-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Nov 2026 07:13:29 -0700 Source: edk2 Architecture: source Version: 2026.08+ds-3 Distribution: unstable Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: dann frazier <dannf@debian.org> Closes: 1151700 Changes: edk2 (2026.08+ds-3) unstable; urgency=medium . * efi-shell-*: Mark Multi-Arch: foreign. * Fix out-of-bounds write in the Brotli decoder, CVE-2026-111497. (Closes: #1151700) - d/p/0001-Detect-and-report-invalid-stream-earlier.patch Checksums-Sha1: beb5fc7ef38655dd954f0e513a6cd245d39d8b4f 3156 edk2_2026.08+ds-3.dsc e8d2173304e3d913a2d0b6dbd9e4fe2cf6fb7afa 81164 edk2_2026.08+ds-3.debian.tar.xz 584fdf8de42a22acc518e2ea38b3d9509603a767 11296 edk2_2026.08+ds-3_source.buildinfo Checksums-Sha256: b5ad933c69ca0317eb8155254dfc7db1febe3e6c1e6deff18055b244f3deb042 3156 edk2_2026.08+ds-3.dsc a48bd0cdc391adc9a7e309688e6ab40fe39d55255196e8c393d306f17993f24d 81164 edk2_2026.08+ds-3.debian.tar.xz f1a1d89f4c485a66751ba144f67523788b1af0f75f61e8301ff36fa7728959b4 11296 edk2_2026.08+ds-3_source.buildinfo Files: 01ec463b5ba85c6b63d1d14314b53ffb 3156 misc optional edk2_2026.08+ds-3.dsc 1eb821ea45a69b1d349f18e03a298b9e 81164 misc optional edk2_2026.08+ds-3.debian.tar.xz 773bc4fb0375c9f15b9f911f4a794d80 11296 misc optional edk2_2026.08+ds-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iIcEARYKAC8WIQTmAeOZuZk0cdzmLptwfKEVz+IfkwUCau3g/xEcZGFubmZAZGVi aWFuLm9yZwAKCRBwfKEVz+Ifk5P/AP9EKxo65C/9UscBr+9eLsXhtm9yHx6Vdvhd 4dV4Zw7F3wD/a8zGkTVTyr1IBuag+X9+OekmNefuHL7RBPNh/H7oKAw= =XWNY -----END PGP SIGNATURE-----