym_2.06-13+deb12u1_amd64.deb 0925ad6648ce9470c3947ad959777f21b7a305418083528317fb5d83416d78bb 997184 grub-pc-bin_2.06-13+deb12u1_amd64.deb 4846e3a9dd644c3f4de2b1e47cec0675847116e249ce8a805e83d6b2462ae3af 3133304 grub-pc-dbg_2.06-13+deb12u1_amd64.deb cf464e4780f1042ec5d2c79105b3428fe71126147d31eef7bc750a2aebebac91 136504 grub-pc_2.06-13+deb12u1_amd64.deb 53c2689a33abbc862a4c6a17830b60835c88a810d5f226462a2399c185e8eaae 2491712 grub-rescue-pc_2.06-13+deb12u1_amd64.deb 548db3e547448c1cf6d49c20cdeeb25a458c1cb4900df24cc6f636b001a5d43a 2155240 grub-theme-starfield_2.06-13+deb12u1_amd64.deb 1dfc92448b76f0becf08e32c3953879226cbb7878c772c098d6a79bf0a3d6b7c 1012768 grub-xen-bin_2.06-13+deb12u1_amd64.deb 733abe90906697d6c11509085e3d70570e610096e32180290844b737e61717a2 7389024 grub-xen-dbg_2.06-13+deb12u1_amd64.deb 89cda01316273aff865f88c519f8aba1db8664ef366ccb6ae6a2ce1566d981e8 1176400 grub-xen-host_2.06-13+deb12u1_amd64.deb 03dca0bc6dd127e3e0569b722f5207e892257043eb6a42fd55533d243652f921 45612 grub-xen_2.06-13+deb12u1_amd64.deb 8b8d1b9c328f3dcb6dd98d068fcb6e6251b19bba056c26c96a2dafb1838deac5 1546864 grub2-common-dbgsym_2.06-13+deb12u1_amd64.deb 5246136837f485889569ebc42dcc8c2e69e77dc027f5b064f14de53ef4cb79b1 614008 grub2-common_2.06-13+deb12u1_amd64.deb 3dfa275f3e3e9a4e618657ce264a03bc01e6460941fdcc0d33c5f73803524263 23357 grub2_2.06-13+deb12u1_amd64-buildd.buildinfo f75f168ff6b54fb08c7f881394ade08a6884fe655d83485e79117c7963a50fd1 2364 grub2_2.06-13+deb12u1_amd64.deb Files: 68101a33c35025a1057c85a26a7db269 12320304 debug optional grub-common-dbgsym_2.06-13+deb12u1_amd64.deb 91171573aa5b430d77f5205adad0a00d 2708792 admin optional grub-common_2.06-13+deb12u1_amd64.deb 037d7dec6ca979ab7807a107db5bbbd3 634884 admin optional grub-coreboot-bin_2.06-13+deb12u1_amd64.deb de4a798d6d0ca6e354da830d2556a081 2907016 debug optional grub-coreboot-dbg_2.06-13+deb12u1_amd64.deb e052fbaecdb9dc080d90914a9e20819c 45648 admin optional grub-coreboot_2.06-13+deb12u1_amd64.deb e1a4b76d4c27e213afa86d0e62148dac 1573828 admin optional grub-efi-amd64-bin_2.06-13+deb12u1_amd64.deb f25de8f6a25b0ad8cb99e45672af1a9a 3483076 debug optional grub-efi-amd64-dbg_2.06-13+deb12u1_amd64.deb 33811d30d11cdb0a43bd065134541c06 184080 admin optional grub-efi-amd64-signed-template_2.06-13+deb12u1_amd64.deb 8d310aecf313d9b01a812b336e2fb2d5 45660 admin optional grub-efi-amd64_2.06-13+deb12u1_amd64.deb 1eeb8ef28391f58262cf0ddaa1c5baed 1464060 admin optional grub-efi-ia32-bin_2.06-13+deb12u1_amd64.deb 6d36a7d187406863c82ff2f6b83ae743 3146512 debug optional grub-efi-ia32-dbg_2.06-13+deb12u1_amd64.deb 9980b5769fbcf61bb82b5f30df2d1e44 45688 admin optional grub-efi-ia32_2.06-13+deb12u1_amd64.deb f0980b55dc9e0719dc6887a29d830673 2388 admin optional grub-efi_2.06-13+deb12u1_amd64.deb 45ec9d4cdae92cfed5ac17b9568b93dd 2720532 debug optional grub-emu-dbg_2.06-13+deb12u1_amd64.deb 6032c7fe758dfac5e25eb37007c0eaf4 34364 debug optional grub-emu-dbgsym_2.06-13+deb12u1_amd64.deb fe830ed768b33a8d7fd03f512388ec35 4225668 admin optional grub-emu_2.06-13+deb12u1_amd64.deb 7f232cec4502fbbca5ad2a854446c1db 781836 admin optional grub-firmware-qemu_2.06-13+deb12u1_amd64.deb e3d3e11840ba4fc77e8511361f7247e7 621552 admin optional grub-ieee1275-bin_2.06-13+deb12u1_amd64.deb 91b07d78b197190a83207a0f03a54369 2873784 debug optional grub-ieee1275-dbg_2.06-13+deb12u1_amd64.deb fd01e4c9121918f4d47d399d50056254 45652 admin optional grub-ieee1275_2.06-13+deb12u1_amd64.deb 60f4305dbf7fbf4573b257298a92a56f 2360 oldlibs optional grub-linuxbios_2.06-13+deb12u1_amd64.deb c6226141cc0a5b9c59602fc0551d6918 425996 debian-installer optional grub-mount-udeb_2.06-13+deb12u1_amd64.udeb 9e850e4eafdda07a80d59ed267d4e38d 1197548 debug optional grub-pc-bin-dbgsym_2.06-13+deb12u1_amd64.deb 9c80d5cce9244a0facf425e291115a23 997184 admin optional grub-pc-bin_2.06-13+deb12u1_amd64.deb d6a1a3638d3f7b630059697abdb1b426 3133304 debug optional grub-pc-dbg_2.06-13+deb12u1_amd64.deb c81d3c72ea365c9aed63c4b8f2d4a7b0 136504 admin optional grub-pc_2.06-13+deb12u1_amd64.deb d0860a84105f7a4259cfa48510f5b9d2 2491712 admin optional grub-rescue-pc_2.06-13+deb12u1_amd64.deb 29fef7a425f776b35aed429e985b09f3 2155240 admin optional grub-theme-starfield_2.06-13+deb12u1_amd64.deb 87484c211d43fcce8fa9a2df20763e11 1012768 admin optional grub-xen-bin_2.06-13+deb12u1_amd64.deb af7bd0679206a467758fecdf653a4099 7389024 debug optional grub-xen-dbg_2.06-13+deb12u1_amd64.deb 45e5041b94ba22f6b1d3f9babda6b935 1176400 admin optional grub-xen-host_2.06-13+deb12u1_amd64.deb f246e22a1044352b4e6f804f41feba47 45612 admin optional grub-xen_2.06-13+deb12u1_amd64.deb b5d79ac7c187f424ca8760253dfe0e2a 1546864 debug optional grub2-common-dbgsym_2.06-13+deb12u1_amd64.deb 23ea3365ba38e7d8295555493b15485f 614008 admin optional grub2-common_2.06-13+deb12u1_amd64.deb a99682f490fcbea5c93373add172c516 23357 admin optional grub2_2.06-13+deb12u1_amd64-buildd.buildinfo 1dec584f327028dc072476c294b411fa 2364 oldlibs optional grub2_2.06-13+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOtJZa9Q/HRv7PgxxkF7E12VCox0FAmUcUDYACgkQkF7E12VC ox0hNg//WgiZvWJ4yhWYpqEj4uyomZzCOSwn2F68uW9kH475kp0ksDCoJap3paVO 9bqbv1UIGsOHp3/suhTrwiu65yIXXHowC1DfxNNIwimF+0uzl4QQWKgGdm+r7MIg BsHLRoSjYbTMcvDNcpKDbq0v2P4+L7Zmx0532+8doZ2a61Jo5SZW0ui3twKT9VOh T7j7cdmsQlmPTPmj4SXc7zuoKXWuYkfTwh5SLY6I2ezU1JfUBL0gftoVHrsPZ73g isYBiDeMlnzh76WncxRAaPNrQlrH+IE+xtX4x3ldFzbkC9jhqhAQtJIkmlSjGxm0 z2rhMd3ZyYnELEU8LbJxtIVes7ll8rYUBfDjnig21TacWluge60AlKEGspdkMLXd o9j3UFfCKHEJ4yxC2xt12EVTt2AmLAd6igj6tA+sfzKt8nwKcFrpRR8ZwULRGZag pk3dVvqEFZOpNypOm8YBpVOMwUPs+v50bgldlBgxXfoQ/Lz4E55zxo+yLt3wozz1 3bnWAfMqScLKlTol5ShQJz0k9ZHEgPEIxiNK8S12TNVRMpuTTw4+w1ZwuIsDEF06 05AzyosK41UyjjNQrfKWJfM/rVUtH0SZLogkRakMSnss/c139qKzvMirModW3h1S Xg4wvpm6t8A3XGoWf2pZaY6czxGrEtVu2u+jda4jGB3pT9crfNQ= =XWH+ -----END PGP SIGNATURE-----