From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id BD3B4C3ABBC for ; Fri, 9 May 2025 12:20:07 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uDMhQ-000428-4o; Fri, 09 May 2025 08:19:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uDIS7-0006aC-7n for grub-devel@gnu.org; Fri, 09 May 2025 03:47:27 -0400 Received: from mail.archlinux.org ([95.216.189.61]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uDIS4-0007JN-TO for grub-devel@gnu.org; Fri, 09 May 2025 03:47:26 -0400 Date: Fri, 9 May 2025 09:47:05 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=archlinux.org; s=dkim-rsa; t=1746776839; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=SdSZCoDtmv0zDJYL2s7Et67nuI52LmPvQ2p2xFt+N18=; b=Kc5Fqq0mr+moFQ99aJSzlovei595r/V5fMehDa+7DL+2cOThU45EUy9nleKg9tYqcRs9cE X9byRy/61QwazSsJeFvbyB61EOoXUNf+zvuS94J5EzJ2hl0YvaM07jF5UhOjhRJd7606vg oFysCo0YXLXiWFniHsHApFxwXdoZqjhJgokkv0sjzDnCNwXmjdYbk3NnHTDFRCaEBV3/ch bhodHp+1hJA75QtKP4Cq107iykIL2GfVAi3MDhYyIIDU1KGoP3mOjspkyAp4VdSFFlpEUl bfyakiV8CHE9Hexp3EwUVr773qwBiBxPnepoRKa1psm+1m9sErcEQTkfqfXpUye/FcA495 xs+nfISuKxuJzp9vKvw6uioq6T7m+gGEp5CBHQiGwqnMkKsEKqPyvw/Z5L2DJL5U4C6qTE /1yp9vJSiI2wfMIl1O5SeQe3l4PzhkseC11O+nvh6NWxmC937CEBuNtwOsMDWp4n6mYmVJ Dn4UftMTrOL96fVCh1F45JbS8JFAFFx4sE3iwyWnNi+sSdNoUQ7kwYmRh6rZ40tAl/z7OH YbrAem+jSvrNk3YnndxAVhm3Xwa50jbRufvekXCa/eRM68bCpsNDiAra4h2H5wGsrNpnil HvgBXD57XnnbgUpqP7pMJJE5HSK4EVxf457CQj6pGzTl3/eJTWTTQ= DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=archlinux.org; s=dkim-ed25519; t=1746776839; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=SdSZCoDtmv0zDJYL2s7Et67nuI52LmPvQ2p2xFt+N18=; b=Z5z52hNMcODENPWPFXr8nXxzuT/a20LGX9KRMKDO6okB9too5MUvcFEzWD4D1zN15/UoET tG/JmZkWTMD3N9AQ== Authentication-Results: mail.archlinux.org; auth=pass smtp.auth=eworm smtp.mailfrom=eworm@archlinux.org From: Christian Hesse To: Daniel Kiper Cc: grub-devel@gnu.org, dfirblog@gmail.com, glin@suse.com, mbenatto@redhat.com, mchang@suse.com, meissner@suse.com, tpowa@archlinux.org Subject: Re: [SECURITY PATCH 00/08] GRUB2 vulnerabilities - 2025/05/08 Message-ID: <20250509094705.22a08d2d@leda.eworm.net> In-Reply-To: <20250508170214.26577-1-daniel.kiper@oracle.com> References: <20250508170214.26577-1-daniel.kiper@oracle.com> Organization: Arch Linux X-Mailer: Claws Mail 4.3.1 (GTK 3.24.49; x86_64-pc-linux-gnu) MIME-Version: 1.0 Received-SPF: pass client-ip=95.216.189.61; envelope-from=eworm@archlinux.org; helo=mail.archlinux.org X-Spam_score_int: -57 X-Spam_score: -5.8 X-Spam_bar: ----- X-Spam_report: (-5.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.416, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Mailman-Approved-At: Fri, 09 May 2025 08:19:03 -0400 X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Type: multipart/mixed; boundary="===============2127793259404475932==" Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org --===============2127793259404475932== Content-Type: multipart/signed; boundary="Sig_//7paHjunIaxfGOcPmU4mxHl"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Sig_//7paHjunIaxfGOcPmU4mxHl Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Daniel Kiper on Thu, 2025/05/08 19:02: > [...] Now all the GRUB2 upstream patches are in > the GRUB2 git repository [2] too. > > [...] >=20 > [2] https://git.savannah.gnu.org/gitweb/?p=3Dgrub.git > https://git.savannah.gnu.org/git/grub.git Does not look like... The last commit is still 4abac0ad5a7914dd3cdfff08aaac06588bf98d80 from April. --=20 Best regards, Chris --Sig_//7paHjunIaxfGOcPmU4mxHl Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQQEKYl95fO9rFN6MGltQr3RFuAGjwUCaB2y+QAKCRBtQr3RFuAG j2FRAP95W6hl5Y7KUwuVR5SbfqVZYpujEzr73GKXIcLlC8bnAwD+JBISO3oIDUNu yMz/j2w0I652PNYm3WWrQc2rTe/EPwM= =Du54 -----END PGP SIGNATURE----- --Sig_//7paHjunIaxfGOcPmU4mxHl-- --===============2127793259404475932== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KR3J1Yi1kZXZl bCBtYWlsaW5nIGxpc3QKR3J1Yi1kZXZlbEBnbnUub3JnCmh0dHBzOi8vbGlzdHMuZ251Lm9yZy9t YWlsbWFuL2xpc3RpbmZvL2dydWItZGV2ZWwK --===============2127793259404475932==--