Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP3:Update
shim.33581
shim.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File shim.changes of Package shim.33581
------------------------------------------------------------------- Thu Apr 25 03:14:01 UTC 2024 - Dennis Tseng <dennis.tseng@suse.com> - Update shim to 15.8-150300.4.20.2 from SLE15-SP3 + Version: 15.8, "Thu Apr 18 2024" + Update the SLE signatures + Include the fixes for (bsc#1215099,CVE-2023-40546), (bsc#1215098,CVE-2023-40547), (bsc#1215103,CVE-2023-40551), (bsc#1215102,CVE-2023-40550), (bsc#1215101,CVE-2023-40549), (bsc#1215100,CVE-2023-40548), bsc#1205588, bsc#1202120, bsc#1201066, (bsc#1198458, CVE-2022-28737), bsc#1198101, bsc#1193315, bsc#1193282 ------------------------------------------------------------------- Tue Apr 25 07:07:57 UTC 2023 - (null) Tseng <dennis.tseng@suse.com> - add CVE number against bsc# + (bsc#1198458, CVE-2022-28737) ------------------------------------------------------------------- Mon Mar 27 02:10:14 UTC 2023 - (null) Tseng <dennis.tseng@suse.com> - Update shim to 15.7-150300.4.11.1 from SLE15-SP3 + Version: 15.7, "Thu Mar 17 2023" + Update the SLE signatures + Include the fixes for bsc#1205588, bsc#1202120, bsc#1201066, bsc#1198458, bsc#1198101, bsc#1193315, bsc#1193282 ------------------------------------------------------------------- Thu Jul 22 12:24:53 UTC 2021 - jlee@suse.com - Update shim to 15.4-4.7.1 from SLE15-SP3 + Version: 15.4, "Thu Jul 15 2021" + Update the SLE signatures + Include the fixes for bsc#1187696, bsc#1185261, bsc#1185441, bsc#1187071, bsc#1185621, bsc#1185261, bsc#1185232, bsc#1185261, bsc#1187260, bsc#1185232. ------------------------------------------------------------------- Thu May 20 01:57:13 UTC 2021 - Gary Ching-Pang Lin <glin@suse.com> - shim-install: instead of assuming "removable" for Azure, remove fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot to make \EFI\Boot bootable and keep the boot option created by efibootmgr (bsc#1185464, bsc#1185961) ------------------------------------------------------------------- Mon May 10 09:23:47 UTC 2021 - Gary Ching-Pang Lin <glin@suse.com> - shim-install: always assume "removable" for Azure to avoid the endless reset loop (bsc#1185464) ------------------------------------------------------------------- Tue May 4 06:36:52 UTC 2021 - Gary Ching-Pang Lin <glin@suse.com> - Update to the unified shim binary from SLE15-SP3 for SBAT support (bsc#1182057) + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021" ------------------------------------------------------------------- Mon Aug 31 08:55:19 UTC 2020 - Gary Ching-Pang Lin <glin@suse.com> - Update to the unified shim binary from SLE15-SP1 + Version: 15+git47-3.8.1, "Mon Aug 24 09:12:18 UTC 2020" + shim-install: install MokManager to \EFI\boot to process the pending MOK request (bsc#1175626, bsc#1175656) ------------------------------------------------------------------- Mon Aug 10 04:33:32 UTC 2020 - Gary Ching-Pang Lin <glin@suse.com> - Update to the unified shim binary from SLE15-SP1 (bsc#1168994) + Version: 15+git47, "Thu Aug 6 09:43:19 UTC 2020" ------------------------------------------------------------------- Fri Aug 16 04:26:44 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com> - Update shim-install to specify the target for grub2-install and change the boot efi file name according to the architecture (bsc#1118363, FATE#325971, bsc#1145676) ------------------------------------------------------------------- Wed Oct 24 01:47:47 UTC 2018 - glin@suse.com - Update to the unified shim binary from SLE-15 + Per fate#318904 + Version: 14, "Thu May 10 09:20:39 UTC 2018" + Including the fixes - Use the correct signature length to avoid the potential security issue (bsc#991885) - Detect the DNS node correctly in the device path to fix the possible failure during HTTPBoot (bsc#1065370) - Fix the PXE loading path (bsc#1086589) - Fix the potential freeze in MokManager (bsc#1088585) - Avoid the infinite reset loop due to the faulty firmware (bsc#1092000) + Drop the source tarball and the following patches since we switch to the SLE15 binary package - shim-only-os-name.patch - shim-fix-mokmanager-sections.patch - shim-httpboot-support.patch - shim-update-openssl-1.0.2g.patch - shim-bsc973496-mokmanager-no-append-write.patch ------------------------------------------------------------------- Wed Mar 22 10:54:41 UTC 2017 - mchang@suse.com - shim-install: * add option --suse-enable-tpm (fate#315831) * add option --no-nvram (bsc#999818) * improve removable media and fallback mode handling ------------------------------------------------------------------- Fri Aug 19 05:41:17 UTC 2016 - mchang@suse.com - shim-install : fix regression of password prompt (bsc#993764) ------------------------------------------------------------------- Wed Aug 3 09:11:48 UTC 2016 - glin@suse.com - Add shim-bsc973496-mokmanager-no-append-write.patch to work around the firmware that doesn't support APPEND_WRITE (bsc#973496) - shim-install : remove '\n' from the help message (bsc#991188) - shim-install : print a message if there is no valid EFI partition (bsc#991187) ------------------------------------------------------------------- Fri May 6 15:09:03 UTC 2016 - rw@suse.com - shim-install : support simple MD RAID1 target devices (FATE#314829) ------------------------------------------------------------------- Tue Apr 26 09:24:09 UTC 2016 - glin@suse.com - Update signature-sles.asc:shim signed by UEFI signing service ------------------------------------------------------------------- Thu Mar 17 08:26:11 UTC 2016 - glin@suse.com - Add shim-httpboot-support.patch to support HTTPBoot (FATE#320129) - Add shim-update-openssl-1.0.2g.patch to update openssl to 1.0.2g - Requires gnu-efi 3.0.3 to support the URI device path - shim-install : fix typing ESC can escape to parent config which is in command mode and cannot return back (bsc#966701) - shim-install : fix no which command for JeOS (bsc#968264) - shim-install : fix cryptodisk installation (boo#917427) ------------------------------------------------------------------- Fri Jan 22 08:47:25 UTC 2016 - glin@suse.com - Fix the missing shim-devel.efi ------------------------------------------------------------------- Tue Sep 15 04:55:46 UTC 2015 - mchang@suse.com - shim-install : set default GRUB_DISTRIBUTOR from /etc/os-release if it is empty or not set by user (bsc#942519) ------------------------------------------------------------------- Fri Aug 14 10:32:23 UTC 2015 - glin@suse.com - Update signature-sles.asc:shim signed by UEFI signing service ------------------------------------------------------------------- Mon Jul 6 09:47:00 UTC 2015 - glin@suse.com - Update to 0.9 + Included the fixes for bsc#919675 and bsc#920515 - Add shim-fix-mokmanager-sections.patch to amend the objcopy parameters for the old objcopy - Drop upstreamed patches + shim-fix-verify-mok.patch + shim-improve-error-messages.patch + shim-correct-user_insecure-usage.patch + shim-fix-dhcpv4-path-generation.patch + shim-mokx-support.patch + shim-mokmanager-handle-keystroke-error.patch + shim-get-variable-check.patch + shim-fallback-improve-entries-creation.patch + shim-bnc863205-mokmanager-fix-hash-delete.patch + shim-fallback-avoid-duplicate-bootorder.patch + shim-allow-fallback-use-system-loadimage.patch + shim-mokmanager-delete-bs-var-right.patch + shim-fix-uninitialized-variable.patch + shim-mokmanager-support-sha-family.patch + shim-remove-unused-variables.patch + shim-bnc872503-check-key-encoding.patch + shim-bnc877003-fetch-from-the-same-device.patch + bug-889332_shim-mok-oob.patch + bug-889332_shim-overflow.patch ------------------------------------------------------------------- Wed Oct 1 07:12:38 UTC 2014 - jsegitz@suse.com - Update signature-sles.asc: shim signed by UEFI signing service ------------------------------------------------------------------- Mon Sep 29 17:02:43 UTC 2014 - jsegitz@suse.com - Fixed buffer overflow and OOB access in shim trusted code path (bnc#889332, CVE-2014-3675, CVE-2014-3676, CVE-2014-3677) * added bug-889332_shim-mok-oob.patch, bug-889332_shim-overflow.patch ------------------------------------------------------------------- Mon Aug 4 07:53:22 UTC 2014 - mchang@suse.com - shim-install: fix GRUB shows broken letters at boot by calling grub2-install to initialize /boot/grub2 directory with files needed by grub.cfg (bnc#889765) ------------------------------------------------------------------- Tue Jun 10 07:36:01 UTC 2014 - glin@suse.com - Update signature-sles.asc: shim signed by UEFI signing service, based on code from "Wed May 28 04:13:33 UTC 2014" ------------------------------------------------------------------- Wed May 28 04:13:33 UTC 2014 - glin@suse.com - Add shim-remove-unused-variables.patch to remove the unused variables - Add shim-bnc872503-check-key-encoding.patch to check the encoding of the keys (bnc#872503) - Add shim-bnc877003-fetch-from-the-same-device.patch to fetch the netboot image from the same device (bnc#877003) ------------------------------------------------------------------- Wed May 14 09:39:02 UTC 2014 - glin@suse.com - Use --reinit instead of --refresh in %post to update the files in /boot ------------------------------------------------------------------- Thu May 8 08:38:48 UTC 2014 - glin@suse.com - Update signature-sles.asc: shim signed by UEFI signing service, based on code from "Thu Apr 10 08:26:15 UTC 2014". ------------------------------------------------------------------- Tue Apr 29 07:43:50 UTC 2014 - mchang@suse.com - shim-install: fix boot partition and rollback support kluge (bnc#875385) ------------------------------------------------------------------- Thu Apr 10 08:26:15 UTC 2014 - glin@suse.com - Add shim-allow-fallback-use-system-loadimage.patch to handle the shim protocol properly to keep only one protocol entity (bnc#868342) - Add shim-mokmanager-support-sha-family.patch to support SHA family ------------------------------------------------------------------- Mon Mar 31 11:57:13 UTC 2014 - mchang@suse.com - snapper rollback support (fate#317062) - refresh shim-install ------------------------------------------------------------------- Thu Mar 13 02:32:15 UTC 2014 - glin@suse.com - Insert the right signature (bnc#867974) ------------------------------------------------------------------- Wed Mar 12 08:46:18 UTC 2014 - glin@suse.com - Merge Michael's fix for shim-install: fix the $prefix to use grub2-mkrelpath for paths on btrfs subvolume (bnc#866690). ------------------------------------------------------------------- Mon Mar 10 07:56:44 UTC 2014 - glin@suse.com - Add shim-fix-uninitialized-variable.patch to fix the use of uninitialzed variables in lib ------------------------------------------------------------------- Fri Mar 7 09:09:12 UTC 2014 - glin@suse.com - Add shim-mokmanager-delete-bs-var-right.patch to delete the BS+NV variables the right way ------------------------------------------------------------------- Thu Mar 6 07:43:31 UTC 2014 - glin@suse.com - Add shim-fallback-avoid-duplicate-bootorder.patch to fix the duplicate entries in BootOrder ------------------------------------------------------------------- Tue Mar 4 04:19:05 UTC 2014 - glin@suse.com - FATE#315002: Update shim-install to install shim.efi as the EFI default bootloader when none exists in \EFI\boot. ------------------------------------------------------------------- Thu Feb 27 09:46:49 UTC 2014 - fcrozat@suse.com - Update signature-sles.asc: shim signed by UEFI signing service, based on code from "Fri Feb 21 02:36:49 UTC 2014". ------------------------------------------------------------------- Fri Feb 21 02:36:49 UTC 2014 - glin@suse.com - always clean up generated files that embed certificates (shim_cert.h shim.cer shim.crt) to make sure next build loop rebuilds them properly - allow package to carry multiple signatures - check correct certificate is embedded ------------------------------------------------------------------- Mon Feb 17 09:58:56 UTC 2014 - glin@suse.com - Add shim-bnc863205-mokmanager-fix-hash-delete.patch to fix the hash deletion operation to avoid ruining the whole list (bnc#863205) ------------------------------------------------------------------- Tue Feb 11 06:24:05 UTC 2014 - glin@suse.com - Update shim-mokx-support.patch to enable the resetting of MOK blacklist - Add shim-get-variable-check.patch to fix the variable checking in get_variable_attr - Add shim-improve-fallback-entries-creation.patch to improve the boot entry pathes and avoid generating the boot entries that are already there - Restore attach_signature.sh, show_hash.sh, and strip_signature.sh since those scripts could be useful to generate the EFI image for the UEFI signing service - Match the the prefix of the project name properly by escaping the percent sign. ------------------------------------------------------------------- Fri Jan 24 02:35:43 UTC 2014 - glin@suse.com - Update SUSE certificate - Drop attach_signature.sh and show_hash.sh since pesign now can proceed the commands without a nss database - Drop unused script strip_signature.sh - Update extract_signature.sh and show_signatures.sh to remove the creation of the temporary nss database - Add shim-only-os-name.patch: remove the kernel version of the build server - Enable signature assertion also in SUSE: hierarchy ------------------------------------------------------------------- Fri Dec 6 06:44:43 UTC 2013 - glin@suse.com - Add shim-mokmanager-handle-keystroke-error.patch to handle the error status from ReadKeyStroke to avoid unexpected keys ------------------------------------------------------------------- Thu Dec 5 02:05:13 UTC 2013 - glin@suse.com - Update to 0.7 - Add upstream patches: + shim-fix-verify-mok.patch + shim-improve-error-messages.patch + shim-correct-user_insecure-usage.patch + shim-fix-dhcpv4-path-generation.patch - Add shim-mokx-support.patch to support the MOK blacklist (Fate#316531) - Drop upstreamed patches + shim-fix-pointer-casting.patch + shim-merge-lf-loader-code.patch + shim-fix-simple-file-selector.patch + shim-mokmanager-support-crypt-hash-method.patch + shim-bnc804631-fix-broken-bootpath.patch + shim-bnc798043-no-doulbe-separators.patch + shim-bnc807760-change-pxe-2nd-loader-name.patch + shim-bnc808106-correct-certcount.patch + shim-mokmanager-ui-revamp.patch + shim-netboot-fixes.patch + shim-mokmanager-disable-gfx-console.patch - Drop shim-suse-build.patch: it's not necessary anymore - Drop shim-bnc841426-silence-shim-protocols.patch: shim is not verbose by default ------------------------------------------------------------------- Thu Oct 31 09:11:18 UTC 2013 - fcrozat@suse.com - Update microsoft.asc: shim signed by UEFI signing service, based on code from "Tue Oct 1 04:29:29 UTC 2013". ------------------------------------------------------------------- Tue Oct 1 04:29:29 UTC 2013 - glin@suse.com - Add shim-netboot-fixes.patch to include upstream netboot fixes - Add shim-mokmanager-disable-gfx-console.patch to disable the graphics console to avoid system hang on some machines - Add shim-bnc841426-silence-shim-protocols.patch to silence the shim protocols (bnc#841426) ------------------------------------------------------------------- Wed Sep 25 07:17:54 UTC 2013 - glin@suse.com - Create boot.csv in ESP for fallback.efi to restore the boot entry ------------------------------------------------------------------- Tue Sep 17 10:53:50 CEST 2013 - fcrozat@suse.com - Update microsoft.asc: shim signed by UEFI signing service, based on code from "Fri Sep 6 13:57:36 UTC 2013". - Improve extract_signature.sh to work on current path. ------------------------------------------------------------------- Fri Sep 6 13:57:36 UTC 2013 - lnussel@suse.de - set timestamp of PE file to time of the binary the signature was made for. - make sure cert.o get's rebuilt for each target ------------------------------------------------------------------- Fri Sep 6 11:48:14 CEST 2013 - fcrozat@suse.com - Update microsoft.asc: shim signed by UEFI signing service, based on code from "Wed Aug 28 15:54:38 UTC 2013" ------------------------------------------------------------------- Wed Aug 28 15:54:38 UTC 2013 - lnussel@suse.de - always build a shim that embeds the distro's certificate (e.g. shim-opensuse.efi). If the package is built in the devel project additionally shim-devel.efi is created. That allows us to either load grub2/kernel signed by the distro or signed by the devel project, depending on use case. Also shim-$distro.efi from the devel project can be used to request additional signatures. ------------------------------------------------------------------- Wed Aug 28 07:16:51 UTC 2013 - lnussel@suse.de - also include old openSUSE 4096 bit certificate to be able to still boot kernels signed with that key. - add show_signatures script ------------------------------------------------------------------- Tue Aug 27 06:41:03 UTC 2013 - lnussel@suse.de - replace the 4096 bit openSUSE UEFI CA certificate with new a standard compliant 2048 bit one. ------------------------------------------------------------------- Tue Aug 20 11:48:25 UTC 2013 - lnussel@suse.de - fix shell syntax error ------------------------------------------------------------------- Wed Aug 7 15:51:36 UTC 2013 - lnussel@suse.de - don't include binary in the sources. Instead package the raw signature and attach it during build (bnc#813448). ------------------------------------------------------------------- Tue Jul 30 07:36:28 UTC 2013 - glin@suse.com - Update shim-mokmanager-ui-revamp.patch to include fixes for MokManager + reboot the system after clearing MOK password + fetch more info from X509 name + check the suffix of the key file ------------------------------------------------------------------- Tue Jul 23 03:55:05 UTC 2013 - glin@suse.com - Update to 0.4 - Rebase patches + shim-suse-build.patch + shim-mokmanager-support-crypt-hash-method.patch + shim-bnc804631-fix-broken-bootpath.patch + shim-bnc798043-no-doulbe-separators.patch + shim-bnc807760-change-pxe-2nd-loader-name.patch + shim-bnc808106-correct-certcount.patch + shim-mokmanager-ui-revamp.patch - Add patches + shim-merge-lf-loader-code.patch: merge the Linux Foundation loader UI code + shim-fix-pointer-casting.patch: fix a casting issue and the size of an empty vendor cert + shim-fix-simple-file-selector.patch: fix the buffer allocation in the simple file selector - Remove upstreamed patches + shim-support-mok-delete.patch + shim-reboot-after-changes.patch + shim-clear-queued-key.patch + shim-local-key-sign-mokmanager.patch + shim-get-2nd-stage-loader.patch + shim-fix-loadoptions.patch - Remove unused patch: shim-mokmanager-new-pw-hash.patch and shim-keep-unsigned-mokmanager.patch - Install the vendor certificate to /etc/uefi/certs ------------------------------------------------------------------- Wed May 8 06:40:12 UTC 2013 - glin@suse.com - Add shim-mokmanager-ui-revamp.patch to update the MokManager UI ------------------------------------------------------------------- Wed Apr 3 03:54:22 UTC 2013 - glin@suse.com - Call update-bootloader in %post to update *.efi in \efi\opensuse (bnc#813079) ------------------------------------------------------------------- Fri Mar 8 06:53:47 UTC 2013 - glin@suse.com - Add shim-bnc807760-change-pxe-2nd-loader-name.patch to change the PXE 2nd stage loader name (bnc#807760) - Add shim-bnc808106-correct-certcount.patch to correct the certificate count of the signature list (bnc#808106) ------------------------------------------------------------------- Fri Mar 1 10:07:55 UTC 2013 - glin@suse.com - Add shim-bnc798043-no-doulbe-separators.patch to remove double seperators from the bootpath (bnc#798043#c4) ------------------------------------------------------------------- Thu Feb 28 08:57:48 UTC 2013 - lnussel@suse.de - sign shim also with openSUSE certificate ------------------------------------------------------------------- Wed Feb 27 15:52:53 CET 2013 - mls@suse.de - identify project, export certificate as DER file - don't create an unused extra keypair ------------------------------------------------------------------- Thu Feb 21 10:08:12 UTC 2013 - glin@suse.com - Add shim-bnc804631-fix-broken-bootpath.patch to fix the broken bootpath generated in generate_path(). (bnc#804631) ------------------------------------------------------------------- Mon Feb 11 12:15:25 UTC 2013 - fcrozat@suse.com - Update with shim signed by UEFI signing service, based on code from "Thu Feb 7 06:56:19 UTC 2013". ------------------------------------------------------------------- Thu Feb 7 13:54:06 UTC 2013 - lnussel@suse.de - prepare for having a signed shim from the UEFI signing service ------------------------------------------------------------------- Thu Feb 7 06:56:19 UTC 2013 - glin@suse.com - Sign shim-opensuse.efi and MokManager.efi with the openSUSE cert - Add shim-keep-unsigned-mokmanager.patch to keep the unsigned MokManager and sign it later. ------------------------------------------------------------------- Wed Feb 6 06:35:45 UTC 2013 - mchang@suse.com - Add shim-install utility - Add Recommends to grub2-efi ------------------------------------------------------------------- Wed Jan 30 09:00:31 UTC 2013 - glin@suse.com - Add shim-mokmanager-support-crypt-hash-method.patch to support password hash from /etc/shadow (FATE#314506) ------------------------------------------------------------------- Tue Jan 29 03:20:48 UTC 2013 - glin@suse.com - Embed openSUSE-UEFI-CA-Certificate.crt in shim - Rename shim-unsigned.efi to shim-opensuse.efi. ------------------------------------------------------------------- Fri Jan 18 10:06:13 UTC 2013 - glin@suse.com - Update shim-mokmanager-new-pw-hash.patch to extend the password hash format - Rename shim.efi as shim-unsigned.efi ------------------------------------------------------------------- Wed Jan 16 08:01:55 UTC 2013 - glin@suse.com - Merge patches for FATE#314506 + Add shim-support-mok-delete.patch to add support for deleting specific keys + Add shim-mokmanager-new-pw-hash.patch to support the new password hash. - Drop shim-correct-mok-size.patch which is included in shim-support-mok-delete.patch - Merge shim-remove-debug-code.patch and shim-local-sign-mokmanager.patch into shim-local-key-sign-mokmanager.patch - Install COPYRIGHT ------------------------------------------------------------------- Tue Jan 15 03:17:53 UTC 2013 - glin@suse.com - Add shim-fix-loadoptions.patch to adopt the UEFI shell style LoadOptions (bnc#798043) - Drop shim-check-pk-kek.patch since upstream rejected the patch due to violation of SPEC. - Install EFI binaries to /usr/lib64/efi ------------------------------------------------------------------- Wed Dec 26 07:05:02 UTC 2012 - glin@suse.com - Update shim-reboot-after-changes.patch to avoid rebooting the system after enrolling keys/hashes from the file system - Add shim-correct-mok-size.patch to correct the size of MOK - Add shim-clear-queued-key.patch to clear the queued key and show the menu properly ------------------------------------------------------------------- Wed Dec 12 15:16:18 UTC 2012 - fcrozat@suse.com - Remove shim-rpmlintrc, it wasn't fixing the error, hide error stdout to prevent post build check to get triggered by cast warnings in openSSL code - Add shim-remove-debug-code.patch: remove debug code ------------------------------------------------------------------- Wed Dec 12 04:01:52 UTC 2012 - glin@suse.com - Add shim-rpmlintrc to filter 64bit portability errors ------------------------------------------------------------------- Tue Dec 11 07:36:32 UTC 2012 - glin@suse.com - Add shim-local-sign-mokmanager.patch to create a local certicate to sign MokManager - Add shim-get-2nd-stage-loader.patch to get the second stage loader path from the load options - Add shim-check-pk-kek.patch to verify EFI images with PK and KEK - Add shim-reboot-after-changes.patch to reboot the system after enrolling or erasing keys - Install the EFI images to /usr/lib64/shim instead of the EFI partition - Update the mail address of the author ------------------------------------------------------------------- Fri Nov 2 08:19:37 UTC 2012 - glin@suse.com - Add new package shim 0.2 (FATE#314484) + It's in fact git 2fd180a92 since there is no tag for 0.2
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
