[ol7_u4_base] shim-unsigned-x64-12-1.0.1.el7.x86_64

Initial UEFI bootloader that handles chaining to a trusted full bootloader
under secure boot environments.

Changelog (Show File list) (Show related packages)

• Fri May 26 2017 John McWalters <john.mcwalters@oracle.com> - 12-1.0.1

  - replace securebootca.cer with Oracle Corporate certificate (Alexey Petrenko)

• Thu Apr 27 2017 Peter Jones <pjones@redhat.com> - 12-1

  - Update to 12-1 to work around a signtool.exe bug
    Related: rhbz#1445393

• Mon Apr 03 2017 Peter Jones <pjones@redhat.com> - 11-1

  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766

• Tue Mar 21 2017 Peter Jones <pjones@redhat.com> - 10-1

  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k

• Mon Jun 22 2015 Peter Jones <pjones@redhat.com> - 0.9-1

  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191

• Mon Jun 22 2015 Peter Jones <pjones@redhat.com> - 0.7-14

  - Excise mokutil.
    Related: rhbz#1100048

• Mon Jun 22 2015 Peter Jones <pjones@redhat.com> - 0.7-13

  - Do a build for Aarch64 to make the tree composable.
    Related: rhbz#1100048

• Wed Feb 25 2015 Peter Jones <pjones@redhat.com> - 0.7-10

  - Fix a couple more minor bugs aavmf has found in fallback.
    Related: rhbz#1190191
  - Build lib/ with the right CFLAGS
    Related: rhbz#1190191

• Tue Feb 24 2015 Peter Jones <pjones@redhat.com> - 0.7-9

  - Fix aarch64 section loading.
    Related: rhbz#1190191

• Tue Sep 30 2014 Peter Jones <pjones@redhat.com> - 0.7-8

  - Build -8 for arm as well.
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677

• Tue Sep 23 2014 Peter Jones <pjones@redhat.com> - 0.7-7

  - Use the right key for ARM Aarch64.

• Sun Sep 21 2014 Peter Jones <pjones@redhat.com> - 0.7-6

  - Preliminary build for ARM Aarch64.

• Tue Feb 18 2014 Peter Jones <pjones@redhat.com> - 0.7-5

  - Update for production signing
    Resolves: rhbz#1064424
    Related: rhbz#1064449

• Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-4

  - Make dhcpv4 paths work better when netbooting.
    Resolves: rhbz#1032583

• Thu Nov 14 2013 Peter Jones <pjones@redhat.com> - 0.7-3

  - Make lockdown include UEFI and other KEK/DB entries.
    Resolves: rhbz#1030492

• Fri Nov 08 2013 Peter Jones <pjones@redhat.com> - 0.7-2

  - Update lockdown to reflect SetupMode better as well
    Related: rhbz#996863

• Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.7-1

  - Fix logic to handle SetupMode efi variable.
    Related: rhbz#996863

• Thu Oct 31 2013 Peter Jones <pjones@redhat.com> - 0.6-1

  - Fix a FreePool(NULL) call on machines too old for SB

• Fri Oct 04 2013 Peter Jones <pjones@redhat.com> - 0.5-1

  - Update to 0.5

• Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.4-3

  - Build with early RHEL test keys.
    Related: rhbz#989442

• Thu Jul 25 2013 Peter Jones <pjones@redhat.com> - 0.4-2

  - Fix minor RHEL 7.0 build issues
    Resolves: rhbz#978766
  - Be less verbose by default

• Tue Jun 11 2013 Peter Jones <pjones@redhat.com> - 0.4-1

  - Update to 0.4

• Fri Jun 07 2013 Peter Jones <pjones@redhat.com> - 0.3-2

  - Require gnu-efi-3.0q for now.
  - Don't allow mmx or sse during compilation.
  - Re-organize this so all real signing happens in shim-signed instead.
  - Split out mokutil

• Wed Dec 12 2012 Peter Jones <pjones@redhat.com> - 0.2-3

  - Fix mokutil's idea of signature sizes.

• Wed Nov 28 2012 Matthew Garrett <mjg59@srcf.ucam.org> - 0.2-2

  - Fix secure_mode() always returning true

• Mon Nov 26 2012 Matthew Garrett <mjg59@srcf.ucam.org> - 0.2-1

  - Update shim
  - Include mokutil
  - Add debuginfo package since mokutil is a userspace executable

• Mon Oct 22 2012 Peter Jones <pjones@redhat.com> - 0.1-4

  - Produce an unsigned shim

• Tue Aug 14 2012 Peter Jones <pjones@redhat.com> - 0.1-3

  - Update how embedded cert and signing work.

• Mon Aug 13 2012 Josh Boyer <jwboyer@redhat.com> - 0.1-2

  - Add patch to fix image size calculation

• Mon Aug 13 2012 Matthew Garrett <mjg@redhat.com> - 0.1-1

  - initial release