shim-15.6 - What's Changed * MokManager: removed Locate graphic output protocol fail error message by @joeyli in https://github.com/rhboot/shim/pull/441 * shim: implement SBAT verification for the shim_lock protocol by @chrisccoulson in https://github.com/rhboot/shim/pull/456 * post-process-pe: Fix a missing return code check by @vathpela in https://github.com/rhboot/shim/pull/462 * Update github actions matrix to be more useful by @frozencemetery in https://github.com/rhboot/shim/pull/469 * Add f36 and centos9 CI builds by @vathpela in https://github.com/rhboot/shim/pull/470 * post-process-pe: Fix format string warnings on 32-bit platforms by @steve-mcintyre in https://github.com/rhboot/shim/pull/464 * tests: also look for system headers in multi-arch directories by @steve-mcintyre in https://github.com/rhboot/shim/pull/466 * tests: fix gcc warnings by @akodanev in https://github.com/rhboot/shim/pull/463 * Allow MokListTrusted to be enabled by default by @esnowberg in https://github.com/rhboot/shim/pull/455 * Add code of conduct by @frozencemetery in https://github.com/rhboot/shim/pull/427 * Re-add ARM AArch64 support by @vathpela in https://github.com/rhboot/shim/pull/468 * Use ASCII as fallback if Unicode Box Drawing characters fail by @vathpela in https://github.com/rhboot/shim/pull/428 * make: don't treat cert.S specially by @vathpela in https://github.com/rhboot/shim/pull/475 * shim: use SHIM_DEVEL_VERBOSE when built in devel mode by @vathpela in https://github.com/rhboot/shim/pull/474 * Break out of the inner sbat loop if we find the entry. by @vathpela in https://github.com/rhboot/shim/pull/476 * Support loading additional certificates by @esnowberg in https://github.com/rhboot/shim/pull/446 * Add support for NX (W^X) mitigations. by @vathpela in https://github.com/rhboot/shim/pull/459 * Misc fixups from scan-build. by @vathpela in https://github.com/rhboot/shim/pull/477 * Fix preserve_sbat_uefi_variable() logic by @jsetje in https://github.com/rhboot/shim/pull/478 * SBAT Policy latest should be a one-shot by @jsetje in https://github.com/rhboot/shim/pull/481 * pe: Fix a buffer overflow when SizeOfRawData > VirtualSize by @chriscoulson * pe: Perform image verification earlier when loading grub by @chriscoulson * Update advertised sbat generation number for shim by @jsetje * Update SBAT generation requirements for 05/24/22 by @jsetje * Also avoid CVE-2022-28737 in verify_image() by @vathpela - New Contributors * @joeyli made their first contribution in https://github.com/rhboot/shim/pull/441 * @akodanev made their first contribution in https://github.com/rhboot/shim/pull/463 * @esnowberg made their first contribution in https://github.com/rhboot/shim/pull/455 - Full Changelog**: https://github.com/rhboot/shim/compare/15.5...15.6