Compare commits

...

No commits in common. "c10s" and "c8" have entirely different histories.
c10s ... c8

13 changed files with 14 additions and 32 deletions

3
.gitignore vendored
View File

@ -1,2 +1 @@
/shim-*.tar.bz2 SOURCES/shim-15.8.tar.bz2
*.rpm

View File

@ -0,0 +1 @@
cdec924ca437a4509dcb178396996ddf92c11183 SOURCES/shim-15.8.tar.bz2

View File

@ -16,18 +16,18 @@
Name: shim-unsigned-aarch64 Name: shim-unsigned-aarch64
Version: 15.8 Version: 15.8
Release: 4%{?dist} Release: 2.el8
Summary: First-stage UEFI bootloader Summary: First-stage UEFI bootloader
ExclusiveArch: aarch64 ExclusiveArch: aarch64
License: BSD-2-Clause AND OpenSSL License: BSD
URL: https://github.com/rhboot/shim URL: https://github.com/rhboot/shim
Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2 Source0: https://github.com/rhboot/shim/releases/download/%{version}/shim-%{version}.tar.bz2
Source1: securebootca.cer Source1: securebootca.cer
# currently here's what's in our dbx: # currently here's what's in our dbx:
# nothing. # nothing.
Source2: dbx.esl Source2: dbx.esl
Source3: sbat.redhat.csv Source3: sbat.redhat.csv
Source4: shim.patches Source4: shim.patches
Source100: shim-find-debuginfo.sh Source100: shim-find-debuginfo.sh
@ -37,7 +37,7 @@ BuildRequires: gcc make
BuildRequires: elfutils-libelf-devel BuildRequires: elfutils-libelf-devel
BuildRequires: git openssl-devel openssl BuildRequires: git openssl-devel openssl
BuildRequires: pesign >= %{pesign_vre} BuildRequires: pesign >= %{pesign_vre}
BuildRequires: dos2unix findutils BuildRequires: dos2unix findutils
# Shim uses OpenSSL, but cannot use the system copy as the UEFI ABI is not # Shim uses OpenSSL, but cannot use the system copy as the UEFI ABI is not
# compatible with SysV (there's no red zone under UEFI) and there isn't a # compatible with SysV (there's no red zone under UEFI) and there isn't a
@ -89,7 +89,7 @@ MAKEFLAGS+="ENABLE_SHIM_HASH=true "
MAKEFLAGS+="SBAT_AUTOMATIC_DATE=2023012900 " MAKEFLAGS+="SBAT_AUTOMATIC_DATE=2023012900 "
MAKEFLAGS+="%{_smp_mflags}" MAKEFLAGS+="%{_smp_mflags}"
if [ -f "%{SOURCE1}" ]; then if [ -f "%{SOURCE1}" ]; then
MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1} " MAKEFLAGS="$MAKEFLAGS VENDOR_CERT_FILE=%{SOURCE1} "
fi fi
if [ -f "%{SOURCE2}" ]; then if [ -f "%{SOURCE2}" ]; then
MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2} " MAKEFLAGS="$MAKEFLAGS VENDOR_DBX_FILE=%{SOURCE2} "
@ -133,16 +133,13 @@ cd ..
%files debugsource -f build-%{efiarch}/debugsource.list %files debugsource -f build-%{efiarch}/debugsource.list
%changelog %changelog
* Wed Jun 4 2025 Nicolas Frayer <nfrayer@redhat.com> - 15.8-4.el10 * Wed Feb 07 2024 Peter Jones <pjones@redhat.com> - 15.8-2.el8
- spec: license migration to SPDX - Rebuild to fix the commit ident and MAKEFLAGS
- Resolves: #RHEL-95022 Resolves: RHEL-11259
* Thu Mar 13 2025 Nicolas Frayer <nfrayer@redhat.com> - 15.8-3.el10 * Tue Dec 05 2023 Peter Jones <pjones@redhat.com> - 15.8-1.el8
- Update gating.yaml for rhel-10 - Update to shim-15.8 for CVE-2023-40547
- Resolves: #RHEL-83446 Resolves: RHEL-11259
* Thu Mar 6 2025 Nicolas Frayer <nfrayer@redhat.com> - 15.8-2.el10
- Update to shim-15.8
* Tue May 26 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-6 * Tue May 26 2020 Javier Martinez Canillas <javierm@redhat.com> - 15-6
- Fix a shim crash when attempting to netboot - Fix a shim crash when attempting to netboot

8
build
View File

@ -1,8 +0,0 @@
#!/bin/bash
set -e
if [ $# -ne 1 ]; then
echo "usage: ./build <release>" 1>&2
exit 1
fi
arm-koji build $1 `fedpkg giturl`

View File

@ -1,6 +0,0 @@
--- !Policy
product_versions:
- rhel-10
decision_context: osci_compose_gate
rules:
- !PassingTestCaseRule {test_case_name: manual.sst_desktop.shim.functional}

Binary file not shown.

Binary file not shown.

View File

@ -1 +0,0 @@
SHA512 (shim-15.8.tar.bz2) = 30b3390ae935121ea6fe728d8f59d37ded7b918ad81bea06e213464298b4bdabbca881b30817965bd397facc596db1ad0b8462a84c87896ce6c1204b19371cd1