sbat: Also bump latest for grub,4 (and to todays date)

grub,4 was CVE-2023-4692 CVE-2023-4693 ntfs driver fixes and grub.debian,4 is no longer needed, as grub,4 implies it. Signed-off-by: Julian Andres Klode <[email protected]>
rhboot · Apr 9, 2024 · 547ec48 · 547ec48
1 parent 63edf92
commit 547ec48
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/include/sbat_var_defs.h b/include/sbat_var_defs.h
@@ -58,10 +58,13 @@
 	SBAT_VAR_AUTOMATIC_REVOCATIONS
 
 /*
- * Revocations for January 2024 shim CVEs + Debian/Ubuntu (peimage) CVE-2024-2312
+ * Revocations for:
+ * - January 2024 shim CVEs
+ * - October 2023 grub CVEs
+ * - Debian/Ubuntu (peimage) CVE-2024-2312
  */
-#define SBAT_VAR_LATEST_DATE "2024040500"
-#define SBAT_VAR_LATEST_REVOCATIONS "shim,4\ngrub,3\ngrub.debian,4\ngrub.peimage,2\n"
+#define SBAT_VAR_LATEST_DATE "2024040900"
+#define SBAT_VAR_LATEST_REVOCATIONS "shim,4\ngrub,4\ngrub.peimage,2\n"
 #define SBAT_VAR_LATEST \
 	SBAT_VAR_SIG SBAT_VAR_VERSION SBAT_VAR_LATEST_DATE "\n" \
 	SBAT_VAR_LATEST_REVOCATIONS