Commits

Branch selector

 main

User selector

All users

Datepicker

All time

Commit History

Commits on May 8, 2024

• shim: don't set second_stage to the empty string

  Show description for 0287c6b
  

  jjd27

  authored and

  vathpela

  committed
  0287c6b

  Copy full SHA for 0287c6b

• undo change that limits certificate files to a single file

  Show description for 470a8cd
  

  jsetje

  authored and

  vathpela

  committed
  470a8cd

  Copy full SHA for 470a8cd

Commits on Apr 9, 2024

• sbat: Also bump latest for grub,4 (and to todays date)

  Show description for 3e1394e
  

  julian-klode

  authored and

  vathpela

  committed
  3e1394e

  Copy full SHA for 3e1394e

• sbat: Add grub.peimage,2 to latest (CVE-2024-2312)

  Show description for 63edf92
  

  julian-klode

  authored and

  vathpela

  committed
  63edf92

  Copy full SHA for 63edf92

Commits on Mar 19, 2024

• Validate that a supplied vendor cert is not in PEM format

  Show description for 126a07e
  

  Steve McIntyre

  authored and

  steve-mcintyre

  committed
  126a07e

  Copy full SHA for 126a07e

Commits on Jan 22, 2024

• Bump version to 15.8

  Show description for 5914984
  vathpela

  committed
  5914984

  Copy full SHA for 5914984

• gitmodules: use shim-15.8 for gnu-efi branch

  Show description for 1770a03
  vathpela

  committed
  1770a03

  Copy full SHA for 1770a03

• Try to load revocations.efi even if directory read fails

  Show description for 993a345
  

  jsetje

  authored and

  vathpela

  committed
  993a345

  Copy full SHA for 993a345

• netboot read_image() should not hardcode DEFAULT_LOADER

  Show description for a23e2f0
  

  jsetje

  authored and

  vathpela

  committed
  a23e2f0

  Copy full SHA for a23e2f0

• Build time selectable automatic SBATLevel revocations

  Show description for 6f395c2
  

  jsetje

  authored and

  vathpela

  committed
  6f395c2

  Copy full SHA for 6f395c2

• Rename "previous" revocations to "automatic"

  Show description for 30a4f37
  

  jsetje

  authored and

  vathpela

  committed
  30a4f37

  Copy full SHA for 30a4f37

• Suppress "Failed to open <..>\revocations.efi" when file does not exist

  Show description for c46c975
  

  jsetje

  authored and

  vathpela

  committed
  c46c975

  Copy full SHA for c46c975

• pe-relocate: Avoid __builtin_add_overflow() on GCC < 5

  Show description for 13abd9f
  vathpela

  committed
  13abd9f

  Copy full SHA for 13abd9f

• post-process-pe: Don't set the NX_COMPAT flag by default after all.

  Show description for be8ff7c
  vathpela

  committed
  be8ff7c

  Copy full SHA for be8ff7c

• Fix some minor ia32 build issues.

  Show description for 49c6d95
  vathpela

  committed
  49c6d95

  Copy full SHA for 49c6d95

Commits on Jan 17, 2024

• Updated Revocations for January 2024 CVEs

  Show description for 57c0eed
  jsetje

  committed
  57c0eed

  Copy full SHA for 57c0eed

Commits on Dec 5, 2023

• Print errors when setting/clearing memory attrs

  Show description for 6f0c8d2
  vathpela

  committed
  6f0c8d2

  Copy full SHA for 6f0c8d2

• CVE-2023-40547 - avoid incorrectly trusting HTTP headers

  Show description for 0226b56
  vathpela

  committed
  0226b56

  Copy full SHA for 0226b56

• sbat revocations: check the full section name

  Show description for e801b0d
  vathpela

  committed
  e801b0d

  Copy full SHA for e801b0d

• Print message when refusing to apply SbatLevel

  Show description for 577cedd
  

  jsetje

  authored and

  vathpela

  committed
  577cedd

  Copy full SHA for 577cedd

• shim should not self revoke

  Show description for a967c0e
  

  jsetje

  authored and

  vathpela

  committed
  a967c0e

  Copy full SHA for a967c0e

• BS Variables for bootmgr revocations

  Show description for 7dfb687
  

  jsetje

  authored and

  vathpela

  committed
  7dfb687

  Copy full SHA for 7dfb687

• Always clear SbatLevel when Secure Boot is disabled

  Show description for b078ef2
  

  jsetje

  authored and

  vathpela

  committed
  b078ef2

  Copy full SHA for b078ef2

• Allow SbatLevel data from external binary

  Show description for ea0f9df
  

  jsetje

  authored and

  vathpela

  committed
  ea0f9df

  Copy full SHA for ea0f9df

• Further mitigations against CVE-2023-40546 as a class

  Show description for dae82f6
  vathpela

  committed
  dae82f6

  Copy full SHA for dae82f6

• CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system

  Show description for 96dccc2
  vathpela

  committed
  96dccc2

  Copy full SHA for 96dccc2

• CVE-2023-40549 Authenticode: verify that the signature header is in bounds.

  Show description for afdc503
  vathpela

  committed
  afdc503

  Copy full SHA for afdc503

• pe-relocate: Ensure nothing else implements CVE-2023-40550

  Show description for e7f5fdf
  vathpela

  committed
  e7f5fdf

  Copy full SHA for e7f5fdf

• CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat()

  Show description for 93ce255
  vathpela

  committed
  93ce255

  Copy full SHA for 93ce255

• pe-relocate: make read_header() use checked arithmetic operations.

  Show description for e912071
  vathpela

  committed
  e912071

  Copy full SHA for e912071

• CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries

  Show description for 5a5147d
  vathpela

  committed
  5a5147d

  Copy full SHA for 5a5147d

• pe-relocate: Add a fuzzer for read_header()

  Show description for 8372147
  vathpela

  committed
  8372147

  Copy full SHA for 8372147

• Add primitives for overflow-checked arithmetic operations.

  Show description for f271826
  vathpela

  committed
  f271826

  Copy full SHA for f271826

Commits on Oct 19, 2023

• CVE-2023-40546 mok: fix LogError() invocation

  Show description for 66e6579
  

  vathpela

  authored and

  steve-mcintyre

  committed
  66e6579

  Copy full SHA for 66e6579

Commits on Aug 25, 2023

• compile_commands.json: remove stuff clang doesn't like

  Show description for 7ba7440
  vathpela

  committed
  7ba7440

  Copy full SHA for 7ba7440

Pagination

Previous

Next