summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2016-10-01* Initial Debian upload. Closes: #820052.Steve Langasek
* Update Standards-Version. * Embed the newly-minted Debian CA certificate. * Vendorize debian/rules so that the same package can be used in both Debian and Ubuntu without modification. * Fix debian/copyright to match the spec (last match wins, not first) * Fix shim.efi to not be executable. * Add watchfile. * Support parallel builds, because eh why not * Update Vcs-Bzr.
2016-09-22debian/shim.install: built EFI binaries were renamed; update our installMathieu Trudel-Lapierre
file to properly pick up shim (shim$arch), MokManager (mm$arch), and fallback (fb$arch).
2016-09-22* debian/patches/unused-variable: dropped; applied upstream.Mathieu Trudel-Lapierre
* debian/patches/binutils-version-matching: dropped, fixed upstream.
2016-09-22New upstream release.Mathieu Trudel-Lapierre
2016-09-20[ Helen Koike ]Helen Koike
* debian/copyright: add OpenSSL license [ Mathieu Trudel-Lapierre ] * debian/copyright: patches should be BSD, like the rest of the upstream code.
2016-09-15debian/copyright: add OpenSSL licenseHelen Koike
2016-07-26releasing package shim version 0.9+1465500757.14a5905-0ubuntu1Mathieu Trudel-Lapierre
2016-07-26debian/copyright: update copyright for patches.Mathieu Trudel-Lapierre
2016-07-26* debian/patches/unused-variable: remove unused variable size.Mathieu Trudel-Lapierre
* debian/patches/binutils-version-matching: revert d9a4c912 to correctly match objcopy's version on Ubuntu.
2016-07-26Update bug tags for closed bugs upstream.Mathieu Trudel-Lapierre
2016-07-26* Refreshed patches.Mathieu Trudel-Lapierre
- Remaining patches: + second-stage-path + sbsigntool-not-pesign
2016-07-26New upstream release.Mathieu Trudel-Lapierre
2015-05-12More GCC 5 fixes: stdarg.h and other include tweaks, cherry-pick fromMathieu Trudel-Lapierre
d51739a4.
2015-05-12Fix build with GCC 5, forcing -std=gnu89 to not rely on stdint.hMathieu Trudel-Lapierre
required by efibind.h, and not found with -nostdinc. (LP: #1429978)
2015-05-12releasing package shim version 0.8-0ubuntu2Steve Langasek
2015-05-11* New upstream release.Mathieu Trudel-Lapierre
- Clarify meaning of insecure_mode. (LP: #1384973) * debian/patches/CVE-2014-3675.patch, debian/patches/CVE-2014-3677.patch, debian/patches/0001-Update-openssl-to-0.9.8za.patch: dropped, included in the upstream release. * debian/patches/sbsigntool-not-pesign,debian/patches/second-stage-path: refreshed.
2015-05-07Add bug tag for insecure_mode semantics changes in 0.8.Mathieu Trudel-Lapierre
2015-05-06debian/patches/sbsigntool-not-pesign,debian/patches/second-stage-path:Mathieu Trudel-Lapierre
refreshed.
2015-05-06debian/patches/CVE-2014-3675.patch, debian/patches/CVE-2014-3677.patch,Mathieu Trudel-Lapierre
debian/patches/0001-Update-openssl-to-0.9.8za.patch: dropped, included in the upstream release.
2015-05-06New upstream release.Mathieu Trudel-Lapierre
2015-05-05Fix the version number; this was uploaded for some reason as -0ubuntu4, not ↵Steve Langasek
-0ubuntu3.
2014-10-08releasing package shim version 0.7-0ubuntu3Steve Langasek
2014-10-08* SECURITY UPDATE: heap overflow and out-of-bounds read access whenSteve Langasek
parsing DHCPv6 information - debian/patches/CVE-2014-3675.patch: apply proper bounds checking when parsing data provided in DHCPv6 packets. - CVE-2014-3675 - CVE-2014-3676 * SECURITY UPDATE: memory corruption when processing user-provided key lists - debian/patches/CVE-2014-3677.patch: detect malformed machine owner key (MOK) lists and ignore them, avoiding possible memory corruption. - CVE-2014-3677
2014-10-07releasing package shim version 0.7-0ubuntu2Steve Langasek
2014-10-07Update debian/patches/prototypes with some new declarations needed forSteve Langasek
openssl 0.9.8za update.
2014-10-07Restore debian/patches/prototypes, which still is needed on shim 0.7Steve Langasek
but only detected on the buildds.
2014-10-07releasing package shim version 0.7-0ubuntu1Steve Langasek
2014-10-07debian/patches/0001-Update-openssl-to-0.9.8za.patch: cherry-pickSteve Langasek
openssl 0.9.8za in via upstream.
2014-10-07Drop prototypes patch, apparently not needed upstreamSteve Langasek
2014-10-07drop most patches, included upstream.Steve Langasek
2014-10-06Merge upstream version 0.7Steve Langasek
2014-08-04releasing package shim version 0.4-0ubuntu5Steve Langasek
2013-09-26Install fallback.efi.signed as well, to lay the groundwork for fallbackSteve Langasek
handling (wanted when we have to move a drive between machines, or when the firmware loses its marbles^W nvram).
2013-09-23releasing package shim version 0.4-0ubuntu4Steve Langasek
2013-09-23debian/patches/netboot-cleanup: roll-up of miscellaneous fixes toSteve Langasek
the netboot code.
2013-09-20debian/patches/tftp-proper-nul-termination: fix nul terminationSteve Langasek
errors in filenames passed to tftp.
2013-09-20Fix remaining compiler warnings in netboot.c.Steve Langasek
2013-09-20typoSteve Langasek
2013-09-20Build with -Werror to catch future prototype mismatches.Steve Langasek
2013-09-20debian/patches/fix-tftp-prototype: pass the right arguments toSteve Langasek
EFI_PXE_BASE_CODE_TFTP_READ_FILE.
2013-08-08releasing version 0.4-0ubuntu3Stéphane Graber
2013-08-08Fix for LP: #1087501Stéphane Graber
2013-07-03debian/patches/no-output-by-default.patch: Don't print anySteve Langasek
informational messages. Closes LP: #1074302.
2013-07-03Install MokManager.efi.signed in the package.Steve Langasek
2013-07-02releasing version 0.4-0ubuntu2Steve Langasek
2013-07-02Add missing build-dependency on openssl.Steve Langasek
2013-07-02releasing version 0.4-0ubuntu1Steve Langasek
2013-07-02Only one new upstream release, no need to say it twice ;)Steve Langasek
2013-07-02Bump the versioned build-dep on gnu-efi to one that supports current shimSteve Langasek
2013-07-02Merge upstream release 0.4Steve Langasek