Commit a8a478c9 authored by Rocky Automation's avatar Rocky Automation 📺
Browse files

import shim-15.6-1.el8

parent db2f7d61
69ae9594de0de390d98fa5f115b69ddccf2e6a89 SOURCES/shimaa64.efi
c8a66ebbf003eb73d7709ac20ea8532d27ae1696 SOURCES/shimia32.efi
3c037d1f2d4ba2527e3d0b4564d13c8f85730cb6 SOURCES/shimx64.efi
eceeafa415c3d1d0f9a58afed1784524e6f0f4c4 SOURCES/shimia32.efi
7d892d1460800ed04bf3043bc6fccfaf1e7ab6c2 SOURCES/shimx64.efi
......@@ -13,9 +13,9 @@
%global shimefix64 %{expand:%{SOURCE22}}
#%%global shimefiarm %%{expand:%%{SOURCE23}
%global shimveraa64 15-7.el8.1
%global shimveria32 15.4-4.el8_5.2.rocky
%global shimverx64 15.4-4.el8_5.2.rocky
%global shimveraa64 15-7.el8.1.1
%global shimveria32 15.6-1.el8
%global shimverx64 15.6-1.el8
#%%global shimverarm 15-1.el8
%global shimdiraa64 %{_datadir}/shim/%{shimveraa64}/aa64
......@@ -90,7 +90,7 @@ version signed by the UEFI signing service. \
# -i <input>
%define distrosign(b:a:d:) \
cp -av %{-d*}/%{-b*}%{-a*}.efi %{-b*}%{-a*}-unsigned.efi \
%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n rockybootsigningcert -a %{SOURCE90000} -c %{SOURCE90001} }\
%{expand:%%sign -i %{-b*}%{-a*}-unsigned.efi -o %{-b*}%{-a*}-signed.efi -n rockybootsigningcert -a %{SOURCE90000} -c %{SOURCE90001} }\
%{nil}
# -a <efiarch>
......
Name: shim
Version: 15.4
Release: 2%{?dist}
Version: 15.6
Release: 1%{?dist}
Summary: First-stage UEFI bootloader
License: BSD
URL: https://github.com/rhboot/shim/
......@@ -102,45 +102,38 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
%endif
%changelog
* Sun Nov 14 2021 Sherif Nagy <sherif@rockylinux.org> - 15.4-2
* Fri Aug 19 2022 Sherif Nagy <sherif@rockylinux.org> - 15.6-1
- shim-15.6
* Fri Aug 19 2022 Sherif Nagy <sherif@rockylinux.org> - 15.6-1
- Adding prod certs
* Sun Nov 14 2021 Sherif Nagy <sherif@rockylinux.org> - 15.4-2
* Fri Aug 19 2022 Sherif Nagy <sherif@rockylinux.org> - 15.6-1
- Updating Rocky shim efi and CSV files
* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
- Updating Rocky testing certs and restructuring
* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
- Updating Rocky testing certs
* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
- Moving to PEM certs for Rocky
* Sun Nov 14 2021 Sherif Nagy <sherif@disroot.org> - 15.4-2
* Fri Aug 19 2022 Sherif Nagy <sherif@disroot.org> - 15.6-1
- Remove Centos Certs and added Rocky certs
* Tue Apr 06 2021 Peter Jones <pjones@redhat.com> - 15.4-2
- Fix build-deps on our shim-unsigned-* packages.
Related: CVE-2020-14372 (and others)
* Mon Apr 05 2021 Peter Jones <pjones@redhat.com> - 15.4-1
- Update to shim 15.4
- Support for revocations via the ".sbat" section and SBAT EFI variable
- A new unit test framework and a bunch of unit tests
- No external gnu-efi dependency
- Better CI
Resolves: CVE-2020-14372
Resolves: CVE-2020-25632
Resolves: CVE-2020-25647
Resolves: CVE-2020-27749
Resolves: CVE-2020-27779
Resolves: CVE-2021-20225
Resolves: CVE-2021-20233
* Mon Jun 06 2022 Peter Jones <pjones@redhat.com> - 15.6-1
- Update to shim-15.6
Resolves: CVE-2022-28737
* Mon Sep 21 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-16
- Fix an incorrect allocation size
Resolves: rhbz#1877253
* Fri Jul 31 2020 Peter Jones <pjones@redhat.com> - 15-15
- Update once again for new signed shim builds.
Resolves: rhbz#1862231
Resolves: rhbz#1861977
* Tue Jul 28 2020 Peter Jones <pjones@redhat.com> - 15-14
- Get rid of our %%dist hack for now.
......@@ -155,7 +148,9 @@ install -m 0700 %{shimefi} $RPM_BUILD_ROOT%{efi_esp_dir}/shim.efi
* Thu Jun 11 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-12
- Fix firmware update bug in aarch64 caused by shim ignoring arguments
Resolves: rhbz#1830871
- Fix a shim crash when attempting to netboot
Resolves: rhbz#1795654
* Fri Jun 07 2019 Javier Martinez Canillas <javierm@redhat.com> - 15-11
- Update the shim-unsigned-aarch64 version number
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment