| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-05-04 | *Actually* release 15.8-1~deb12u1 for bookwormdebian/15.8-1_deb12u1bookworm/updates | Steve McIntyre | |
| 2024-05-04 | Clean up better after build. Closes: #1046268 | Steve McIntyre | |
| 2024-05-04 | Remove artifacts imported by mistake | Steve McIntyre | |
| 2024-05-04 | Install a copy of the Debian CA certificate into /usr/share/shim. | Steve McIntyre | |
| Closes: #1069054 | |||
| 2024-05-04 | Release 15.8-1~deb12u1 for bookworm | Steve McIntyre | |
| 2024-05-03 | Update version for bookworm | Steve McIntyre | |
| 2024-05-03 | Force usage of newest revocations at build time | Steve McIntyre | |
| Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" This should work with the current released grub builds in all of buster, bullseye, bookwork and trixie/unstable. Let's not leave known security holes in the wild. | |||
| 2024-05-03 | Cherry-pick latest grub revocation patches from upstream shim | Steve McIntyre | |
| 0001-sbat-Add-grub.peimage-2-to-latest-CVE-2024-2312.patch 0002-sbat-Also-bump-latest-for-grub-4-and-to-todays-date.patch | |||
| 2024-05-03 | Log if the build is nx-compatible or not | Steve McIntyre | |
| Add a new simple script to do this: check_nx | |||
| 2024-05-03 | Switch to 15.8 upstream and drop patches | Steve McIntyre | |
| 2024-05-03 | New upstream version 15.8 | Steve McIntyre | |
| 2024-05-02 | Tweak the UUID handling to be clearer | Steve McIntyre | |
| 2024-05-02 | Add salsa-ci.yml | Bastien Roucariès | |
| 2024-04-29 | Merge branch 'fixes20240429' into 'master' | Steve McIntyre | |
| Apply multi-arch hints. + shim-unsigned: Add Multi-Arch: same. See merge request efi-team/shim!15 | |||
| 2024-04-29 | Add changelog entry | Bastien Roucariès | |
| 2024-04-29 | Add verification of upstream release | Bastien Roucariès | |
| 2024-04-29 | Fix d/watch | Bastien Roucariès | |
| 2024-04-29 | Closes: #936009 | Bastien Roucariès | |
| 2024-04-29 | Apply multi-arch hints. + shim-unsigned: Add Multi-Arch: same. | Debian Janitor | |
| Changes-By: apply-multiarch-hints | |||
| 2024-04-17 | Merge branch 'tests' into 'master' | Steve McIntyre | |
| Tests See merge request efi-team/shim!14 | |||
| 2024-04-16 | Add machine smm=on | Bastien Roucariès | |
| 2024-04-15 | Fix test failure | Bastien Roucariès | |
| 2024-04-15 | Fix depreciation warnings | Bastien Roucariès | |
| 2024-04-15 | Use popen for lsb_release | Bastien Roucariès | |
| 2024-04-15 | Fix depends | Bastien Roucariès | |
| 2024-04-15 | Update changelog | Bastien Roucariès | |
| 2024-04-15 | Port to debian | Bastien Roucariès | |
| 2024-04-15 | Add ubuntu test | Bastien Roucariès | |
| 2024-01-20 | generate_dbx_list: pick a fixed UUID | Steve McIntyre | |
| otherwise our build won't be reproducible, doh! | |||
| 2023-11-02 | Tweak building with pesign changes | Steve McIntyre | |
| We used to use efisiglist to generate the DBX list. Newer versions of the pesign package don't include it any more, and the recommended replacement tool is now efisecdb from efivar. Tweak the generate_dbx_list script to work with both old and new. Let's make backports easy... | |||
| 2023-01-31 | Release 15.7-1debian/15.7-1 | Steve McIntyre | |
| 2023-01-30 | Swith to using the upstream "enable NX" patch | Steve McIntyre | |
| 2023-01-29 | Block Debian grub binaries with sbat < 4 (see #1024617) | Steve McIntyre | |
| 2023-01-24 | Enable NX support at build time | Steve McIntyre | |
| As required by policy for signing new shim binaries. | |||
| 2023-01-22 | Update upstream commit hash in build | Steve McIntyre | |
| We're using 657b2483ca6e9fcf2ad8ac7ee577ff546d24c3aa, which is the 15.7 release plus the one patch we're applying. | |||
| 2023-01-22 | Update to Standards-Version 4.6.2 (no changes needed) | Steve McIntyre | |
| 2023-01-22 | Switch to using gcc-12 | Steve McIntyre | |
| Closes: #1022180 | |||
| 2023-01-22 | Switch to new upstream (15.7) | Steve McIntyre | |
| Also import patch to deal with buggy binutils | |||
| 2023-01-22 | Update upstream source from tag 'upstream/15.7' | Steve McIntyre | |
| Update to upstream version '15.7' with Debian dir f802105ae061241b13ab962854f56388092fc703 | |||
| 2023-01-22 | New upstream version 15.7upstream/15.7 | Steve McIntyre | |
| 2022-07-21 | Release 15.6-1debian/15.6-1 | Steve McIntyre | |
| 2022-06-23 | Start packaging updates for the new 15.6 upstream release | Steve McIntyre | |
| Remove all our patches, all upstream now | |||
| 2022-06-23 | New upstream version 15.6upstream/15.6 | Steve McIntyre | |
| 2022-06-23 | Update upstream source from tag 'upstream/15.6' | Steve McIntyre | |
| Update to upstream version '15.6' with Debian dir 952ad3d5a92a2003f3496a79d1875a951c255396 | |||
| 2022-05-01 | Update the 32-bit format patch after upstream review | Steve McIntyre | |
| 2022-04-28 | Add patch headers for our patches now I've pushed PRs | Steve McIntyre | |
| 2022-04-28 | Try again on the string format fix | Steve McIntyre | |
| 2022-04-28 | Fix format strings for 32-bit builds | Steve McIntyre | |
| 2022-04-28 | Add new build-dep on libefivar-dev for tests | Steve McIntyre | |
| 2022-04-28 | Try again with includes | Steve McIntyre | |
 |
index : efi-boot-shim.git | |
| (mirror of https://github.com/vyos/efi-boot-shim.git) |
| summaryrefslogtreecommitdiff |