summaryrefslogtreecommitdiff
path: root/debian/changelog
AgeCommit message (Collapse)Author
2021-05-06Add defensive code around calls to db_getdebian/15.4-5Steve McIntyre
Don't fail if they return errors.
2021-05-04Fix up the template maintainer scriptsdebian/15.4-4Steve McIntyre
if we're not running on an EFI system then exit cleanly
2021-05-03Add maintainer scripts to the template packagesdebian/15.4-3Steve McIntyre
Manage installing and removing fbXXX.efi and mmXXX.efi when we install/remove the shim-helpers-$arch-signed packages. Closes: #966845
2021-04-21Add changelog for 15.4-2 with new patchesdebian/15.4-2Steve McIntyre
2021-04-14allocate MOK config table as BootServicesDataSteve McIntyre
Another patch from upstream, needed with newer kernels on x86
2021-03-31Add one more patch from upstream to fix i386 binary relocationsSteve McIntyre
2021-03-31Override dh_auto_build setting INSTALL, cut down on build noiseSteve McIntyre
2021-03-31Update to the 15.4 releaseSteve McIntyre
2021-03-24Print sha256 checksums of the EFI binaries when the build is doneSteve McIntyre
2021-03-24Tweak the SBAT data to keep reproducibilitydebian/15.3-3Steve McIntyre
Only include the upstream version in the Debian SBAT metadata, so we don't break reproducibility on every minor packaging change.
2021-03-24Add missing build-dep on xxd for build-time unit testsdebian/15.3-2Steve McIntyre
2021-03-23Switch to using the 15.3 release from upstreamSteve McIntyre
2021-03-23Update copyright fileSteve McIntyre
Update a couple of top-level changes, copy in gnu-efi information from the gnu-efi package
2021-03-23Add an extra rule to generate the extra gnu-efi tarballSteve McIntyre
Thanks to Dmitri John Ledkov for help
2021-03-23Add Debian SBAT data to the shim buildSteve McIntyre
Add a Debian SBAT template, and rules to use it Adds a build-dep on dos2unix
2021-03-23Add dbx entries for all our existing grub binariesSteve McIntyre
They're insecure, let's break the chainloading hole
2021-02-21Change changelog to shut lintian upSteve McIntyre
2021-02-21Add new patch cast-CHAR8-string-handling.patchSteve McIntyre
Cast CHAR8 strings to use (const char *) when using string functions Looks like gnu-efi definitions of CHAR8 are problematic
2021-02-21Trivial change to remove bashisms in Make.coveritySteve McIntyre
2021-02-21Remove all our old patches, no longer needed:Steve McIntyre
- avoid_null_vsprint.patch - check_null_sn_ln.patch - fixup_git.patch - uname.patch - use_compare_mem_gcc9.patch
2021-02-21Switch to using gcc-10 rather than gcc-9. Closes: #978521Steve McIntyre
2021-02-21Switch to newer upstream "release" 15+1613861442.888f5b5Steve McIntyre
Many many updates, but caring mainly about SBAT support
2020-07-24Prepare 15+1533136590.3beb971-10 uploaddebian/15+1533136590.3beb971-10Steve McIntyre
2020-07-24Minimal-change upload to pick up rotated Debian signing keysSteve McIntyre
2020-04-01Update standards version to 4.4.1, no changes needed.Debian Janitor
Fixes: lintian: out-of-date-standards-version See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html
2020-04-01Set upstream metadata fields: Bug-Database, Bug-Submit.Debian Janitor
Fixes: lintian: upstream-metadata-file-is-missing See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html
2020-04-01Set debhelper-compat version in Build-Depends.Debian Janitor
Fixes: lintian: uses-debhelper-compat-file See-also: https://lintian.debian.org/tags/uses-debhelper-compat-file.html
2020-04-01Bump debhelper from old 11 to 12.Debian Janitor
Fixes: lintian: package-uses-old-debhelper-compat-version See-also: https://lintian.debian.org/tags/package-uses-old-debhelper-compat-version.html
2020-04-01debian/copyright: use spaces rather than tabs to start continuation lines.Debian Janitor
Fixes: lintian: tab-in-license-text See-also: https://lintian.debian.org/tags/tab-in-license-text.html
2020-04-01Use secure copyright file specification URI.Debian Janitor
Fixes: lintian: insecure-copyright-format-uri See-also: https://lintian.debian.org/tags/insecure-copyright-format-uri.html
2020-04-01Trim trailing whitespace.Debian Janitor
Fixes: lintian: file-contains-trailing-whitespace See-also: https://lintian.debian.org/tags/file-contains-trailing-whitespace.html
2020-03-30Tweak the version dependency of the -helpers-ARCH-signed packagesdebian/15+1533136590.3beb971-9Steve McIntyre
Change the version dependency on shim-unsigned to be >= and not =. This will allow for installation to still work in the window while we wait for the template package to do its second trip through the archive. Closes: #955356
2020-03-24Prepare Debian release 15+1533136590.3beb971-8debian/15+1533136590.3beb971-8Steve McIntyre
2020-03-24Update debhelper compat level to 11Steve McIntyre
2020-03-24Switch to using gcc-9 for builds. Closes: #925826Steve McIntyre
Pull upstream commit aaa09b35e73c4a35fc119d225e5241199d7cf5aa to fix an FTBFS.
2019-05-08Use --padding when calling pesign to generate hashesSteve McIntyre
for the dbx list, as recommended by Peter Jones. No actual changes needed in our list of hashes at this point - they work out the same either way.
2019-05-08Prepare Debian release 15+1533136590.3beb971-7debian/15+1533136590.3beb971-7Steve McIntyre
2019-05-06Merge branch 'hack' from 93samSteve McIntyre
Changes: crash fixes generate dbx file at runtime
2019-05-06Add initial file with test checksums for the dbx listSteve McIntyre
2019-05-03Build using gcc-7Steve McIntyre
To get better control of reproducibility during the lifetime of Buster
2019-05-03Update VCS-* fields in debian/controlSteve McIntyre
2019-05-03Fix OBJ_create() to tolerate a NULL sn and lnSteve McIntyre
Cherry-picked fix from upstream MR at https://github.com/rhboot/shim/pull/174/commits/3a9e237b1baddf0d3192755406befb3e9fa5ca80 From: https://github.com/openssl/openssl/commit/f13615c5b828aeb8e3d9bf2545c803633d1c684f Apply an upstream patch from OpenSSL to tolerate a NULL sn. This avoids a NULL pointer reference in shim.c:verify_eku(). This was discovered because it causes a crash on ARM where, unlike x86, it does not necessarily have memory mapped at 0x0. Fixes: 6c180c6004ac ("shim: verify Extended Key Usage flags") Signed-off-by: dann frazier <dann.frazier@canonical.com>
2019-05-03VLogError(): Avoid NULL pointer dereferences in (V)Sprint callsSteve McIntyre
Backport of upstream fix: VLogError() calculates the size of format strings by using calls to SPrint and VSPrint with a StrSize of 0 and NULL for an output buffer. Unfortunately, this is an incorrect usage of (V)Sprint. A StrSize of "0" is special-cased to mean "there is no limit". So, we end up writing our string to address 0x0. This was discovered because it causes a crash on ARM where, unlike x86, it does not necessarily have memory mapped at 0x0. Avoid the (V)Sprint calls altogether by using (V)PoolPrint, which handles the size calculation and allocation for us. Signed-off-by: Peter Jones <pjones@redhat.com> Fixes: 25f6fd08cd26 ("try to show errors more usefully.") [dannf: commit message ] Signed-off-by: dann frazier <dann.frazier@canonical.com>
2019-03-25debian/control: Update Vcs-* fieldsAnsgar Burchardt
2019-03-23Prepare Debian release 15+1533136590.3beb971-6debian/15+1533136590.3beb971-6Steve McIntyre
2019-03-23Fix FTCBFS: Set CROSS_COMPILE. (Closes: #922152)Helmut Grohne
2019-03-23Add Provides: and Breaks: to shim-helpers-$arch-signedSteve McIntyre
to fix clashes with the old shim-signed package for fbx64.efi.signed and mmx64.efi.signed. Closes: #924619
2019-03-12Prepare Debian release 15+1533136590.3beb971-5debian/15+1533136590.3beb971-5Steve McIntyre
2019-03-12Remove Rules-Requires-Root in the signing template.Steve McIntyre
We manually install things owned by root. There might be better ways to do this, but this will do for now.
2019-03-12Add changelog entry for Ansgar's fix in 196119a5Steve McIntyre
generated by cgit v1.2.3 (git 2.39.1) at 2025-09-01 10:28:13 +0000