Tags

14

shim 14 - Important bug fix release

The shim EFI binary cannot have sections whose offset is not a multiple of the
file header offset, or else signtool.exe will generate an incorrect signature
that cannot be verified.  Currently we generate a PLT section that is
incorrectly aligned, due to an error in rebasing OpenSSL to fix a different
issue.  This version rectifies that error, as well as adding --no-undefined to
the final link, so that any such missing symbol will cause a build error.  This
doesn't necessarily solve the file offset problem in all cases, but it does
solve it in all the cases we've actually seen so far.

Release_3.3.6

This is the 3.3.6 release providing critical fixes for the 3.3 stable series.

Release_3.3.6_debian

This is the 3.3.6 release providing critical fixes for the 3.3 stable series.

Release_3.3.5

This is the 3.3.5 release providing critical fixes for the 3.3 stable series.

Release_3.3.5_debian

This is the 3.3.5 release providing critical fixes for the 3.3 stable series.

Release_3.3.4

This is the 3.3.4 release providing critical fixes for the 3.3 stable series.

Release_3.3.4_debian

This is the 3.3.4 release providing critical fixes for the 3.3 stable series.

Release_3.3.3

This is the 3.3.3 release providing critical fixes for the 3.3 stable series.

Release_3.3.3_debian

This is the 3.3.3 release providing critical fixes for the 3.3 stable series.

debian/13-0ubuntu2

Release_3.3.2

This is the 3.3.2 release providing critical fixes for the 3.3 stable series.

Release_3.3.2_debian

This is the 3.3.2 release providing critical fixes for the 3.3 stable series.

Release_3.3.1

This is the 3.3.1 release providing critical fixes for the 3.3 stable series.

Release_3.3.1_debian

This is the 3.3.1 release providing critical fixes for the 3.3 stable series.

Release_3.3.0

This is the 3.3.0 release

Release_3.3.0_debian

This is the 3.3.0 release

debian/13-0ubuntu1

upstream/13

Upstream version 13

upstream/13_z1

Upstream version 13~z1

13

shim 13:

- OpenSSL reverted to 1.0.2k to make the cert chaining of existing
  deployments stay working
- Better PCR usage for TPM
- TPM documentation in README.tpm
- More configurable build via make variables:
  ENABLE_SHIM_CERT
  ENABLE_SHIM_HASH
  ENABLE_SBSIGN
  LIBDIR
  EFIDIR
  VENDOR_CERT_FILE
  VENDOR_DB_FILE
- Better MoK documentation in MokVars.txt
- Better debuginfo generation
- Lots of minor bug fixes.