77 Commits

Author SHA1 Message Date
openeuler-ci-bot
03860f5763
!206 [sync] PR-203: Fix the issue that the gBS->LoadImage pointer was empty.
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2025-02-11 08:31:12 +00:00
xuce
2e250d3085 fix the issue that the gBS->LoadImage pointer was empty
(cherry picked from commit 59798d606a7c450a849b1a65b2161e4ef9e680db)
2025-02-11 14:26:26 +08:00
openeuler-ci-bot
80e421cf37
!201 [sync] PR-199: Correct the signature code
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2024-11-01 08:50:26 +00:00
markeryang
72ef0d7088 Correct the signature code
(cherry picked from commit d152ba03bf3a439eac78a7f5b85d08520ec0cfcc)
2024-10-30 09:12:15 +08:00
openeuler-ci-bot
fd8b7b0997
!197 [sync] PR-192: backport patch from upstream
From: @openeuler-sync-bot 
Reviewed-by: @dillon_chen 
Signed-off-by: @dillon_chen
2024-10-22 08:25:28 +00:00
fly_fzc
ee43327671 backport patch from upstream
(cherry picked from commit 60f7c2d53e1c65281d6c78ad0c0b38606d29cd6a)
2024-10-22 14:25:46 +08:00
openeuler-ci-bot
6aaab6a22f
!181 [sync] PR-180: 支持CFCA安全启动签名
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2024-06-12 01:25:40 +00:00
jinlun
581c701e6c add cfca signed shim
(cherry picked from commit 30ffd1193a9983c14ca795fee781394838a0db33)
2024-06-11 14:22:15 +08:00
openeuler-ci-bot
43501180ee
!179 [sync] PR-177: 修复在24.03的物理机上使用shim启动虚拟机报错问题
From: @openeuler-sync-bot 
Reviewed-by: @zhujianwei001 
Signed-off-by: @zhujianwei001
2024-05-18 02:57:08 +00:00
hzero1996
8e223836b6 Align section size up to page size for mem attrs
(cherry picked from commit 5e5349dccfb1201963de3b0f773f4e614a227316)
2024-05-17 18:09:08 +08:00
openeuler-ci-bot
c78c07548c
!175 [sync] PR-169: shim包中启动项名称换标替换
From: @openeuler-sync-bot 
Reviewed-by: @zhujianwei001 
Signed-off-by: @zhujianwei001
2024-05-17 10:08:18 +00:00
lijuzhang
ea058cf43f replace vendor for BOOTX64.CSV or BOOTAA64.CSV
Signed-off-by: lijuzhang <lijuzhang@inspur.com>
(cherry picked from commit ca2774aef55f6c40018203c50dbaf652b7650731)
2024-05-09 15:10:42 +08:00
openeuler-ci-bot
be34b9c884
!172 [sync] PR-164: 修复tpcm功能问题,并忽略因ebs权限不足导致的签名失败
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2024-05-09 07:08:32 +00:00
jinlun
c0e91e0d54 Fix the TPCM feature issue, and ignore signing failures
due to insufficient permissions.

(cherry picked from commit 51c12eb1c8134e46457ecbccbf7bebf69821dd72)
2024-05-08 18:09:49 +08:00
openeuler-ci-bot
bc363267fd
!159 [sync] PR-150: Interface for replacing the EFI signature
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2024-05-07 08:25:58 +00:00
jinlun
c9650486f6 Interface for replacing the EFI signature
(cherry picked from commit 4f336add1a901d239d7e16bae7a6de767b1eb020)
2024-04-01 14:41:55 +08:00
openeuler-ci-bot
fc10cf6bd5
!154 [sync] PR-152: 【Mainline】Backport patch from upstream
From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2024-03-28 07:27:32 +00:00
yixiangzhike
2a397fb381 Backport patch from upstream
(cherry picked from commit 65d0919c62bdfa8a40ba21cf33d80413f92f25a6)
2024-03-25 20:49:51 +08:00
openeuler-ci-bot
b72af9b104
!148 shim模块添加安全启动签名
From: @jinlun123123 
Reviewed-by: @HuaxinLuGitee, @huangzq6 
Signed-off-by: @HuaxinLuGitee
2024-02-28 09:17:54 +00:00
jinlun
2ec03fcf21 shim模块添加安全启动签名 2024-02-28 16:58:41 +08:00
openeuler-ci-bot
3accad21a8
!147 fix CVE-2023-3446 CVE-2023-0465 CVE-2023-2650 CVE-2024-0727
From: @zhengxiaoxiaoGitee 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2024-02-28 06:09:46 +00:00
zhengxiaoxiao
c6d08b7c05 fix CVE-2023-3446 CVE-2023-0465 CVE-2023-2650 CVE-2024-0727 2024-02-28 11:18:10 +08:00
openeuler-ci-bot
ea9e70daff
!138 修复CVE-2023-0464
From: @jinlun123123 
Reviewed-by: @huangzq6, @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2024-02-21 01:34:37 +00:00
jinlun
bc63d61586 fix CVE-2023-0464 2024-02-19 15:53:41 +08:00
openeuler-ci-bot
f0fc62d241
!137 master:shim支持可信计算3.0tpcm特性
From: @jinlun123123 
Reviewed-by: @HuaxinLuGitee, @huangzq6 
Signed-off-by: @HuaxinLuGitee
2024-02-19 06:14:41 +00:00
jinlun
052a50d3f5 add tpcm support with ipmi channel 2024-02-05 11:08:36 +08:00
openeuler-ci-bot
6ecd956536
!129 漏洞修复CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551
From: @jinlun123123 
Reviewed-by: @HuaxinLuGitee, @huangzq6 
Signed-off-by: @HuaxinLuGitee
2024-01-30 01:14:30 +00:00
jinlun
387de7595c fix CVE-2023-40547 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551 2024-01-25 14:52:51 +08:00
openeuler-ci-bot
1a2bd82fa5
!102 修复shimCVE-2023-40546
From: @jinlun123123 
Reviewed-by: @huangzq6, @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2023-11-08 02:39:01 +00:00
jinlun
e02dd67b00 fix CVE-2023-40546 2023-11-07 10:03:26 +08:00
openeuler-ci-bot
e43729a5b3
!94 shim:update version to 15.7
From: @jinlun123123 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2023-07-22 03:42:09 +00:00
jinlun
c21064e554 shim:update version to 15.7 2023-07-18 15:47:29 +08:00
openeuler-ci-bot
879168488b
!89 update openssl version description
From: @yuxiating2021 
Reviewed-by: @huangzq6, @HuaxinLuGitee 
Signed-off-by: @huangzq6, @HuaxinLuGitee
2023-07-11 11:38:38 +00:00
yuxiating
0d6ffed11d update openssl version description
Signed-off-by: yuxiating <yuxiating@xfusion.com>
2023-07-05 16:58:34 +08:00
openeuler-ci-bot
f359ba6200
!81 delete debuginfo subpackage buildarch
From: @fu-shanqing 
Reviewed-by: @jinlun123123, @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2023-03-23 10:54:38 +00:00
fu-shanqing
1adf51038c delete debuginfo subpackage buildarch 2023-02-28 10:35:55 +08:00
openeuler-ci-bot
0061f4faa9
!75 【轻量级 PR】:add code check in shim
From: @jinlun123123 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2023-02-14 15:01:25 +00:00
jinlun
125001ae88
add code check in shim
Signed-off-by: jinlun <jinlun@huawei.com>
2023-02-11 06:33:39 +00:00
openeuler-ci-bot
86ca9859ae
!63 【轻量级 PR】:shim:add edition number
From: @jinlun123123 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2023-01-09 09:14:57 +00:00
jinlun
4b33ab0934
shim:add edition number
Signed-off-by: jinlun <jinlun@huawei.com>
2022-12-13 03:19:58 +00:00
openeuler-ci-bot
080b70949e
!58 add some switch
From: @HuaxinLuGitee 
Reviewed-by: @zhujianwei001 
Signed-off-by: @zhujianwei001
2022-11-21 11:38:13 +00:00
openeuler-ci-bot
eee98029d4
!55 bugfix for SMx feature
From: @HuaxinLuGitee 
Reviewed-by: @zhujianwei001 
Signed-off-by: @zhujianwei001
2022-11-12 09:35:29 +00:00
Huaxin Lu
73c69ded0e add some switch 2022-11-11 15:09:29 +08:00
Huaxin Lu
aa056b2188 Bugfix for SM2 certificate chain verify 2022-11-11 12:16:57 +08:00
openeuler-ci-bot
6b354f7147
!53 【轻量级 PR】:Add BuildRequires on the arrch64
From: @jinlun123123 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee
2022-11-11 02:54:07 +00:00
Huaxin Lu
a4a25552fe bugfix for SMx feature 2022-11-11 10:47:44 +08:00
jinlun
f5ec1e46d9
Add BuildRequires on the arrch64
Signed-off-by: jinlun <jinlun@huawei.com>
2022-11-10 12:40:37 +00:00
openeuler-ci-bot
3618599565
!52 Optimize patches for SMx feature
From: @HuaxinLuGitee 
Reviewed-by: @zhujianwei001 
Signed-off-by: @zhujianwei001
2022-11-08 12:31:48 +00:00
Huaxin Lu
9b8a9d6210 shim optimize SMx support patches 2022-11-07 12:14:47 +08:00
openeuler-ci-bot
bc03634544
!47 shim support SMx verify
From: @HuaxinLuGitee 
Reviewed-by: @zhujianwei001 
Signed-off-by: @zhujianwei001
2022-11-03 06:33:14 +00:00