efi-boot-shim.git - (mirror of https://github.com/vyos/efi-boot-shim.git)

Age	Commit message (Expand)	Author
2024-04-15	Fix depreciation warnings	Bastien Roucariès
2024-04-15	Use popen for lsb_release	Bastien Roucariès
2024-04-15	Fix depends	Bastien Roucariès
2024-04-15	Update changelog	Bastien Roucariès
2024-04-15	Port to debian	Bastien Roucariès
2024-04-15	Add ubuntu test	Bastien Roucariès
2024-04-09	sbat: Also bump latest for grub,4 (and to todays date)	Julian Andres Klode
2024-04-09	sbat: Add grub.peimage,2 to latest (CVE-2024-2312)	Julian Andres Klode
2024-03-19	Validate that a supplied vendor cert is not in PEM format	Steve McIntyre
2024-01-22	Bump version to 15.815.8	Peter Jones
2024-01-22	gitmodules: use shim-15.8 for gnu-efi branch	Peter Jones
2024-01-22	Try to load revocations.efi even if directory read fails	Jan Setje-Eilers
2024-01-22	netboot read_image() should not hardcode DEFAULT_LOADER	Jan Setje-Eilers
2024-01-22	Build time selectable automatic SBATLevel revocations	Jan Setje-Eilers
2024-01-22	Rename "previous" revocations to "automatic"	Jan Setje-Eilers
2024-01-22	Suppress "Failed to open <..>\revocations.efi" when file does not exist	Jan Setje-Eilers
2024-01-22	pe-relocate: Avoid __builtin_add_overflow() on GCC < 5	Peter Jones
2024-01-22	post-process-pe: Don't set the NX_COMPAT flag by default after all.	Peter Jones
2024-01-22	Fix some minor ia32 build issues.	Peter Jones
2024-01-20	generate_dbx_list: pick a fixed UUID	Steve McIntyre
2024-01-17	Updated Revocations for January 2024 CVEs	Jan Setje-Eilers
2023-12-05	Print errors when setting/clearing memory attrs	Peter Jones
2023-12-05	CVE-2023-40547 - avoid incorrectly trusting HTTP headers	Peter Jones
2023-12-05	sbat revocations: check the full section name	Peter Jones
2023-12-05	Print message when refusing to apply SbatLevel	Jan Setje-Eilers
2023-12-05	shim should not self revoke	Jan Setje-Eilers
2023-12-05	BS Variables for bootmgr revocations	Jan Setje-Eilers
2023-12-05	Always clear SbatLevel when Secure Boot is disabled	Jan Setje-Eilers
2023-12-05	Allow SbatLevel data from external binary	Jan Setje-Eilers
2023-12-05	Further mitigations against CVE-2023-40546 as a class	Peter Jones
2023-12-05	CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system	Peter Jones
2023-12-05	CVE-2023-40549 Authenticode: verify that the signature header is in bounds.	Peter Jones
2023-12-05	pe-relocate: Ensure nothing else implements CVE-2023-40550	Peter Jones
2023-12-05	CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()	Peter Jones
2023-12-05	pe-relocate: make read_header() use checked arithmetic operations.	Peter Jones
2023-12-05	CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries	Peter Jones
2023-12-05	pe-relocate: Add a fuzzer for read_header()	Peter Jones
2023-12-05	Add primitives for overflow-checked arithmetic operations.	Peter Jones
2023-11-02	Tweak building with pesign changes	Steve McIntyre
2023-10-19	CVE-2023-40546 mok: fix LogError() invocation	Peter Jones
2023-08-25	compile_commands.json: remove stuff clang doesn't like	Peter Jones
2023-08-25	Make some of the static analysis tools a little easier to run	Peter Jones
2023-07-19	mok: Avoid underflow in maximum variable size calculation	Alper Nebi Yasak
2023-07-19	Correctly free memory allocated in handle_image()	Dennis Tseng
2023-07-19	Work around ImageAddress() usage mistake	Dennis Tseng
2023-06-29	Add libFuzzer support to the .sbat parser.	Peter Jones
2023-06-29	Fix a 1-byte memory leak in .sbat parsing.	Peter Jones
2023-06-29	Add libFuzzer support for csv.c	Peter Jones
2023-06-27	Verify signature before verifying sbat levels	Jan Setje-Eilers
2023-06-23	Test (and fix) ImageAddress()	Peter Jones