efi-boot-shim.git, branch 15.6

bump version to shim-15.6

2022-06-01T18:25:48+00:00

Signed-off-by: Peter Jones

sbat: add the parsed SBAT variable entries to the debug log

2022-06-01T15:01:24+00:00

Signed-off-by: Peter Jones

shim-15.6~rc2

2022-05-31T19:17:14+00:00

Signed-off-by: Peter Jones

Also avoid CVE-2022-28737 in verify_image()

2022-05-24T20:28:35+00:00

PR 446 ("Add verify_image") duplicates some of the code affected by Chris Coulson's defense in depth patch against CVE-2022-28737 ("pe: Perform image verification earlier when loading grub"). This patch makes the same change to the new function. Signed-off-by: Peter Jones

Update SBAT generation requirements for 05/24/22

2022-05-24T20:28:35+00:00

bump shim SBAT generation requirement to 2 for CVE-2022-28737 bump GRUB2 SBAT generation requirement to 2 for CVE-2021-3695 Signed-off-by: Jan Setje-Eilers

Update advertised sbat generation number for shim

2022-05-24T20:28:35+00:00

Signed-off-by: Jan Setje-Eilers

pe: Perform image verification earlier when loading grub

2022-05-24T20:28:35+00:00

The second stage loader was being verified after loading it into memory. As an additional hardening measure to avoid performing risky memcpys using header fields from a potentially specially crafted image, perform the verification before this so that it can be rejected earlier. Signed-off-by: Chris Coulson

pe: Fix a buffer overflow when SizeOfRawData > VirtualSize

2022-05-24T20:28:35+00:00

During image loading, the size of the destination buffer for the image is determined by the SizeOfImage field in the optional header. The start and end virtual addresses of each section, as determined by each section's VirtualAddress and VirtualSize fields, are bounds checked against the allocated buffer. However, the amount of data copied to the destination buffer is determined by the section's SizeOfRawData filed. If this is larger than the VirtualSize, then the copy can overflow the destination buffer. Fix this by limiting the amount of data to copy to the section's VirtualSize. In the case where a section has SizeOfRawData > VirtualSize, the excess data is discarded. This fixes CVE-2022-28737 Signed-off-by: Chris Coulson

SBAT Policy latest should be a one-shot

2022-05-24T20:27:48+00:00

Since booting from removable media can be hard to detect, setting a persistent latest SBAT policy is risky in a typical client system. This changes latest to be a one-shot operation that could be set at the time of an OS update if desired. Signed-off-by: Jan Setje-Eilers

shim-15.6~rc1

2022-05-24T20:09:39+00:00