efi-boot-shim.git/debian/changelog, branch master (mirror of https://github.com/vyos/efi-boot-shim.git) https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=master 2025-03-05T23:07:14+00:00 Remove Steve Langasek from Uploaders. RIP my good friend. 2025-03-05T23:07:14+00:00 Steve McIntyre steve@einval.com 2025-03-05T23:07:14+00:00 urn:sha1:90323463f42ddc0c37b816d436e807d4d749846c Also make the rules-requires-root changes in the templates 2025-01-08T23:17:19+00:00 Steve McIntyre steve@einval.com 2025-01-08T23:17:19+00:00 urn:sha1:638db1de7fa7ea696d9a01b14ff9a636fa34b4db for our generated packages. Closes: #1092425 Update changelog 2025-01-04T17:57:54+00:00 Steve McIntyre steve@einval.com 2025-01-04T17:57:54+00:00 urn:sha1:fa4728b6daf0674409b1e0d34a98fcbfb99db5f4 Release 15.8-1 2024-05-04T22:30:00+00:00 Steve McIntyre steve@einval.com 2024-05-04T22:30:00+00:00 urn:sha1:1c1d50da810e6c49e804a74719c2675b88b033a6 Clean up better after build. Closes: #1046268 2024-05-04T13:56:00+00:00 Steve McIntyre steve@einval.com 2024-05-04T13:54:25+00:00 urn:sha1:771bba347c46d2d469904dbd0292234168fdced4 Install a copy of the Debian CA certificate into /usr/share/shim. 2024-05-04T13:39:26+00:00 Steve McIntyre steve@einval.com 2024-05-04T13:36:15+00:00 urn:sha1:38e5a617e4131702b098fe2d2d0aa00e70072760 Closes: #1069054 Tag bugfixes 2024-05-04T13:30:40+00:00 Steve McIntyre steve@einval.com 2024-05-04T13:28:22+00:00 urn:sha1:11622ef49a4005d7d3bf2ce7fe395c0c1d820660 Force usage of newest revocations at build time 2024-05-03T13:46:24+00:00 Steve McIntyre steve@einval.com 2024-05-03T13:46:24+00:00 urn:sha1:fe02ccbe5315f099ba9d951c79f63c5e3683a707 Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" This should work with the current released grub builds in all of buster, bullseye, bookwork and trixie/unstable. Let's not leave known security holes in the wild. Cherry-pick latest grub revocation patches from upstream shim 2024-05-03T13:39:32+00:00 Steve McIntyre steve@einval.com 2024-04-25T23:58:46+00:00 urn:sha1:852a82665b61635649b281a6006c8ceb14b9fa97 0001-sbat-Add-grub.peimage-2-to-latest-CVE-2024-2312.patch 0002-sbat-Also-bump-latest-for-grub-4-and-to-todays-date.patch Log if the build is nx-compatible or not 2024-05-03T13:39:32+00:00 Steve McIntyre steve@einval.com 2024-04-25T21:42:28+00:00 urn:sha1:2eeb58196c0b544d43ce101904a1914e79b41abd Add a new simple script to do this: check_nx