-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 05 Nov 2026 16:51:52 +0100 Source: grub2 Architecture: source Version: 2.14-5 Distribution: unstable Urgency: medium Maintainer: GRUB Maintainers <pkg-grub-devel@alioth-lists.debian.net> Changed-By: Steve McIntyre <93sam@debian.org> Closes: 1151556 Changes: grub2 (2.14-5) unstable; urgency=medium . [ Julian Andres Klode ] * Import Leo Sandoval's OpenPGP signing key * Update debian/watch file . [ Fabian Grünbichler ] * Bump SBAT to grub,6 - all applicable fixes from the 2025 CVEs are already in version 2.14 upstream. . [ Steve McIntyre ] * Bump SBAT to grub,7 to go with the serial-MMIO secure boot bypass fix (CVE-2026-97876) * Stop trying to use qemu-system on i386 builds, it's gone away there. Closes: #1151556 . No longer build grub-firmware-qemu for i386, therefore. Checksums-Sha1: 4854633581db7edd49682392b8fff26d43cc516d 7194 grub2_2.14-5.dsc e2ba47d91ce2f80155adb14a939fbada3d4613b8 1100348 grub2_2.14-5.debian.tar.xz a5ade13545745f23f452e0d54bd319e728b45560 14573 grub2_2.14-5_source.buildinfo Checksums-Sha256: 7ac8933e8a17b34f35416904d68eba07e398c14786ef5e089c14ccd3b21a4f41 7194 grub2_2.14-5.dsc cd7f0765dcc9339732a66307eedd010a3f427218a0ba53b5d37690b1af76752a 1100348 grub2_2.14-5.debian.tar.xz 6a0ad4dba5a15c468a8c748990bfd9c0f54caf25d6f9c9d0b61d6f2b4d973e39 14573 grub2_2.14-5_source.buildinfo Files: 29a2ce351280e2e9fcfcb19aa9e277a8 7194 admin optional grub2_2.14-5.dsc 3a2b3b660a08eca4ce29fc21b2b97ab0 1100348 admin optional grub2_2.14-5.debian.tar.xz 85e9d8d22b38d34041954b7d0c3297d3 14573 admin optional grub2_2.14-5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmrs0IkRHDkzc2FtQGRl Ymlhbi5vcmcACgkQWHl5VzRCaE6OEQ/9GF6pMU5qjQiQhEn5kx2VKXkD4rtf28z8 Wpd1IDdf6dznq5MVeaIx/QaBr9Ed3/6sGoVtZT/P44NrFAqIKJaAot/XRA836AsT fsSbE+5SsYCDMtoagagNVDqJLGDPuzn5E3GsZwO5FS7kONbMY1Q5rvv1c29gtcDJ 3PPZGw2IPpAbGFBKjyZ8ZvRDq/+nWvPdrXP+lSMGKeZY+hzAMks7aWAm2qyPwmjq SKB63UqVrFLf9/vcsoErAGVQJG3XErqNXisfIf1iui/+B6mXbXLYJcTeo78IzEnG ByTeF2DhSl8JvZw7660Tbe1HrK1KWdtDMeUE+5l3uAh9GSxJWUU22KMNgZ/lTpqA s2f/LEazDgxuMkaC8vG/KC/IvczmQLaBpt2N14pJ6QWlWWqYp+ruR7aGt9qeIJJa lDv2pA8jHnGQVvqz9KFDRVt7iNohcoxt6yiPbQAynfrKLopLVQFPb59Qsr6zL8ud 9RB4/KNUZueHP/mpHURkoS+r5ATpkRNGDr/nnfG7I8s9ZgwszNdWQvdYI5Tsz2sv MBh3HKluTN6Y/CUsUC9EBsPom7JE8FHTekidt+rryLTqP6dHFQu/97zckC1IkChZ cV7cJtZZCTpgCXrtrm1DTYicc8Tt/gaovnjMwX08sLviJA3L/mdaHL6DDuu4NXw6 44iuxzDyhE4= =pMyb -----END PGP SIGNATURE-----
