[ol7_u9_base] shim-aa64-15-2.0.6.el7.aarch64

Name:	shim-aa64
Version:	15
Release:	2.0.6.el7
Architecture:	aarch64
Group:	Unspecified
Size:	4503664
License:	BSD
RPM:	shim-aa64-15-2.0.6.el7.aarch64.rpm
Source RPM:	shim-signed-15-2.0.6.el7.src.rpm
Build Date:	Tue Jul 28 2020
Build Host:	ca-buildarm01.us.oracle.com
Vendor:	Oracle America
URL:	https://github.com/rhboot/shim/
Summary:	First-stage UEFI bootloader
Description:	Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments. This package contains the version signed by the UEFI signing service.

Changelog (Show File list) (Show related packages)

Mon Jul 20 2020 Ilya Okomin <ilya.okomin@oracle.com> - 15-2.0.6

- removed shim{efiarchlc}-redhat.efi [Orabug: 31663209]
- updated with shimia32.efi and shimx64.efi signed by Microsoft [Orabug: 31663209]
- added oracle(grub2-sig-key) and oracle(kernel-sig-key) to package Requires [Orabug: 31663209]
- added shim-{efiarchlc} to yum protected [Orabug: 31663209]

Thu Dec 19 2019 Natalya Naumova <natalya.naumova@oracle.com> - 15-2.0.4
```
- updated with shimaa64.efi
- updated unsigned_release
```

Wed Jul 17 2019 Livy Ge <livy.ge@oracle.com> - 15-2.0.2

- Update shimaa64.efi to include fix for "Section 0 has negative size" error [Orabug 27972230]

Mon Jul 08 2019 Livy Ge <livy.ge@oracle.com> - 15-2.0.1

- updated BOOT*.CSV files to contain Oracle Linux
  [Orabug: 28073193]
- Pack files in efidir with disabled rpm verification
  [bug 27166040]
- updated with shimia32.efi and shimx64.efi signed by Microsoft
- Use redhat as efidir to maintain compatibility with RedHat

Thu Mar 21 2019 Peter Jones <pjones@redhat.com> - 15-2

- Fix MoK mirroring issue which breaks kdump without intervention
  Related: rhbz#1649270

Fri Jul 20 2018 Peter Jones <pjones@redhat.com> - 15-1
```
- Update to shim version 15
  Resolves: rhbz#1589962
```

Wed Jul 11 2018 Peter Jones <pjones@redhat.com> - 12-3

- Fix broken file owner/modes
  Resolves: rhbz#1595677

Sat Jun 23 2018 Peter Jones <pjones@redhat.com> - 12-2

- Fix /boot/efi/... permissions to match the filesystem's requirements
  Related: rhbz#1512749
- Minor .spec cleanups
  Related: rhbz#1512749

Mon May 01 2017 Peter Jones <pjones@redhat.com> - 12-1

- Update to 12-1 to work around a signtool.exe bug
  Resolves: rhbz#1445393

Mon Apr 24 2017 Peter Jones <pjones@redhat.com> - 11-4

- Another shot at better obsoletes.
  Related: rhbz#1310764

Mon Apr 24 2017 Peter Jones <pjones@redhat.com> - 11-3
```
- Fix Obsoletes
  Related: rhbz#1310764
```

Thu Apr 13 2017 Peter Jones <pjones@redhat.com> - 11-2

- Make sure Aarch64 still has shim.efi as well
  Related: rhbz#1310766

Wed Apr 12 2017 Peter Jones <pjones@redhat.com> - 11-1
```
- Rebuild with signed shim
  Related: rhbz#1310766
```

Mon Apr 03 2017 Peter Jones <pjones@redhat.com> - 11-0.1

- Update to 11-0.1 to match shim-11-1
  Related: rhbz#1310766
- Fix regression in PE loader
  Related: rhbz#1310766
- Fix case where BDS invokes us wrong and we exec shim again as a result
  Related: rhbz#1310766

Mon Mar 27 2017 Peter Jones <pjones@redhat.com> - 10-0.1

- Support ia32
  Resolves: rhbz#1310766
- Handle various different load option implementation differences
- TPM 1 and TPM 2 support.
- Update to OpenSSL 1.0.2k

Mon Jul 20 2015 Peter Jones <pjones@redhat.com> - 0.9-2

- Apparently I'm *never* going to learn to build this in the right target
  the first time through.
  Related: rhbz#1100048

Mon Jun 29 2015 Peter Jones <pjones@redhat.com> - 0.9-0.1

- Bump version for 0.9
  Also use mokutil-0.3.0
  Related: rhbz#1100048

Tue Jun 23 2015 Peter Jones <pjones@redhat.com> - 0.7-14.1
```
- Fix mokutil_version usage.
  Related: rhbz#1100048
```

Mon Jun 22 2015 Peter Jones <pjones@redhat.com> - 0.7-14

- Pull in aarch64 build so they can compose that tree.
  (-14 to match -unsigned)
  Related: rhbz#1100048

Wed Feb 25 2015 Peter Jones <pjones@redhat.com> - 0.7-12

- Fix some minor build bugs on Aarch64
  Related: rhbz#1190191

Tue Feb 24 2015 Peter Jones <pjones@redhat.com> - 0.7-11

- Fix section loading on Aarch64
  Related: rhbz#1190191

Wed Dec 17 2014 Peter Jones <pjones@redhat.com> - 0.7-10

- Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
  (I managed to fix the inputs but not the outputs in -9.)
  Related: rhbz#1100048

Wed Dec 17 2014 Peter Jones <pjones@redhat.com> - 0.7-9

- Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
  Related: rhbz#1100048

Tue Oct 21 2014 Peter Jones <pjones@redhat.com> - 0.7-8

- Build for aarch64 as well 
  Related: rhbz#1100048
- out-of-bounds memory read flaw in DHCPv6 packet processing
  Resolves: CVE-2014-3675
- heap-based buffer overflow flaw in IPv6 address parsing
  Resolves: CVE-2014-3676
- memory corruption flaw when processing Machine Owner Keys (MOKs)
  Resolves: CVE-2014-3677

Tue Sep 23 2014 Peter Jones <pjones@redhat.com> - 0.7-7

- Make sure we use the right keys on Aarch64.
  (It's only a demo at this stage.)
  Related: rhbz#1100048

Tue Sep 23 2014 Peter Jones <pjones@redhat.com> - 0.7-6
```
- Add ARM Aarch64.
  Related: rhbz#1100048
```

Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.2

- Get the right signatures on shim-redhat.efi
  Related: rhbz#1064449

Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.1

- Update for signed shim for RHEL 7
  Resolves: rhbz#1064449

Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-5
```
- Fix shim-unsigned deps.
  Related: rhbz#1032583
```
Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-4
```
- Make dhcp4 work better.
  Related: rhbz#1032583
```

Thu Nov 14 2013 Peter Jones <pjones@redhat.com> - 0.7-3

- Make lockdown include UEFI and other KEK/DB entries.
  Related: rhbz#1030492

Fri Nov 08 2013 Peter Jones <pjones@redhat.com> - 0.7-2

- Handle SetupMode better in lockdown as well
  Related: rhbz#996863

Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.7-1

- Don't treat SetupMode variable's presence as meaning we're in SetupMode.
  Related: rhbz#996863

Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.6-3

- Use the correct CA and signer certificates.
  Related: rhbz#996863

Thu Oct 31 2013 Peter Jones <pjones@redhat.com> - 0.6-1
```
- Update to 0.6-1
  Resolves: rhbz#1008379
```
Wed Aug 07 2013 Peter Jones <pjones@redhat.com> - 0.4-3.2
```
- Depend on newer pesign.
  Related: rhbz#989442
```
Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.4-3.1
```
- Rebuild with newer pesign
  Related: rhbz#989442
```

Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.4-3

- Update for RHEL signing with early test keys.
  Related: rhbz#989442

Thu Jun 20 2013 Peter Jones <pjones@redhat.com> - 0.4-1

- Provide a fallback for uninitialized Boot#### and BootOrder
  Resolves: rhbz#963359
- Move all signing from shim-unsigned to here
- properly compare our generated hash from shim-unsigned with the hash of
  the signed binary (as opposed to doing it manually)

Fri May 31 2013 Peter Jones <pjones@redhat.com> - 0.2-4.4

- Re-sign to get alignments that match the new specification.
  Resolves: rhbz#963361

Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2-4.3
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
```

Wed Jan 02 2013 Peter Jones <pjones@redhat.com> - 0.2-3.3

- Add obsoletes and provides for earlier shim-signed packages, to cover
  the package update cases where previous versions were installed.
  Related: rhbz#888026

Mon Dec 17 2012 Peter Jones <pjones@redhat.com> - 0.2-3.2
```
- Make the shim-unsigned dep be on the subpackage.
```

Sun Dec 16 2012 Peter Jones <pjones@redhat.com> - 0.2-3.1

- Rebuild to provide "shim" package directly instead of just as a Provides:

Sat Dec 15 2012 Peter Jones <pjones@redhat.com> - 0.2-3

- Also provide shim-fedora.efi, signed only by the fedora signer.
- Fix the fedora signature on the result to actually be correct.
- Update for shim-unsigned 0.2-3

Mon Dec 03 2012 Peter Jones <pjones@redhat.com> - 0.2-2
```
- Initial build
```