debian/patches/block-grub-sbat3-debian.patch

   1 diff --git a/include/sbat_var_defs.h b/include/sbat_var_defs.h
   2 index 6b01573e..5b1a764f 100644
   3 --- a/include/sbat_var_defs.h
   4 +++ b/include/sbat_var_defs.h
   5 @@ -35,8 +35,12 @@
   6         SBAT_VAR_SIG SBAT_VAR_VERSION SBAT_VAR_PREVIOUS_DATE "\n" \
   7         SBAT_VAR_PREVIOUS_REVOCATIONS
   8
   9 -#define SBAT_VAR_LATEST_DATE "2022111500"
  10 -#define SBAT_VAR_LATEST_REVOCATIONS "shim,2\ngrub,3\n"
  11 +/*
  12 + * Debian's grub.3 update was broken - some binaries included the SBAT
  13 + * data update but not the security patches :-(
  14 + */
  15 +#define SBAT_VAR_LATEST_DATE "2023012900"
  16 +#define SBAT_VAR_LATEST_REVOCATIONS "shim,2\ngrub,3\ngrub.debian,4\n"
  17  #define SBAT_VAR_LATEST \
  18         SBAT_VAR_SIG SBAT_VAR_VERSION SBAT_VAR_LATEST_DATE "\n" \
  19         SBAT_VAR_LATEST_REVOCATIONS