[ol7_u8_base] shim-aa64-15-2.0.4.el7.aarch64

Initial UEFI bootloader that handles chaining to a trusted full bootloader
under secure boot environments. This package contains the version signed by
the UEFI signing service.

Changelog (Show File list) (Show related packages)

• Thu Dec 19 2019 Natalya Naumova <natalya.naumova@oracle.com> - 15-2.0.4

  - updated with shimaa64.efi
  - updated unsigned_release

• Wed Jul 17 2019 Livy Ge <livy.ge@oracle.com> - 15-2.0.2

  - Update shimaa64.efi to include fix for "Section 0 has negative size" error [Orabug 27972230]

• Mon Jul 08 2019 Livy Ge <livy.ge@oracle.com> - 15-2.0.1

  - updated BOOT*.CSV files to contain Oracle Linux
    [Orabug: 28073193]
  - Pack files in efidir with disabled rpm verification
    [bug 27166040]
  - updated with shimia32.efi and shimx64.efi signed by Microsoft
  - Use redhat as efidir to maintain compatibility with RedHat

• Thu Mar 21 2019 Peter Jones <pjones@redhat.com> - 15-2

  - Fix MoK mirroring issue which breaks kdump without intervention
    Related: rhbz#1649270

• Fri Jul 20 2018 Peter Jones <pjones@redhat.com> - 15-1

  - Update to shim version 15
    Resolves: rhbz#1589962

• Wed Jul 11 2018 Peter Jones <pjones@redhat.com> - 12-3

  - Fix broken file owner/modes
    Resolves: rhbz#1595677

• Sat Jun 23 2018 Peter Jones <pjones@redhat.com> - 12-2

  - Fix /boot/efi/... permissions to match the filesystem's requirements
    Related: rhbz#1512749
  - Minor .spec cleanups
    Related: rhbz#1512749

• Mon May 01 2017 Peter Jones <pjones@redhat.com> - 12-1

  - Update to 12-1 to work around a signtool.exe bug
    Resolves: rhbz#1445393

• Mon Apr 24 2017 Peter Jones <pjones@redhat.com> - 11-4

  - Another shot at better obsoletes.
    Related: rhbz#1310764

• Mon Apr 24 2017 Peter Jones <pjones@redhat.com> - 11-3

  - Fix Obsoletes
    Related: rhbz#1310764

• Thu Apr 13 2017 Peter Jones <pjones@redhat.com> - 11-2

  - Make sure Aarch64 still has shim.efi as well
    Related: rhbz#1310766

• Wed Apr 12 2017 Peter Jones <pjones@redhat.com> - 11-1

  - Rebuild with signed shim
    Related: rhbz#1310766

• Mon Apr 03 2017 Peter Jones <pjones@redhat.com> - 11-0.1

  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766

• Mon Mar 27 2017 Peter Jones <pjones@redhat.com> - 10-0.1

  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k

• Mon Jul 20 2015 Peter Jones <pjones@redhat.com> - 0.9-2

  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048

• Mon Jun 29 2015 Peter Jones <pjones@redhat.com> - 0.9-0.1

  - Bump version for 0.9
    Also use mokutil-0.3.0
    Related: rhbz#1100048

• Tue Jun 23 2015 Peter Jones <pjones@redhat.com> - 0.7-14.1

  - Fix mokutil_version usage.
    Related: rhbz#1100048

• Mon Jun 22 2015 Peter Jones <pjones@redhat.com> - 0.7-14

  - Pull in aarch64 build so they can compose that tree.
    (-14 to match -unsigned)
    Related: rhbz#1100048

• Wed Feb 25 2015 Peter Jones <pjones@redhat.com> - 0.7-12

  - Fix some minor build bugs on Aarch64
    Related: rhbz#1190191

• Tue Feb 24 2015 Peter Jones <pjones@redhat.com> - 0.7-11

  - Fix section loading on Aarch64
    Related: rhbz#1190191

• Wed Dec 17 2014 Peter Jones <pjones@redhat.com> - 0.7-10

  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    (I managed to fix the inputs but not the outputs in -9.)
    Related: rhbz#1100048

• Wed Dec 17 2014 Peter Jones <pjones@redhat.com> - 0.7-9

  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    Related: rhbz#1100048

• Tue Oct 21 2014 Peter Jones <pjones@redhat.com> - 0.7-8

  - Build for aarch64 as well 
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677

• Tue Sep 23 2014 Peter Jones <pjones@redhat.com> - 0.7-7

  - Make sure we use the right keys on Aarch64.
    (It's only a demo at this stage.)
    Related: rhbz#1100048

• Tue Sep 23 2014 Peter Jones <pjones@redhat.com> - 0.7-6

  - Add ARM Aarch64.
    Related: rhbz#1100048

• Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.2

  - Get the right signatures on shim-redhat.efi
    Related: rhbz#1064449

• Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.1

  - Update for signed shim for RHEL 7
    Resolves: rhbz#1064449

• Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-5

  - Fix shim-unsigned deps.
    Related: rhbz#1032583

• Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-4

  - Make dhcp4 work better.
    Related: rhbz#1032583

• Thu Nov 14 2013 Peter Jones <pjones@redhat.com> - 0.7-3

  - Make lockdown include UEFI and other KEK/DB entries.
    Related: rhbz#1030492

• Fri Nov 08 2013 Peter Jones <pjones@redhat.com> - 0.7-2

  - Handle SetupMode better in lockdown as well
    Related: rhbz#996863

• Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.7-1

  - Don't treat SetupMode variable's presence as meaning we're in SetupMode.
    Related: rhbz#996863

• Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.6-3

  - Use the correct CA and signer certificates.
    Related: rhbz#996863

• Thu Oct 31 2013 Peter Jones <pjones@redhat.com> - 0.6-1

  - Update to 0.6-1
    Resolves: rhbz#1008379

• Wed Aug 07 2013 Peter Jones <pjones@redhat.com> - 0.4-3.2

  - Depend on newer pesign.
    Related: rhbz#989442

• Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.4-3.1

  - Rebuild with newer pesign
    Related: rhbz#989442

• Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.4-3

  - Update for RHEL signing with early test keys.
    Related: rhbz#989442

• Thu Jun 20 2013 Peter Jones <pjones@redhat.com> - 0.4-1

  - Provide a fallback for uninitialized Boot#### and BootOrder
    Resolves: rhbz#963359
  - Move all signing from shim-unsigned to here
  - properly compare our generated hash from shim-unsigned with the hash of
    the signed binary (as opposed to doing it manually)

• Fri May 31 2013 Peter Jones <pjones@redhat.com> - 0.2-4.4

  - Re-sign to get alignments that match the new specification.
    Resolves: rhbz#963361

• Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2-4.3

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

• Wed Jan 02 2013 Peter Jones <pjones@redhat.com> - 0.2-3.3

  - Add obsoletes and provides for earlier shim-signed packages, to cover
    the package update cases where previous versions were installed.
    Related: rhbz#888026

• Mon Dec 17 2012 Peter Jones <pjones@redhat.com> - 0.2-3.2

  - Make the shim-unsigned dep be on the subpackage.

• Sun Dec 16 2012 Peter Jones <pjones@redhat.com> - 0.2-3.1

  - Rebuild to provide "shim" package directly instead of just as a Provides:

• Sat Dec 15 2012 Peter Jones <pjones@redhat.com> - 0.2-3

  - Also provide shim-fedora.efi, signed only by the fedora signer.
  - Fix the fedora signature on the result to actually be correct.
  - Update for shim-unsigned 0.2-3

• Mon Dec 03 2012 Peter Jones <pjones@redhat.com> - 0.2-2

  - Initial build