Tags

shim 14 - Important bug fix release

The shim EFI binary cannot have sections whose offset is not a multiple of the
file header offset, or else signtool.exe will generate an incorrect signature
that cannot be verified.  Currently we generate a PLT section that is
incorrectly aligned, due to an error in rebasing OpenSSL to fix a different
issue.  This version rectifies that error, as well as adding --no-undefined to
the final link, so that any such missing symbol will cause a build error.  This
doesn't necessarily solve the file offset problem in all cases, but it does
solve it in all the cases we've actually seen so far.

This is the 3.3.6 release providing critical fixes for the 3.3 stable series.

This is the 3.3.6 release providing critical fixes for the 3.3 stable series.

This is the 3.3.5 release providing critical fixes for the 3.3 stable series.

This is the 3.3.5 release providing critical fixes for the 3.3 stable series.

This is the 3.3.4 release providing critical fixes for the 3.3 stable series.

This is the 3.3.4 release providing critical fixes for the 3.3 stable series.

This is the 3.3.3 release providing critical fixes for the 3.3 stable series.

This is the 3.3.3 release providing critical fixes for the 3.3 stable series.

This is the 3.3.2 release providing critical fixes for the 3.3 stable series.

This is the 3.3.2 release providing critical fixes for the 3.3 stable series.

This is the 3.3.1 release providing critical fixes for the 3.3 stable series.

This is the 3.3.1 release providing critical fixes for the 3.3 stable series.

This is the 3.3.0 release

This is the 3.3.0 release

Upstream version 13

Upstream version 13~z1

shim 13:

- OpenSSL reverted to 1.0.2k to make the cert chaining of existing
  deployments stay working
- Better PCR usage for TPM
- TPM documentation in README.tpm
- More configurable build via make variables:
  ENABLE_SHIM_CERT
  ENABLE_SHIM_HASH
  ENABLE_SBSIGN
  LIBDIR
  EFIDIR
  VENDOR_CERT_FILE
  VENDOR_DB_FILE
- Better MoK documentation in MokVars.txt
- Better debuginfo generation
- Lots of minor bug fixes.