-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 05 Nov 2026 12:17:08 +0000
Source: grub2
Architecture: source
Version: 2.12-9+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: GRUB Maintainers <pkg-grub-devel@alioth-lists.debian.net>
Changed-By: Steve McIntyre <93sam@debian.org>
Changes:
 grub2 (2.12-9+deb13u3) trixie; urgency=medium
 .
   [ Fabian Grünbichler ]
   * Patches for November 2025 CVEs
     + CVE-2025-54770: a use-after-free issue in the network module's
       VLAN handling code that can be used to trigger a denial of
       service
     + CVE-2025-54771: a use-after-free issue when closing a file which
       can be used to trigger at least a denial of service
     + CVE-2025-61661: mishandling of string conversion when reading data from a
       (malicious) USB device, which can be used to trigger at least a denial of
       service
     + CVE-2025-61662: a use-after-free issue in the gettext module,
       which can be used to trigger at least a denial of service
     + CVE-2025-61663/CVE-2025-61664: two use-after-free issues when
       unloading the `normal` module, which can be used to trigger at
       least a denial of service
     + Bump SBAT to grub,6 to match.
   * Patches for September 2026 CVE
     + CVE-2026-97876: serial MMIO secure boot bypass
     + Bump SBAT to grub,7 to match.
Checksums-Sha1:
 a3a247d34d9b8a985b0873478dc692b3d58607e0 8128 grub2_2.12-9+deb13u3.dsc
 850dd848bbc09ecfe9532f284f8fa670d833c12f 1129124 grub2_2.12-9+deb13u3.debian.tar.xz
 bda7e0b958aa03ff0765b6812eb481008dc9b56c 15047 grub2_2.12-9+deb13u3_source.buildinfo
Checksums-Sha256:
 ace3930b1b8927332c428fde696dc68f31f387ab9de687192eca21b581478a47 8128 grub2_2.12-9+deb13u3.dsc
 049e3b66a2af5847a7b60a819c549ea00afd21bddce00d322c9c5c715a28c079 1129124 grub2_2.12-9+deb13u3.debian.tar.xz
 7b6f036155c7b5873e1dbf215be0321e17172718921c0c6eb898edd004b1661c 15047 grub2_2.12-9+deb13u3_source.buildinfo
Files:
 f5c172b7cc567631d8d17496d4f2d117 8128 admin optional grub2_2.12-9+deb13u3.dsc
 3e3ec71dbdfcc870951ea3c4efa7ecf7 1129124 admin optional grub2_2.12-9+deb13u3.debian.tar.xz
 37b08f603662e3a3f1a8a6e1343f5da5 15047 admin optional grub2_2.12-9+deb13u3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=J6vF
-----END PGP SIGNATURE-----