Skip to content

Commit a93ac6b

Browse files
olkorshamakubacki
olkorsha
authored and
makubacki
committed
Add 3 missing isOptional flags, add missing ia32 EasyFix entry, use dbx payload that includes ALL the revocations
1 parent d920f9b commit a93ac6b

3 files changed

Lines changed: 81 additions & 68 deletions

File tree

‎PostSignedObjects/DBX/amd64/DBXUpdate.bin‎

7.2 KB
Binary file not shown.

‎PostSignedObjects/DBX/x86/DBXUpdate.bin‎

63 Bytes
Binary file not shown.

‎PreSignedObjects/DBX/dbx_info_msft_latest.json‎

Lines changed: 81 additions & 68 deletions
Original file line numberDiff line numberDiff line change
@@ -497,6 +497,7 @@
497497
"flatHash": "3D23947C39680B9FCF22B092B97C9D38EDCC02F7AD13D3A925D1EE0B62797E73",
498498
"filename": "grubx64.efi",
499499
"description": "CVE-2020-10713; CVE-2020-14308; CVE-2020-14309; CVE-2020-14310; CVE-2020-14311; CVE-2020-15705; CVE-2020-15706; CVE-2020-15707",
500+
"isOptional": "true",
500501
"companyName": "Canonical",
501502
"dateOfAddition": "2020-07-01",
502503
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
@@ -507,6 +508,7 @@
507508
"flatHash": "0AC2943ABF5EF953B939247B74331FB2C437E405A81DD5569D9CFF1D6183D53A",
508509
"filename": "gcdx64.efi",
509510
"description": "CVE-2020-10713; CVE-2020-14308; CVE-2020-14309; CVE-2020-14310; CVE-2020-14311; CVE-2020-15705; CVE-2020-15706; CVE-2020-15707",
511+
"isOptional": "true",
510512
"companyName": "Canonical",
511513
"dateOfAddition": "2020-07-01",
512514
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
@@ -517,6 +519,7 @@
517519
"flatHash": "8E8ADDB29426D845A0101C2C1F26C2E7FE8C78128AB04F16CFCB4E06461B0101",
518520
"filename": "grubnetx64.efi",
519521
"description": "CVE-2020-10713; CVE-2020-14308; CVE-2020-14309; CVE-2020-14310; CVE-2020-14311; CVE-2020-15705; CVE-2020-15706; CVE-2020-15707",
522+
"isOptional": "true",
520523
"companyName": "Canonical",
521524
"dateOfAddition": "2020-07-01",
522525
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
@@ -4321,8 +4324,8 @@
43214324
"companyName": "DT Research Inc",
43224325
"dateOfAddition": "2025-05-07",
43234326
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4324-
},
4325-
{
4327+
},
4328+
{
43264329
"authenticodeHash": "CBFA2A86144EB21D65A6B17245BAD4F73058436C7292BE56DC6EBAB29DA61606",
43274330
"hashType": "SHA256",
43284331
"flatHash": "A4A5D536E11A12E1023ED51ACDBA64107C5B463822D31C6F5F7855B32FF031D1",
@@ -4331,8 +4334,8 @@
43314334
"companyName": "DT Research Inc",
43324335
"dateOfAddition": "2025-05-07",
43334336
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4334-
},
4335-
{
4337+
},
4338+
{
43364339
"authenticodeHash": "9D7E7174C281C6526B44C632BAA8C3320ADD0C77DC90778CC148938829F45E5E",
43374340
"hashType": "SHA256",
43384341
"flatHash": "1BA53A168EA9F0C2835BBD11EC1DD4DCAE9D8C9312F8FFEE1362359844674870",
@@ -4341,8 +4344,8 @@
43414344
"companyName": "DT Research Inc",
43424345
"dateOfAddition": "2025-05-07",
43434346
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4344-
},
4345-
{
4347+
},
4348+
{
43464349
"authenticodeHash": "9B1F35052CFC5FB06DAB5E8F7B47F081DA28D722DB59ADE253B9E38AB5A19847",
43474350
"hashType": "SHA256",
43484351
"flatHash": "821C96C73C476C194ED456F70826DA9BC06857A29B0EB6A0FE9B1286686DAD18",
@@ -4351,8 +4354,8 @@
43514354
"companyName": "DT Research Inc",
43524355
"dateOfAddition": "2025-05-07",
43534356
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4354-
},
4355-
{
4357+
},
4358+
{
43564359
"authenticodeHash": "E3C5E55E84371D3F2FBCA2241EF0711FF80876EBF71BAB07D8E6E45AAA8B45AF",
43574360
"hashType": "SHA256",
43584361
"flatHash": "FBE157A9E4D1522A6A06BF9AACB7F4792EE631E4F8D447D7DBD81315178098A6",
@@ -4361,8 +4364,8 @@
43614364
"companyName": "DT Research Inc",
43624365
"dateOfAddition": "2025-05-07",
43634366
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4364-
},
4365-
{
4367+
},
4368+
{
43664369
"authenticodeHash": "EE093913ABBD3D4CB85EA31375179A8B55A298353C03AFE5055AA4E8EBD10EC2",
43674370
"hashType": "SHA256",
43684371
"flatHash": "495157D91DFD7F1255C56E4C6A389DA5B35D1F542B35360512AAED05CFEDC880",
@@ -4371,8 +4374,8 @@
43714374
"companyName": "DT Research Inc",
43724375
"dateOfAddition": "2025-05-07",
43734376
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4374-
},
4375-
{
4377+
},
4378+
{
43764379
"authenticodeHash": "B4E1880425F7857B741B921D04FD9276130927CF90A427C454B970E7A28EB88B",
43774380
"hashType": "SHA256",
43784381
"flatHash": "27E2C712A58ACA27B35E78303E46E24E50061C955743363AE6D10F5C9A823A6D",
@@ -4381,8 +4384,8 @@
43814384
"companyName": "DT Research Inc",
43824385
"dateOfAddition": "2025-05-07",
43834386
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4384-
},
4385-
{
4387+
},
4388+
{
43864389
"authenticodeHash": "CDA0B4A59390B36E1B654850428CBB5B4C7B5E4349E87ACDE97FB5437D64D9FC",
43874390
"hashType": "SHA256",
43884391
"flatHash": "D3AFD86D86D52AF45964DF9ECD2B01EEE9B3A5468C660A88EA12E857D961DC42",
@@ -4391,8 +4394,8 @@
43914394
"companyName": "DT Research Inc",
43924395
"dateOfAddition": "2025-05-07",
43934396
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4394-
},
4395-
{
4397+
},
4398+
{
43964399
"authenticodeHash": "C87EFD057497F90321D62A69B311912BE8EF8A045FE9C5E6BD5C8C1A41D6B295",
43974400
"hashType": "SHA256",
43984401
"flatHash": "FB4CE9A346B67C4C706834A95B81910DDE9C2CAFE4996D2BFBB8CAA4BAD8942D",
@@ -4401,8 +4404,8 @@
44014404
"companyName": "DT Research Inc",
44024405
"dateOfAddition": "2025-05-07",
44034406
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4404-
},
4405-
{
4407+
},
4408+
{
44064409
"authenticodeHash": "9E19DD645235341A555DA6C065594543AE1E3918ECD37DF22DFEBE91E71C3A59",
44074410
"hashType": "SHA256",
44084411
"flatHash": "663A8A79C13174E7B262A1C49080F6E7A44B0717B006AB54B9D5D5CC5A6C9304",
@@ -4411,8 +4414,8 @@
44114414
"companyName": "DT Research Inc",
44124415
"dateOfAddition": "2025-05-07",
44134416
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4414-
},
4415-
{
4417+
},
4418+
{
44164419
"authenticodeHash": "63F67824FDA998798964FF33B87441857DA92F3A8EE3E04166EEC315E6600FD1",
44174420
"hashType": "SHA256",
44184421
"flatHash": "71EDB98CBB9E136BE2E22AF4EC2727854D906B613185B46FA128DC559144F73F",
@@ -4421,8 +4424,8 @@
44214424
"companyName": "DT Research Inc",
44224425
"dateOfAddition": "2025-05-07",
44234426
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4424-
},
4425-
{
4427+
},
4428+
{
44264429
"authenticodeHash": "0BC4F078388D41AB039F87AE84CF8D39302CCBDD70C4ADE02263EBFCE6DEF0F5",
44274430
"hashType": "SHA256",
44284431
"flatHash": "9F068CD3ABD8BC4291C3A3AAC3E009F90343DF138EA06D6940C689110BC7E687",
@@ -4431,8 +4434,8 @@
44314434
"companyName": "DT Research Inc",
44324435
"dateOfAddition": "2025-05-07",
44334436
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4434-
},
4435-
{
4437+
},
4438+
{
44364439
"authenticodeHash": "E2AEC271B9596A461EB6D54D8B1785E4E4C615CFAD5F4504BCC0A329433A9747",
44374440
"hashType": "SHA256",
44384441
"flatHash": "799DDA62A826D774074B7DB847593020F95BC43A11C66CA7AE41691954D97CF5",
@@ -4441,8 +4444,8 @@
44414444
"companyName": "DT Research Inc",
44424445
"dateOfAddition": "2025-05-07",
44434446
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4444-
},
4445-
{
4447+
},
4448+
{
44464449
"authenticodeHash": "6B4328EBCBE46ED9118FF2D4472DE329D70BA83016DF7A6F50F8AF923883BC54",
44474450
"hashType": "SHA256",
44484451
"flatHash": "A11996AAF7F32AA09F78DB608106E25A47970BFEEEC76D49AF743EEE71B55F06",
@@ -4451,8 +4454,8 @@
44514454
"companyName": "DT Research Inc",
44524455
"dateOfAddition": "2025-05-07",
44534456
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4454-
},
4455-
{
4457+
},
4458+
{
44564459
"authenticodeHash": "E14C88DC48339C0555686849A4E3F8986D558E65C4FC863A1A4F1D40478BD47C",
44574460
"hashType": "SHA256",
44584461
"flatHash": "0C1E0821CEF69A0BC2798996C6CE0B60564B2A1A9D67EF89F3059023EDAB720C",
@@ -4461,18 +4464,18 @@
44614464
"companyName": "IGEL",
44624465
"dateOfAddition": "2025-09-02",
44634466
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4464-
},
4465-
{
4466-
"authenticodeHash": "D013BA511AEE89BA3285D1CAC0C9F4F21EF4810873C2EBBFFE7712BF0BE8CED3",
4467-
"hashType": "SHA256",
4468-
"flatHash": "926BB1A08E1427AB7E14587955D451A8A05808BE609C92CB74668B0828DD8CE1",
4469-
"filename": "shdloader.efi",
4470-
"description": "EasyFix tool from EAZ solutions",
4471-
"companyName": "EAZ Solutions",
4472-
"dateOfAddition": "2026-04-02",
4473-
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4474-
},
4475-
{
4467+
},
4468+
{
4469+
"authenticodeHash": "D013BA511AEE89BA3285D1CAC0C9F4F21EF4810873C2EBBFFE7712BF0BE8CED3",
4470+
"hashType": "SHA256",
4471+
"flatHash": "926BB1A08E1427AB7E14587955D451A8A05808BE609C92CB74668B0828DD8CE1",
4472+
"filename": "shdloader.efi",
4473+
"description": "EasyFix tool from EAZ solutions",
4474+
"companyName": "EAZ Solutions",
4475+
"dateOfAddition": "2026-04-02",
4476+
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4477+
},
4478+
{
44764479
"authenticodeHash": "AE75F0D82BA3DF824FBFC69340CC3B4D66C598373B1AB54CDB6C8BFD83A6B961",
44774480
"hashType": "SHA256",
44784481
"flatHash": "1D18DF4B15D3BC3DFFA1777A557075210DD0C53B",
@@ -4481,8 +4484,8 @@
44814484
"companyName": "Spyrus",
44824485
"dateOfAddition": "2026-04-09",
44834486
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4484-
},
4485-
{
4487+
},
4488+
{
44864489
"authenticodeHash": "7B2A3F5C96F95BD8086CE54B0825E300F9C8F11FE3401BB631B3215C8DE9EB10",
44874490
"hashType": "SHA256",
44884491
"flatHash": "3F24DD838C5C9E35B104FA2F3B74AC6A5BF92FD2",
@@ -4491,8 +4494,8 @@
44914494
"companyName": "RedHat",
44924495
"dateOfAddition": "2026-04-09",
44934496
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4494-
},
4495-
{
4497+
},
4498+
{
44964499
"authenticodeHash": "EB86FA1386FE6E4533B8B938DCC1250616D2F1C14C15E2FCF80834A161018A0A",
44974500
"hashType": "SHA256",
44984501
"flatHash": "E133BE08E8AD17AC00E3C8ED215499C5F3C54E64",
@@ -4501,8 +4504,8 @@
45014504
"companyName": "RedHat",
45024505
"dateOfAddition": "2026-04-09",
45034506
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4504-
},
4505-
{
4507+
},
4508+
{
45064509
"authenticodeHash": "FD23D6E57DE6F4E1F9D7118DA1C5F31A8AF6BE5E5D9E8170F9493447268D50C5",
45074510
"hashType": "SHA256",
45084511
"flatHash": "8637D7EFA23A8A5738F2E4AACB6C9919B405AA2C",
@@ -4511,8 +4514,8 @@
45114514
"companyName": "Baramundi",
45124515
"dateOfAddition": "2026-04-09",
45134516
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4514-
},
4515-
{
4517+
},
4518+
{
45164519
"authenticodeHash": "A0DE9333442C1BF9349A460141AE5E80F911955C6506040FA3D021BF6C1AE3E4",
45174520
"hashType": "SHA256",
45184521
"flatHash": "8A402AFCD3C23D9253BBEA08576113C63E448AD0",
@@ -4521,8 +4524,8 @@
45214524
"companyName": "WhiteCanyon/blancco",
45224525
"dateOfAddition": "2026-04-09",
45234526
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4524-
},
4525-
{
4527+
},
4528+
{
45264529
"authenticodeHash": "95B6D71FC0C0F8C5E1533A37AEF92CF6B0C961E2CC612A97117FA6759CE5FC06",
45274530
"hashType": "SHA256",
45284531
"flatHash": "8A83FA30DBF0073F33EAD298A7D5CD69A47C3A4B",
@@ -4531,8 +4534,8 @@
45314534
"companyName": "Finland's Matriculation Examination Board",
45324535
"dateOfAddition": "2026-04-09",
45334536
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4534-
},
4535-
{
4537+
},
4538+
{
45364539
"authenticodeHash": "236A9CB0D71951C36398A32EB660CE2CD4A52CCFA7CF751CC6A35D9DE549E19B",
45374540
"hashType": "SHA256",
45384541
"flatHash": "8F9E8DB8E2C2157C2A591F2BE070FF96BFE318C7",
@@ -4541,8 +4544,8 @@
45414544
"companyName": "NTC IT ROSA, LLC",
45424545
"dateOfAddition": "2026-04-09",
45434546
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4544-
},
4545-
{
4547+
},
4548+
{
45464549
"authenticodeHash": "5E594C448760A3135B1A3A83E07A4F2E6FBE49414EF2C7CAB1CBA77F284FA63B",
45474550
"hashType": "SHA256",
45484551
"flatHash": "A16136899A12AD214FA4FBA60072BA72FBAB8BCA",
@@ -4551,8 +4554,8 @@
45514554
"companyName": "Oracle America, Inc.",
45524555
"dateOfAddition": "2026-04-09",
45534556
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4554-
},
4555-
{
4557+
},
4558+
{
45564559
"authenticodeHash": "8A964D5F8373948D20A1D4296FB92E545DAD4617A0C810F3B934B53D98AE8963",
45574560
"hashType": "SHA256",
45584561
"flatHash": "BC01320D8FF8343B348EF8F3C947A66EB8FD9CE2",
@@ -4561,8 +4564,8 @@
45614564
"companyName": "PC-Doctor, Inc.",
45624565
"dateOfAddition": "2026-04-09",
45634566
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4564-
},
4565-
{
4567+
},
4568+
{
45664569
"authenticodeHash": "410260B1B6F5AF5FBEEB9EA3220658435E876CB3247126EE907A437F312DB373",
45674570
"hashType": "SHA256",
45684571
"flatHash": "3CF8BEB1E2885F51CA04002425C4F3C796D105BC",
@@ -4571,8 +4574,8 @@
45714574
"companyName": "OpenSUSE",
45724575
"dateOfAddition": "2026-04-09",
45734576
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4574-
},
4575-
{
4577+
},
4578+
{
45764579
"authenticodeHash": "96275DFD6282A522B011177EE049296952AC794832091F937FBBF92869028629",
45774580
"hashType": "SHA256",
45784581
"flatHash": "6DB5266E80C9D51CDD54421E736DF2E6E6879A56",
@@ -4581,9 +4584,9 @@
45814584
"companyName": "OpenSUSE",
45824585
"dateOfAddition": "2026-04-09",
45834586
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
4584-
}
4585-
],
4586-
"ia32": [
4587+
}
4588+
],
4589+
"ia32": [
45874590
{
45884591
"authenticodeHash": "363384D14D1F2E0B7815626484C459AD57A318EF4396266048D058C5A19BBF76",
45894592
"hashType": "SHA256",
@@ -5547,6 +5550,16 @@
55475550
"companyName": "IGEL",
55485551
"dateOfAddition": "2025-09-02",
55495552
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
5553+
},
5554+
{
5555+
"authenticodeHash": "A059D649606A11F88E6BA2883491C6EB4CAD48E433846E29CAB8D14547164016",
5556+
"hashType": "SHA256",
5557+
"flatHash": "C458F16FEB497594F5E15575FBF17734161A4DE8FF04E37585B0ED081FB0F9A1",
5558+
"filename": "shdloader.efi",
5559+
"description": "EasyFix tool from EAZ solutions",
5560+
"companyName": "EAZ Solutions",
5561+
"dateOfAddition": "2026-04-02",
5562+
"signingAuthority": "CN = Microsoft Corporation UEFI CA 2011"
55505563
}
55515564
],
55525565
"aarch64": [
@@ -7011,7 +7024,7 @@
70117024
"signingAuthority": "CN = Microsoft Windows Production PCA 2011"
70127025
}
70137026
]
7014-
},
7027+
},
70157028
"certificates": [
70167029
{
70177030
"value": "MicWinProPCA2011_2011-10-19.der",
@@ -7023,23 +7036,23 @@
70237036
}
70247037
],
70257038
"svns": [
7026-
{
7039+
{
70277040
"value": "01612B139DD5598843AB1C185C3CB2EB92000009000000000000000000000000",
70287041
"version": "9.0",
70297042
"filename": "bootmgfw.efi",
70307043
"guid": "{9d132b61-59d5-4388-ab1c-185c3cb2eb92} == EFI_BOOTMGR_DBXSVN_GUID",
70317044
"description": "Windows Bootmgr SVN CVE-2023-24932",
70327045
"dateOfLastChange": "2026-04-10"
70337046
},
7034-
{
7047+
{
70357048
"value": "019D2EF8E827E15841A4884C18ABE2F284000003000000000000000000000000",
70367049
"version": "3.0",
70377050
"filename": "cdboot.efi",
70387051
"guid": "{e8f82e9d-e127-4158-a488-4c18abe2f284} == EFI_CDBOOT_DBXSVN_GUID",
70397052
"description": "Windows cdboot SVN CVE-2023-24932",
70407053
"dateOfLastChange": "2024-04-01"
70417054
},
7042-
{
7055+
{
70437056
"value": "01C2CA99C9FE7F6F4981279E2A8A535976000003000000000000000000000000",
70447057
"version": "3.0",
70457058
"filename": "wdsmgfw.efi",
@@ -7048,4 +7061,4 @@
70487061
"dateOfLastChange": "2024-04-01"
70497062
}
70507063
]
7051-
}
7064+
}

0 commit comments

Comments
 (0)