update SBAT contents for Proxmox

bump grub upstream SBAT for the pulled in CVE fixes

add grub.debian entry since we mostly re-use Debian's implementation, any
Debian-specific issue almost certainly would affect ours too

keep grub.proxmox at 1 - no signatures have been created yet using the
production keys, so there is no binary in existence that would need to be
revoked.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>

diff --git a/debian/sbat.proxmox.csv.in b/debian/sbat.proxmox.csv.in
index 37809af89e4c214ebf6e7ba7ba8660ec16f9e63d..1e66361893e38ed821e382a6f3dae50e45a5ec89 100644 (file)
--- a/debian/sbat.proxmox.csv.in
+++ b/debian/sbat.proxmox.csv.in
@@ -1,3 +1,4 @@
 sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
-grub,3,Free Software Foundation,grub,@UPSTREAM_VERSION@,https://www.gnu.org/software/grub/
+grub,4,Free Software Foundation,grub,@UPSTREAM_VERSION@,https://www.gnu.org/software/grub/
+grub.debian,4,Debian,grub2,@DEB_VERSION@,https://tracker.debian.org/pkg/grub2
 grub.proxmox,1,Proxmox,grub2,@DEB_VERSION@,https://git.proxmox.com/?p=grub2.git