-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Oct 2023 16:11:34 +0200 Source: grub2 Binary: grub-common grub-common-dbgsym grub-coreboot grub-coreboot-bin grub-coreboot-dbg grub-efi grub-efi-amd64 grub-efi-amd64-bin grub-efi-amd64-dbg grub-efi-ia32 grub-efi-ia32-bin grub-efi-ia32-dbg grub-efi-ia32-signed-template grub-emu grub-emu-dbg grub-emu-dbgsym grub-firmware-qemu grub-ieee1275 grub-ieee1275-bin grub-ieee1275-dbg grub-linuxbios grub-mount-udeb grub-pc grub-pc-bin grub-pc-bin-dbgsym grub-pc-dbg grub-rescue-pc grub-theme-starfield grub-xen grub-xen-bin grub-xen-dbg grub-xen-host grub2 grub2-common grub2-common-dbgsym Architecture: i386 Version: 2.06-13+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Julian Andres Klode Description: grub-common - GRand Unified Bootloader (common files) grub-coreboot - GRand Unified Bootloader, version 2 (Coreboot version) grub-coreboot-bin - GRand Unified Bootloader, version 2 (Coreboot modules) grub-coreboot-dbg - GRand Unified Bootloader, version 2 (Coreboot debug files) grub-efi - GRand Unified Bootloader, version 2 (dummy package) grub-efi-amd64 - GRand Unified Bootloader, version 2 (EFI-AMD64 version) grub-efi-amd64-bin - GRand Unified Bootloader, version 2 (EFI-AMD64 modules) grub-efi-amd64-dbg - GRand Unified Bootloader, version 2 (EFI-AMD64 debug files) grub-efi-ia32 - GRand Unified Bootloader, version 2 (EFI-IA32 version) grub-efi-ia32-bin - GRand Unified Bootloader, version 2 (EFI-IA32 modules) grub-efi-ia32-dbg - GRand Unified Bootloader, version 2 (EFI-IA32 debug files) grub-efi-ia32-signed-template - GRand Unified Bootloader, version 2 (EFI-IA32 signing template) grub-emu - GRand Unified Bootloader, version 2 (emulated version) grub-emu-dbg - GRand Unified Bootloader, version 2 (emulated debug files) grub-firmware-qemu - GRUB firmware image for QEMU grub-ieee1275 - GRand Unified Bootloader, version 2 (Open Firmware version) grub-ieee1275-bin - GRand Unified Bootloader, version 2 (Open Firmware modules) grub-ieee1275-dbg - GRand Unified Bootloader, version 2 (Open Firmware debug files) grub-linuxbios - GRand Unified Bootloader, version 2 (dummy package) grub-mount-udeb - export GRUB filesystems using FUSE (udeb) grub-pc - GRand Unified Bootloader, version 2 (PC/BIOS version) grub-pc-bin - GRand Unified Bootloader, version 2 (PC/BIOS modules) grub-pc-dbg - GRand Unified Bootloader, version 2 (PC/BIOS debug files) grub-rescue-pc - GRUB bootable rescue images, version 2 (PC/BIOS version) grub-theme-starfield - GRand Unified Bootloader, version 2 (starfield theme) grub-xen - GRand Unified Bootloader, version 2 (Xen version) grub-xen-bin - GRand Unified Bootloader, version 2 (Xen modules) grub-xen-dbg - GRand Unified Bootloader, version 2 (Xen debug files) grub-xen-host - GRand Unified Bootloader, version 2 (Xen host version) grub2 - GRand Unified Bootloader, version 2 (dummy package) grub2-common - GRand Unified Bootloader (common files for version 2) Changes: grub2 (2.06-13+deb12u1) bookworm-security; urgency=medium . [ Mate Kukri ] * SECURITY UPDATE: Crafted file system images can cause out-of-bounds write and may leak sensitive information into the GRUB pager. - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume- label.patch: fs/ntfs: Fix an OOB read when parsing a volume label - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-bs-for- index-at.patch: fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-parsing-dory- entries-fr.patch: fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-read-when-reading-data-fhe- reside.patch: fs/ntfs: Fix an OOB read when reading data from the resident $DATA + attribute - CVE-2023-4693 * SECURITY UPDATE: Crafted file system images can cause heap-based buffer overflow and may allow arbitrary code execution and secure boot bypass. - d/patches/ntfs-cve-fixes/fs-ntfs-Fix-an-OOB-write-when-parsing-the- ATTRIBUTE_LIST-.patch: fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file - d/patches/ntfs-cve-fixes/fs-ntfs-Make-code-more-readable.patch fs/ntfs: Make code more readable - CVE-2023-4692 . [ Julian Andres Klode ] * Bump SBAT to grub,4 Checksums-Sha1: 90c8bf81eac22823698be5d88101583434a860eb 11193220 grub-common-dbgsym_2.06-13+deb12u1_i386.deb 1408a057c85da2b3a09ffbe1caa8c874de1440ad 2801832 grub-common_2.06-13+deb12u1_i386.deb f99c6c90695d8cec82d3e52b2dc0328ec73d1d2e 635248 grub-coreboot-bin_2.06-13+deb12u1_i386.deb b2acbaf5ba81839ab0064b44c956c90e45924dd0 2906960 grub-coreboot-dbg_2.06-13+deb12u1_i386.deb 7666cdf415ba6aa6026e7d543a591f5feb5ae4a6 45664 grub-coreboot_2.06-13+deb12u1_i386.deb bc6da9e208a8f573bc4222eb5ee615dc9e6ebb8a 1577420 grub-efi-amd64-bin_2.06-13+deb12u1_i386.deb 7c3f4ad01022f61284e330c16a4b229525dfc766 3482408 grub-efi-amd64-dbg_2.06-13+deb12u1_i386.deb f648615d42def242424de1e7fa7f97ba09361a68 45660 grub-efi-amd64_2.06-13+deb12u1_i386.deb c98805fe9e1cf92d1cb599dcb23b3b81535fa15a 1464684 grub-efi-ia32-bin_2.06-13+deb12u1_i386.deb ad34055357519d0881bb1bb77e3c50927566c323 3147108 grub-efi-ia32-dbg_2.06-13+deb12u1_i386.deb fd2e044195ea723c084601e889531534e0021f07 184084 grub-efi-ia32-signed-template_2.06-13+deb12u1_i386.deb 0bcde40a35ac3ad88deb2da64404e2259971731a 45676 grub-efi-ia32_2.06-13+deb12u1_i386.deb b664f8f907730a31b5c7958bb56e1bf44d553ece 2388 grub-efi_2.06-13+deb12u1_i386.deb 0255adbe614299d61301ffd236b5221e208ddfba 2551448 grub-emu-dbg_2.06-13+deb12u1_i386.deb e105e4441bad7569af49ec0214e0707738a9121a 34272 grub-emu-dbgsym_2.06-13+deb12u1_i386.deb ff5ee56bb5061c997504c3e1ee376457293bbfed 3790088 grub-emu_2.06-13+deb12u1_i386.deb afab6243969bb8b370095bfa97f1cc3b26e59296 781980 grub-firmware-qemu_2.06-13+deb12u1_i386.deb 6b88756118a90118859b5ed59af80212f5170f90 621680 grub-ieee1275-bin_2.06-13+deb12u1_i386.deb dd32bb33bdd3f215c0cb21546089e4a615202e94 2874392 grub-ieee1275-dbg_2.06-13+deb12u1_i386.deb 0fe0b4687de860559f61dd0dc9032979b52971b9 45652 grub-ieee1275_2.06-13+deb12u1_i386.deb 9f88bcc4977c4afedae6e2f2aac499448b78546f 2360 grub-linuxbios_2.06-13+deb12u1_i386.deb 33d9414b0353e9a7a8c083d4c06fd051c3be6c44 464676 grub-mount-udeb_2.06-13+deb12u1_i386.udeb 7de0625e28d197c59af007d696d208e699bec7d4 1124636 grub-pc-bin-dbgsym_2.06-13+deb12u1_i386.deb ccf330151511f472e7cdd7439a6cd9d5bb337b67 1027228 grub-pc-bin_2.06-13+deb12u1_i386.deb 243df0d726991d7a553603dfe20b065e7a19d23d 3133364 grub-pc-dbg_2.06-13+deb12u1_i386.deb 501082e8d4ba2575b2831c73ee7e7ea38dadd1c6 136484 grub-pc_2.06-13+deb12u1_i386.deb 0be15f0f2df5e4c49af130f06f2262221e6ff3a9 2491912 grub-rescue-pc_2.06-13+deb12u1_i386.deb 1995213f60bb65cc0566b993196b6df8e9b77216 2155236 grub-theme-starfield_2.06-13+deb12u1_i386.deb 9786ca4fb44702b06419f491a70e738f38686fd3 1012576 grub-xen-bin_2.06-13+deb12u1_i386.deb 79d1566aeaf844a5c23f7b08d169013a48bbc3d5 7388000 grub-xen-dbg_2.06-13+deb12u1_i386.deb 00906e1a9d6d9f64b850089a495df1a0f86f1b4a 1176784 grub-xen-host_2.06-13+deb12u1_i386.deb fb36c21c2437d247cb534d81c6f4f36180e6d621 45588 grub-xen_2.06-13+deb12u1_i386.deb bf655f0ad6749e759c25a8d85fcfd48fccbe9e89 1451508 grub2-common-dbgsym_2.06-13+deb12u1_i386.deb 13345cda0c7c5cae9bf5c9806c550f0b0ee727ac 654752 grub2-common_2.06-13+deb12u1_i386.deb 539e48c71347e055955291773df95e327d50c842 23115 grub2_2.06-13+deb12u1_i386-buildd.buildinfo f5c2b56541ec8072ee0643b2ca3f63b904f94983 2360 grub2_2.06-13+deb12u1_i386.deb Checksums-Sha256: 0719d0ebaeea76b3df59434c44e8127c24264b85488e5daae40bf03338123721 11193220 grub-common-dbgsym_2.06-13+deb12u1_i386.deb 16688907f71a7673b398e70328d6bd495110a1d72c1e4178257e39e7685c378a 2801832 grub-common_2.06-13+deb12u1_i386.deb 930217cc3d76beb30d19a20c944fc5d51aa3041b02caaddf1db3717848a96deb 635248 grub-coreboot-bin_2.06-13+deb12u1_i386.deb 76b5e7fe19183c91c9dc8b462ed553b046cc12870b632754603073daf2f97fed 2906960 grub-coreboot-dbg_2.06-13+deb12u1_i386.deb fe61f6fe0d7f108c8376531e5c067a72c75bd6f963b87f8fe67cf48e214d694f 45664 grub-coreboot_2.06-13+deb12u1_i386.deb 88b37423d85a08df47b74c76ffb4a27346641b5c322dd4748eddbc9c38007870 1577420 grub-efi-amd64-bin_2.06-13+deb12u1_i386.deb 3b72497f07d5322b653132681ac9800d713f791e50cb745d65ea6523e26eb270 3482408 grub-efi-amd64-dbg_2.06-13+deb12u1_i386.deb 8f5bdf689bb38566dd0136180ce0f92bd700f470438cf19008248dfa3dc752c5 45660 grub-efi-amd64_2.06-13+deb12u1_i386.deb 50fc46f8d9978746ee839e8a5584782b016ba159a6a46930624593a11a7d085f 1464684 grub-efi-ia32-bin_2.06-13+deb12u1_i386.deb fbba2abec51aaa4b33d85d460bc528ed6ace92d3fd4be6d04daece279db639e3 3147108 grub-efi-ia32-dbg_2.06-13+deb12u1_i386.deb af3750022857d1d49d2fb428eed6c02a582ffc41d0c253bfe8b830035845fa23 184084 grub-efi-ia32-signed-template_2.06-13+deb12u1_i386.deb 79202b12b702b2d327af291d90c9c5d7d83abdf650d5d090194d417e1ee147e1 45676 grub-efi-ia32_2.06-13+deb12u1_i386.deb 34d9503e864acbb6741d6bc59c368b72f27a4020614489925812ea5609ddff3e 2388 grub-efi_2.06-13+deb12u1_i386.deb 6159e6b85d44fba69cf28f6719801918bbb8d6ee21e0cb2c6ff7632ff93c2c8e 2551448 grub-emu-dbg_2.06-13+deb12u1_i386.deb f6ea5761d6ed9a6035df6bb1ee8dfb81d9b88f1c44a995fe77145cac524c69a9 34272 grub-emu-dbgsym_2.06-13+deb12u1_i386.deb f19fbf29cb7240637d3feb9d6526457380cdd4df4636ae46a3aa7db3704667d5 3790088 grub-emu_2.06-13+deb12u1_i386.deb 6009f1a107cf84f7de61d2b194c254951296c90f2574e8bcf64024b04d4eb50d 781980 grub-firmware-qemu_2.06-13+deb12u1_i386.deb e718e9c3f53d052f541d60dbbe6b9ee88434b12c4a794df09a2f138de3552731 621680 grub-ieee1275-bin_2.06-13+deb12u1_i386.deb c8afd26ba423dd39c26a56699b90fb5a5b5ba029ad95f91e4381db1984e93383 2874392 grub-ieee1275-dbg_2.06-13+deb12u1_i386.deb c617fd07afb594abc6fbff585092ef5e10a4074b2e7322d7e32379bab97c2dc5 45652 grub-ieee1275_2.06-13+deb12u1_i386.deb 2a92086f1b548ad2e8ab1df96e3afff2e8104c4e44a53f9cc38e77b5040fd107 2360 grub-linuxbios_2.06-13+deb12u1_i386.deb ea372681d10491b6cf1fb78f1fd3e7be4d21baee98fe72f2b668905c807f6dcc 464676 grub-mount-udeb_2.06-13+deb12u1_i386.udeb 6e0c3009cfb12a9efe8d408c20dbf70cbd008402e91d9f205a15c788ff016e78 1124636 grub-pc-bin-dbgsym_2.06-13+deb12u1_i386.deb 24f7168dd945c76e30bfdc41740d4ac6cb5784d4f56bdf81e263676073be6a0d 1027228 grub-pc-bin_2.06-13+deb12u1_i386.deb 4b46193768eb88c7e681af6609c88c8e2680fcf165b35f90537061af465b83bd 3133364 grub-pc-dbg_2.06-13+deb12u1_i386.deb 7db8eda2813ccc5136e05ca4d4c0342d85b191234e1f7ab04992b82a6ced28ba 136484 grub-pc_2.06-13+deb12u1_i386.deb cdaa4e49f62fadd1d990850ea493a150b03911aa57717dd3c05b14cf65d261d3 2491912 grub-rescue-pc_2.06-13+deb12u1_i386.deb d3a245b20cc2cdaccbf2b142bdb0d4da5b9c71ab705a1601106270d235735a50 2155236 grub-theme-starfield_2.06-13+deb12u1_i386.deb 9a4dc7c70472158b4a883b011658050d1a8e7c0601bbd8a1eb790eeab9ae8bfd 1012576 grub-xen-bin_2.06-13+deb12u1_i386.deb bf6cdbf762f0f5e552751660fa2bc7379cb634013478b0849029f137798a33f6 7388000 grub-xen-dbg_2.06-13+deb12u1_i386.deb 7bfbc1f3ef7e66e1329c1f7d6342ae8885f4299fa7486d84c2b3385d319cd945 1176784 grub-xen-host_2.06-13+deb12u1_i386.deb 176942186eb93779d6558e8c3be2be7bd42c3b9a239d03fdb48a7762830b4d41 45588 grub-xen_2.06-13+deb12u1_i386.deb ab6903fe935aecc6dd0ceb12074fa3be26c1224416730852634656f8acba90d3 1451508 grub2-common-dbgsym_2.06-13+deb12u1_i386.deb 570abde9f2b99c6218e1cbca3d84643c4a444966b95616f0959d69b3d3a66a3c 654752 grub2-common_2.06-13+deb12u1_i386.deb b5e6b56a5d703b9234b4145715f2281e62ee160cc4d04a26361d8aa2fcfe39ba 23115 grub2_2.06-13+deb12u1_i386-buildd.buildinfo 612dc0747719f637a68b832a85e2f88e9a8a0b5fa9029645d98a91a592210f79 2360 grub2_2.06-13+deb12u1_i386.deb Files: 1cf55858b868639bf871da1d2264410e 11193220 debug optional grub-common-dbgsym_2.06-13+deb12u1_i386.deb 248b9d703d49d8fd9f450c64ca5b08a4 2801832 admin optional grub-common_2.06-13+deb12u1_i386.deb 97bde9d25ab37a03e1d4864e1bf97a3f 635248 admin optional grub-coreboot-bin_2.06-13+deb12u1_i386.deb 5efa76f912dfbb095440d80b1e9f2e49 2906960 debug optional grub-coreboot-dbg_2.06-13+deb12u1_i386.deb ee075354f697db64a675cdeae19416fd 45664 admin optional grub-coreboot_2.06-13+deb12u1_i386.deb 37ecf52745567e26799006e59ea68cf9 1577420 admin optional grub-efi-amd64-bin_2.06-13+deb12u1_i386.deb 9f663f9c338316b85cf6703a1d4773fb 3482408 debug optional grub-efi-amd64-dbg_2.06-13+deb12u1_i386.deb 7e8b8ead968ba14c7f673e7ddc505301 45660 admin optional grub-efi-amd64_2.06-13+deb12u1_i386.deb c75a5fe8c4835ed42e48ee4fce566bac 1464684 admin optional grub-efi-ia32-bin_2.06-13+deb12u1_i386.deb d375d21411ef5c88df62907748d8dec6 3147108 debug optional grub-efi-ia32-dbg_2.06-13+deb12u1_i386.deb f1e5b4c81c51f5bc33b3b7fb8186d5b9 184084 admin optional grub-efi-ia32-signed-template_2.06-13+deb12u1_i386.deb ffd5d2d24ea09e816d4db5c265c3819f 45676 admin optional grub-efi-ia32_2.06-13+deb12u1_i386.deb 53b69070811350f2a29cedc7ffac0f2e 2388 admin optional grub-efi_2.06-13+deb12u1_i386.deb c8b30c8493e4a7caaf358ecf44f5af12 2551448 debug optional grub-emu-dbg_2.06-13+deb12u1_i386.deb 3af3c969557cf5a0722f9ed4078ed397 34272 debug optional grub-emu-dbgsym_2.06-13+deb12u1_i386.deb 0de3f9744dae295729fcd327bf03d0fb 3790088 admin optional grub-emu_2.06-13+deb12u1_i386.deb 6e4b7e4777d81dc8e2b77508cc54b4f2 781980 admin optional grub-firmware-qemu_2.06-13+deb12u1_i386.deb 2ccc9a5576a3de98990c500cb3c5912a 621680 admin optional grub-ieee1275-bin_2.06-13+deb12u1_i386.deb ae93968a3dfa4d915d6d396ccdaa4104 2874392 debug optional grub-ieee1275-dbg_2.06-13+deb12u1_i386.deb 391d22bcddb5cc157f87ddfcd3e6b738 45652 admin optional grub-ieee1275_2.06-13+deb12u1_i386.deb 8b8a55001356912b03546545f088e1c4 2360 oldlibs optional grub-linuxbios_2.06-13+deb12u1_i386.deb f1190f7bbf4c933412eae576e94b3e30 464676 debian-installer optional grub-mount-udeb_2.06-13+deb12u1_i386.udeb 654726a631c90960bfb70a8551ae5608 1124636 debug optional grub-pc-bin-dbgsym_2.06-13+deb12u1_i386.deb 25b88dd9da29efa4b6339eff3082358a 1027228 admin optional grub-pc-bin_2.06-13+deb12u1_i386.deb 52fa23ff9e48d2bdbb7d862d9b7f8b31 3133364 debug optional grub-pc-dbg_2.06-13+deb12u1_i386.deb 0f95a527b62f3f33643867f2c3af4a81 136484 admin optional grub-pc_2.06-13+deb12u1_i386.deb 7448630ebecf77ae7a45b7ecdbb88d0f 2491912 admin optional grub-rescue-pc_2.06-13+deb12u1_i386.deb ffaabb6eb063f1ddca4b2d2b78e79096 2155236 admin optional grub-theme-starfield_2.06-13+deb12u1_i386.deb 6ee5ae9e711ad5479372afc676d14fd1 1012576 admin optional grub-xen-bin_2.06-13+deb12u1_i386.deb 288fe915cf57266670ce29a5d7678a3c 7388000 debug optional grub-xen-dbg_2.06-13+deb12u1_i386.deb d5dabf92cf9f756ef618d9df5f835b36 1176784 admin optional grub-xen-host_2.06-13+deb12u1_i386.deb 575c1dff1cfad5d790fa9a81bbc90004 45588 admin optional grub-xen_2.06-13+deb12u1_i386.deb dfb45dadce44e26e254f0b28e8758b7a 1451508 debug optional grub2-common-dbgsym_2.06-13+deb12u1_i386.deb 42b0a0e1ae56754775c9ac6ccfb54447 654752 admin optional grub2-common_2.06-13+deb12u1_i386.deb 1574a84a6b8529abfca8f258c43555c3 23115 admin optional grub2_2.06-13+deb12u1_i386-buildd.buildinfo 88cee5305224fdeb98159aa69a39e4dd 2360 oldlibs optional grub2_2.06-13+deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7bJOCbihllHz5a8G6bGbnoZY/NwFAmUcT64ACgkQ6bGbnoZY /NxHzQ/+IGU8I+JqgTcMHjJyjbvd48L/BCV9YSg3MUhMqtD5iTLblPNrns8PPg7l YCdckEOPz2JshJ47G4q0BqOUbyfSX375Lw+paosu1KgwTRQg1tqOMApxMxo/M2Ol iJhYi6gbkV1dAerjx9ATC9M4iykX6ghh3KcaLdeV6IWnbuIo1cNjBPkUTIwC5Tce cTH4sJ4Jv22o3tWTpwgWIyzoDO811CYydlz1dKAL0AWXi6FMl60PqwgJGKpvxEEc 6HNuidHi0K9SY9hdZtyQAjC2Xwgyc/f2isjKw2nHAeZnoHEQiemwxDp9Cgaq3xB8 10RVV4jdqXusiSlxRDH5ZBqO05aUVedYoLnOTC02WifUfXnl8SweuBbqkxIATmlV WbLN9SkTUktjAxzaf/rup+1FFIQUK/SCM74jW0KKKZ9DryCxbyY2NJS7H0mgb+bo 7wfFaeqFFUMKOgojnHiuW86oosJLB3wcsY5Y4woZedaqS/dtsFUKvZy1u+j5/fKW uHWXK2BZ5+8f7Yzlo6hX0zb3pw9+Dr7bMsoJa3YSNQ+eOeve5Y7NLP9VXuBRmRm/ LXUY9v+8YSnaiav5mVKGuR/vwFU5H/yyxkhz3c7lJ6Ot045JpaByTlne6/++4o2H HXv6bMKrc5Ui1lZI7PqUEUM9q/D+mU8+OVX3eWlLodgQnODOsCY= =hIBh -----END PGP SIGNATURE-----