import grub2-2.06-46.el9_1.3

SPECS/grub2.spec

@@ -14,7 +14,7 @@
 Name:                 grub2
 Epoch:                1
 Version:              2.06
-Release:              46%{?dist}.rocky.0.1
+Release:              46%{?dist}.3.rocky.0.1
 Summary:              Bootloader with support for Linux, Multiboot and more
 License:              GPLv3+
 URL:                  http://www.gnu.org/software/grub/
@@ -32,15 +32,22 @@ Source9:              strtoull_test.c
 Source10:             20-grub.install
 Source11:             grub.patches
 Source12:             sbat.csv.in
+Source13:             701-ca.cer
+Source14:             701-cer.cer
 
 
 %include %{SOURCE1}
 
-%ifarch x86_64 aarch64 ppc64le
+%ifarch x86_64 aarch64
 %define sb_ca		%{_datadir}/pki/sb-certs/secureboot-ca-%{_arch}.cer
 %define sb_cer		%{_datadir}/pki/sb-certs/secureboot-grub2-%{_arch}.cer
 %endif
 
+%ifarch ppc64le
+%define sb_ca %{SOURCE13}
+%define sb_cer %{SOURCE14}
+%endif
+
 %if 0%{?centos}
 
 %ifarch x86_64 aarch64 ppc64le
@@ -533,7 +540,7 @@ mv ${EFI_HOME}/grub.cfg.stb ${EFI_HOME}/grub.cfg
 %endif
 
 %changelog
-* Tue Nov 15 2022 Release Engineering <releng@rockylinux.org> - 2.06-46.rocky.0.1
+* Tue Feb 14 2023 Release Engineering <releng@rockylinux.org> - 2.06-46.rocky.0.1
 - Removing redhat old cert sources entries (Sherif Nagy)
 - Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
 - Adding prod cert
@@ -542,6 +549,14 @@ mv ${EFI_HOME}/grub.cfg.stb ${EFI_HOME}/grub.cfg
 - Cleaning up grup.macro extra signing certs
 - Adding Rocky testing CA, CERT and sbat files
 
+* Fri Nov 11 2022 Robbie Harwood <rharwood@redhat.com> - 2.06-46.el9_1.3
+- Give up on redhat-sb-certs
+- Resolves: CVE-2022-2601
+
+* Thu Nov 03 2022 Robbie Harwood <rharwood@redhat.com> - 2.06-46.el9_1.2
+- CVE update (actually 2.06-49)
+- Resolves: CVE-2022-2601
+
 * Thu Aug 25 2022 Robbie Harwood <rharwood@redhat.com> - 2.06-46
 - Sync /etc/kernel/cmdline generation with 2.06-52.fc38
 - Resolves: #1969362