efi-boot-shim.git - (mirror of https://github.com/vyos/efi-boot-shim.git)

Age	Commit message (Expand)	Author
2025-02-26	Disable log saving for now.	Peter Jones
2025-02-25	Add shim's current NX_COMPAT status to HSIStatus	Peter Jones
2025-02-25	pe: read_header(): allow skipping SecDir content validation	Peter Jones
2025-02-24	shim: add HSIStatus feature	Peter Jones
2025-02-24	Save the debug and error logs in mok-variables	Peter Jones
2025-02-18	netboot can try to load shim_certificate_[0..9].efi	Jan Setje-Eilers
2025-02-18	Allow indepdent SkuSi and SBAT revocation updates	Jan Setje-Eilers
2025-02-18	netboot: process revocations.efi as revocations not shim_certificate	Jan Setje-Eilers
2025-02-18	Suppress file open failures for some netboot cases	Jan Setje-Eilers
2025-02-11	Implement the rest of the loader protocol functions	Peter Jones
2025-02-11	Move some stuff around	Peter Jones
2025-02-11	Implement shim image load protocol	Ard Biesheuvel
2025-02-06	Add configuration option to boot an alternative 2nd stage	Eric Snowberg
2025-02-04	Load concatenated EFI_SIGNATURE_LISTs from shim_certificate.efi	Ross Lagerwall
2025-02-04	Fix leak in error path	Ross Lagerwall
2025-01-21	Fall back to default loader when encountering errors on network boot	Nathan O'Meara
2025-01-21	Ignore a minor clang-tidy nit	Peter Jones
2025-01-17	Move is_removable_media_path() to a shared location.	Peter Jones
2025-01-17	Fix bad reference to PathName in image loading	Renaud Métrich
2025-01-15	Fix the issue that the gBS->LoadImage pointer was empty.	jinlun
2024-11-24	Fix "Verifiying" typo in error message	Chris Bainbridge
2024-11-12	Drop unused EFI_IMAGE_SECURITY_DATABASE_GUID definition	Vitaly Kuznetsov
2024-05-08	undo change that limits certificate files to a single file	Jan Setje-Eilers
2024-01-22	Try to load revocations.efi even if directory read fails	Jan Setje-Eilers
2024-01-22	netboot read_image() should not hardcode DEFAULT_LOADER	Jan Setje-Eilers
2024-01-22	Rename "previous" revocations to "automatic"	Jan Setje-Eilers
2024-01-22	Suppress "Failed to open <..>\revocations.efi" when file does not exist	Jan Setje-Eilers
2024-01-22	Fix some minor ia32 build issues.	Peter Jones
2023-12-05	sbat revocations: check the full section name	Peter Jones
2023-12-05	shim should not self revoke	Jan Setje-Eilers
2023-12-05	BS Variables for bootmgr revocations	Jan Setje-Eilers
2023-12-05	Allow SbatLevel data from external binary	Jan Setje-Eilers
2023-12-05	CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system	Peter Jones
2023-12-05	CVE-2023-40549 Authenticode: verify that the signature header is in bounds.	Peter Jones
2023-12-05	CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()	Peter Jones
2023-06-27	Verify signature before verifying sbat levels	Jan Setje-Eilers
2023-06-21	Rename 'msecs' to 'usecs' to avoid potential confusion	Kamil Aronowski
2023-05-02	Further improve load_certs() for non-compliant drivers/firmwares	Pete Batard
2023-05-02	Drop invalid calls to `CRYPTO_set_mem_functions`	Nicholas Bishop
2023-05-02	Optionally allow to keep shim protocol installed	Luca Boccassi
2023-02-01	Don't loop forever in load_certs() with buggy firmware	Renaud Métrich
2022-11-08	load_cert_file: Use EFI RT memory function	Eric Snowberg
2022-11-08	load_cert_file: Fix stack issue	Eric Snowberg
2022-08-03	Reference MokListRT instead of MokList	Eric Snowberg
2022-05-23	load_cert_file(): don't defererence NULL	Peter Jones
2022-05-18	load_certs: trust dir->Read() slightly less.	Peter Jones
2022-05-18	Always initialize data/datasize before calling read_image()	Peter Jones
2022-05-17	Load additional certs from a signed binary	Eric Snowberg
2022-05-17	Abstract out image reading	Eric Snowberg
2022-05-17	shim: use SHIM_DEVEL_VERBOSE when built in devel mode	Peter Jones