-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2024 18:22:25 -0700 Source: edk2 Architecture: source Version: 2020.11-2+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: dann frazier <dannf@debian.org> Changes: edk2 (2020.11-2+deb11u2) bullseye-security; urgency=medium . * Disable the built-in Shell when SecureBoot is enabled, CVE-2023-48733. Thanks to Mate Kukri. LP: #2040137. - Backport support for GetSetupMode() and IsSecureBootEnabled(): + 0001-SecurityPkg-Create-SecureBootVariableLib.patch + 0002-ArmVirtPkg-add-SecureBootVariableLib-class-resolutio.patch + 0003-OvmfPkg-add-SecureBootVariableLib-class-resolution.patch + 0004-SecurityPkg-SecureBootVariableLib-Added-newly-suppor.patch + 0005-EmulatorPkg-add-SecureBootVariableLib-class-resoluti.patch - Disable the built-in Shell when SecureBoot is enabled: + Disable-the-Shell-when-SecureBoot-is-enabled.patch - d/tests: Drop the boot-to-shell tests for images w/ Secure Boot active. Checksums-Sha1: eff7f44242bb8e420e32e5d37cee04de9fdf7333 2828 edk2_2020.11-2+deb11u2.dsc 4018a25d8b3e3d11ecc87270773f1d543f099ba8 7077 edk2_2020.11.orig-qemu-ovmf-secureboot-1-1-3.tar.gz 27b736c57db5b861cdfdf393d2e7b3c1cd3aae31 35826376 edk2_2020.11.orig.tar.xz dc198c6605856cbd9ae767c3540e20c3abe118a0 36620 edk2_2020.11-2+deb11u2.debian.tar.xz 1fa4b12a6233541bdc9680cfe7ed33349d7c1d27 10578 edk2_2020.11-2+deb11u2_source.buildinfo Checksums-Sha256: 443f34e4f9d5e3ff1b6e429faa70eb78590d0e53dc67874e93623c9f4e73ce67 2828 edk2_2020.11-2+deb11u2.dsc f0874d37e5d0a72c27d5f717cb161fd48d252f26bfaf74ebc5761e36b3992363 7077 edk2_2020.11.orig-qemu-ovmf-secureboot-1-1-3.tar.gz 9cfac20ddf4cef38ecf9ad91c56bfbb1ffd1bb9bdd9fb2fbfc529ea5478c330e 35826376 edk2_2020.11.orig.tar.xz 020d35a7be01be34572fc847c9acf78a7b3a5bca0b5c871d77ee11cca88498c7 36620 edk2_2020.11-2+deb11u2.debian.tar.xz b49eb9e86f615f84fdc52f7a8f64ef4e93dc5e45244a7ad0cd6cf23139185c54 10578 edk2_2020.11-2+deb11u2_source.buildinfo Files: 98a5f5290cbd18ad26e4c0b28f65d348 2828 misc optional edk2_2020.11-2+deb11u2.dsc a29d393bad8ee2dd6acac99ebb116e86 7077 misc optional edk2_2020.11.orig-qemu-ovmf-secureboot-1-1-3.tar.gz 64f70e6a2fafb667d05b9b4a6bb8439b 35826376 misc optional edk2_2020.11.orig.tar.xz 1e13a7e5e78c6afe76e625a0ca074636 36620 misc optional edk2_2020.11-2+deb11u2.debian.tar.xz 02a512aaf5274563f1b6ce85da09eb25 10578 misc optional edk2_2020.11-2+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEECfR9vy0y7twkQ+vuG/g8XlT8hkAFAmXMJOERHGRhbm5mQGRl Ymlhbi5vcmcACgkQG/g8XlT8hkCpCg/+IBJla2vfZYK9NbUwWn6tlwbUBf2gUQVt ebOUVwEhgx0VrLia9jivw6AKS+wx/dEVz2ERuOu/LYM57yqNDCDnUNq2bbecmBrD 4gRdRxCP1vDwzOD6z77mrSQJbs9p8WNPH05n7TyZlN1GeoFVDj4dVJwrFsPjrcbX bKn80OGf+URon3OeYLDZlX2IMMVwW9fArSz7Vrht9xd0l2yLAMBC7T/QgpFBa9hr sAXDIwQquf/IAkVbScqgxFKKKack76FYS8RE6STz6DmpJcs9bo/xOz3gnJecB2Bf 1gOxhOAGp73OBpBiQJvLNO7AfyGpwQHtmZIskG1ml6YnumYsgxtPTVOP0U53RFlt 6buag8OpfQuiQbAchJn/fByRTmkllHgOC+AbPBuiLTwzPop6no6a9Xx+0Ma/3/G4 9c4AlRA61M5pJ71Z5s+mERXhTcwjT+2zbNx6Kw2eJB1rSRGSVIAfVri1cP2qIKjs or2ZgJsu74wVMq9BSV2i0vf2UW70EABtERJR0ay+ouNKbH+4R9Vqln+WFvAdUXsi V1pK2P25rtBdDlEb82FtJiKd3mgzkqAIgoZ2Pa5m/27Du8v8m8Nd4jvKQeIBREzq K2Bx3xEhbhwOEYjbrUpljHHFqQ04KqwQbWjGQlwO0yo5BSfyy73zQFiSxQTpXBq1 O79uChuT26M= =UaOW -----END PGP SIGNATURE-----
