There is 1 open security issue in trixie.
Among the 74 debian patches available in version 2.12-2 of the package, we noticed the following issues:
commit e234476f6ced5cd7ee069282f8adf0e3fa4936e8 Merge: 834554b 60632eb Author: Julian Andres Klode <jak@debian.org> Date: Sat Apr 13 07:53:14 2024 +0000 Merge branch 'default_grub_comments' into 'master' Update comments in debian/default/grub See merge request grub-team/grub!58 commit 60632eb2f4bd123d4bd0ec9808c3660a2eeab4e1 Author: Pascal Hambourg <pascal@plouf.fr.eu.org> Date: Sat Apr 13 08:29:02 2024 +0200 debian/default/grub: Document /etc/default/grub.d/*.cfg commit 57f1b6fa4f9963860f46484ef9d6bb20096bd9f7 Author: Pascal Hambourg <pascal@plouf.fr.eu.org> Date: Thu Feb 23 13:47:28 2023 +0100 debian/default/grub: Replace 'vbeinfo' with 'videoinfo' 'vbeinfo' is available only with BIOS and not with UEFI, whereas 'videoinfo' is available with both and gives the same information. commit 834554bda8c8d21c3a86bf3e93ae059c62a6d8e9 Merge: 7b416f2 6bf5261 Author: Felix Zielcke <fzielcke@z-51.de> Date: Fri Apr 12 18:10:46 2024 +0000 Merge branch 'background_picture' into 'master' 05_debian_theme: cache background picture if not in /boot/grub filesystem See merge request grub-team/grub!57 commit 6bf52614a604897db6e5887c06540df92e2c6e3c Author: Pascal Hambourg <pascal@plouf.fr.eu.org> Date: Tue Apr 9 19:47:00 2024 +0200 05_debian_theme: cache background picture if not in /boot/grub filesystem All files needed to display the boot menu, including the background picture, should be in the same filesystem as /boot/grub. Indeed nothing guarantees that GRUB can actually read files outside the /boot filesystem even if it supports it, because it relies on platform firmware which may have limitations such as not being able to handle other media or full media capacity. This is what a separate /boot was designed for in the first place, and it is the responsibility of the administrator to put /boot in a location readable by the platform firmware. So cache the background picture in /boot/grub not only if it is not readable by GRUB but also if it is not in the same filesystem as /boot/grub. This also avoids prompting for an extra passphrase when /boot and / are on different encrypted volumes, and allows to use a GRUB built with minimal filesystem and abstraction support. commit 7b416f24586b09b5f73b8c17f7982d81ec6a823d Author: Felix Zielcke <fzielcke@z-51.de> Date: Fri Apr 12 15:39:08 2024 +0200 Update Breaks/Replaces -efi-{ia32,amd64}-bin to << 2.12-3~ at -unsigned packages. commit cd7eadcc777e44edfedf3c6fffb816d25386da72 Merge: dc1181b 50cfef4 Author: Julian Andres Klode <jak@debian.org> Date: Sat Apr 6 06:37:06 2024 +0000 Merge branch 'master' into 'master' d/p/sb/efi-use-peimage-shim.patch: add loong64 suppport See merge request grub-team/grub!56 commit 50cfef48f9c395bedfee2425415da89e6948066f Author: Jiajie Chen <c@jia.je> Date: Mon Apr 1 13:04:54 2024 +0000 d/p/sb/efi-use-peimage-shim.patch: add loong64 suppport Add loong64 support to efi-use-peimage-shim.patch to fix the following error: obj/grub-efi-loong64/grub-mkimage: error: cannot open `obj/grub-efi-loong64/grub-core/peimage.mod': no such file or directory. commit dc1181b65e53fbfd67a681be9a171042f990191c Author: Julian Andres Klode <julian.klode@canonical.com> Date: Fri Apr 5 21:48:19 2024 +0200 Construct a working changelog for 2.12-3 commit 0a1186e16b6139a37241d99e38ce3aa4e7e0f6a1 Merge: 7da74d0 f8e8176 Author: Julian Andres Klode <julian.klode@canonical.com> Date: Fri Apr 5 21:47:10 2024 +0200 Merge tag 'debian/2.12-2' grub2 Debian release 2.12-2 commit 7da74d0c8ecb42d9488399c7885c3383b8bee8fc Merge: b2a3d06 0cce66d Author: Julian Andres Klode <jak@debian.org> Date: Wed Mar 20 14:05:54 2024 +0000 Merge branch 'unsigned' into 'master' Introduce new -unsigned packages to house the pre-built .efi binaries See merge request grub-team/grub!54 commit 0cce66d8932c8858ce89a64fba2e3b7a55f02a98 Author: Julian Andres Klode <julian.klode@canonical.com> Date: Tue Mar 19 14:09:32 2024 +0100 signing: Use the -unsigned packages as signed build-depends commit 6b61b4402d56307c25d3d830c590d64a17572770 Author: Julian Andres Klode <julian.klode@canonical.com> Date: Tue Mar 19 14:03:26 2024 +0100 Introduce new -unsigned packages to house the pre-built .efi binaries We will eventually change grub-install to only require these packages (or the signed ones where available) instead of the -bin ones. In this first step, we just add the new packages, and transitional depends from the -bin packages to them, such that the functionality of -bin packages remains the same. Loong64 is an outlier here, having not shipped a grub before, we do not have a transitional depends. We also need to have Breaks and Replaces but only for the packages that we built monolithic binaries in before, aka the amd64, ia32, and arm64 targets. The next step is to patch grub-install and then we can change the dependencies of the grub-efi-{amd64,...} packages to point to the -signed binaries on the signed platforms, and the -unsigned ones on the unsigned ones. Fixup commit b2a3d065b96dc591a240fbd93c9d84d956af5a79 Merge: a91671d 6793ead Author: Julian Andres Klode <jak@debian.org> Date: Mon Mar 18 16:25:27 2024 +0000 Merge branch 'monolithic' into 'master' d/rules: build monolithic images for riscv64 See merge request grub-team/grub!53 commit 6793eadc355efa171d89dba584cc4eba9a84ecaa Author: Heinrich Schuchardt <heinrich.schuchardt@canonical.com> Date: Mon Mar 11 12:35:31 2024 +0100 d/rules: build monolithic images for all EFI architectures Signed-off-by: Heinrich Schuchardt <heinrich.schuchardt@canonical.com> commit a91671dfd15f1612673be80f32d3c39da625153f Merge: 234d610 6138d8f Author: Julian Andres Klode <jak@debian.org> Date: Thu Mar 7 15:33:10 2024 +0000 Merge branch 'master' into 'master' Enable building for LoongArch64 See merge request grub-team/grub!42 commit 6138d8fb230e1d8d46ad08ec8e7f82752b895550 Author: Jiajie Chen <c@jia.je> Date: Tue Feb 20 22:13:59 2024 +0800 Enable building for LoongArch64 The following new packages will be built: - grub-efi-loong64-bin - grub-efi-loong64-dbg - grub-efi-loong64 Postinst scripts are updated for loongarch64-efi. commit 234d610f610d5419c61453b03d75c988cb5018cc Merge: 2d60a2b 7d1e1ad Author: Julian Andres Klode <jak@debian.org> Date: Wed Mar 6 10:19:58 2024 +0000 Merge branch 'master' into 'master' Revert "d/p/efidisk-breakup-large-reads.patch: efidisk: Breakup large reads into batches" See merge request grub-team/grub!52 commit 7d1e1ad13c5e02b0f787ac8c53f05eb247fd4f65 Author: Mate Kukri <mate.kukri@canonical.com> Date: Mon Feb 26 10:39:57 2024 +0000 Revert "d/p/efidisk-breakup-large-reads.patch: efidisk: Breakup large reads into batches" This reverts commit 6d2d25f43fcfa4378566378ef761e8ccff2e64bb. commit 2d60a2ba1097b1bb8eb2f36f6df025b860ee6ba2 Merge: e856ad4 6d2d25f Author: Julian Andres Klode <jak@debian.org> Date: Wed Feb 21 10:08:02 2024 +0000 Merge branch 'master' into 'master' Bug fixes since 2.12 release See merge request grub-team/grub!51 commit 6d2d25f43fcfa4378566378ef761e8ccff2e64bb Author: Mate Kukri <mate.kukri@canonical.com> Date: Wed Feb 7 08:46:38 2024 +0000 d/p/efidisk-breakup-large-reads.patch: efidisk: Breakup large reads into batches commit 29543f1d47609209decb5a6f75a264b6b91c5f9a Author: Mate Kukri <mate.kukri@canonical.com> Date: Wed Feb 7 08:37:02 2024 +0000 d/p/revert-term-ns8250-spcr.patch: Revert ACPI SPCR table support (#1062073) commit 53534f7e7b9fc9de15c5d5207b009c03daf210f6 Author: Mate Kukri <mate.kukri@canonical.com> Date: Fri Jan 26 15:28:21 2024 +0000 d/p/mkconfig-ubuntu-recovery.patch: Use "recovery" instead of "single recovery" for recovery mode bootparams commit e856ad42ce2da23ba2b76f3f618cde305b4c780a Author: Colin Watson <cjwatson@debian.org> Date: Tue Jan 23 13:43:02 2024 +0000 Update signing-template Uploaders to match main package
There is 1 open security issue in bullseye.
You can find information about how to handle this issue in the security team's documentation.
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.