Skip to content

Commit

Permalink
sbat: Add grub.peimage,2 to latest (CVE-2024-2312)
Browse files Browse the repository at this point in the history 
Add the previous latest level to the switch for automatic.

Signed-off-by: Julian Andres Klode <[email protected]>
  • Loading branch information
@julian-klode @vathpela
julian-klode authored and vathpela committed Apr 9, 2024
1 parent 126a07e commit 63edf92
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions include/sbat_var_defs.h
View file
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,8 @@
#define SBAT_VAR_AUTOMATIC_REVOCATIONS "shim,2\ngrub,3\n"
#elif SBAT_AUTOMATIC_DATE == 2023012900
#define SBAT_VAR_AUTOMATIC_REVOCATIONS "shim,2\ngrub,3\ngrub.debian,4\n"
#elif SBAT_AUTOMATIC_DATE == 2024010900
#define SBAT_VAR_AUTOMATIC_REVOCATIONS "shim,4\ngrub,3\ngrub.debian,4\n"
#else
#error "Unknown SBAT_AUTOMATIC_DATE"
#endif /* SBAT_AUTOMATIC_DATE == */
Expand All @@ -56,10 +58,10 @@
SBAT_VAR_AUTOMATIC_REVOCATIONS

/*
* Revocations for January 2024 shim CVEs
* Revocations for January 2024 shim CVEs + Debian/Ubuntu (peimage) CVE-2024-2312
*/
#define SBAT_VAR_LATEST_DATE "2024010900"
#define SBAT_VAR_LATEST_REVOCATIONS "shim,4\ngrub,3\ngrub.debian,4\n"
#define SBAT_VAR_LATEST_DATE "2024040500"
#define SBAT_VAR_LATEST_REVOCATIONS "shim,4\ngrub,3\ngrub.debian,4\ngrub.peimage,2\n"
#define SBAT_VAR_LATEST \
SBAT_VAR_SIG SBAT_VAR_VERSION SBAT_VAR_LATEST_DATE "\n" \
SBAT_VAR_LATEST_REVOCATIONS
Expand Down

0 comments on commit 63edf92

Please sign in to comment.