-
edk2 (0~20190606.20d2e5a1-2ubuntu1.1) eoan; urgency=medium
* Fix numeric truncation in S3BootScript[Save]*() API. (CVE-2019-14563)
* Fix use-after-free in PcdHiiOsRuntimeSupport. (CVE-2019-14586)
* Clear memory before free to avoid potential password leak.
(CVE-2019-14558)
* Fix double-unmap in SdMmcCreateTrb(). This did not impact any
of the images built from this package. (CVE-2019-14587)
* Fix memory leak in ArpOnFrameRcvdDpc(). (CVE-2019-14559)
* Fix issue that could allow an efi image with a blacklisted hash in the
dbx to be loaded. (CVE-2019-14575)
* Fix a memory leak in the ARP handler. (CVE-2019-14559)
-- dann frazier <email address hidden> Fri, 03 Apr 2020 15:15:42 -0600
-
edk2 (0~20190606.20d2e5a1-2ubuntu1) eoan; urgency=medium
* d/p/ovmf-vars-generator-ignore-qemu-warnings.patch: Avoid build
hang resulting from unexpected QEMU warnings in output while
enrolling keys.
-- dann frazier <email address hidden> Thu, 01 Aug 2019 22:53:39 +0000
-
edk2 (0~20190606.20d2e5a1-2) unstable; urgency=medium
* debian/tests/control: Add missing dependencies on ovmf,
qemu-efi-aarch64, and qemu-efi-arm.
* debian/rules: Fix a comment typo in the get-orig-source rules.
* debian/rules: Introduce a setup-build-stamp to avoid unnecessary
BuildTools rebuilds.
* ovmf: Add SecureBoot enabled variant:
- debian/control: add xorriso, qemu-utils, qemu-system-x86, python3 to
Build-Depends for the automatic key enrollment process.
- debian/rules:
- build a SecureBoot/SMM enabled variant of OVMF_CODE too.
- build OVMF_VARS.ms.fd with embedded Microsoft keys from the binary
EnrollDefaultKeys.efi
- debian/ovmf.links: add OVMF_CODE.ms.fd.
- debian/ovmf.install: install OVMF_VARS.ms.fd.
- d/p/ovmf-vars-generator-Pass-OEM-Strings-to-the-guest.patch: Support
passing in the PK/KEK via QEMU's --oemstring.
* Reenable HTTP Boot, which was accidentally disabled due to an upstream
macro rename.
* Add firmware descriptor files. Closes: #932269, LP: #1836859.
-- dann frazier <email address hidden> Wed, 31 Jul 2019 13:44:42 -0600
-
edk2 (0~20190606.20d2e5a1-1ubuntu2) eoan; urgency=medium
* debian/tests/control: Add missing dependencies on ovmf,
qemu-efi-aarch64, and qemu-efi-arm.
-- dann frazier <email address hidden> Fri, 05 Jul 2019 21:08:23 -0600
-
edk2 (0~20190606.20d2e5a1-1ubuntu1) eoan; urgency=medium
* Merge with Debian experimental. Remaining changes:
- debian/control: add xorriso, qemu-utils, qemu-system-x86, python3 to
Build-Depends for the automatic key enrollment process.
- debian/rules:
- build a SecureBoot/SMM enabled variant of OVMF_CODE too.
- build OVMF_VARS.ms.fd with embedded Microsoft keys from the binary
EnrollDefaultKeys.efi
- debian/ovmf.links: add OVMF_CODE.ms.fd.
- debian/ovmf.install: install OVMF_VARS.ms.fd.
* debian/rules: Introduce a setup-build-stamp to avoid unnecessary
BuildTools rebuilds.
* debian/rules: Fix a comment typo in the get-orig-source rules.
-- dann frazier <email address hidden> Fri, 05 Jul 2019 19:18:14 -0600
-
edk2 (0~20190309.89910a39-1ubuntu1) disco; urgency=medium
* Merge with Debian experimental. Remaining changes:
- debian/patches/enroll-default-keys.patch: Build EnrollDefaultKeys.efi to
provide an automated way of injecting Microsoft signing keys in VMs that
need them.
- debian/control: add genisoimage, qemu-utils, qemu-system-x86, python3 to
Build-Depends for the automatic key enrollment process.
- debian/rules:
- build a SecureBoot/SMM enabled variant of OVMF_CODE too.
- build OVMF_VARS.ms.fd with embedded Microsoft keys from the binary
EnrollDefaultKeys.efi
- debian/ovmf.links: add OVMF_CODE.ms.fd.
- debian/ovmf.install: install OVMF_VARS.ms.fd.
* debian/control: Fold and sort Build-Depends line.
* debian/control: Add bc to Build-Depends, as it is now used by
edksetup.sh.
* debian/control: Add python3-distutils to Build-Depends. Part of
the build will now use python3 instead of python if found at build-time.
However, the build requires distutils, and upstream only embeds the
python(2) version of that.
-- dann frazier <email address hidden> Mon, 18 Mar 2019 21:44:41 -0600
