[ol7_latest_archive] shim-0.7-8.0.1.el7_0.x86_64

Initial UEFI bootloader that handles chaining to a trusted full bootloader
under secure boot environments. This package contains the version signed by
the UEFI signing service.

Changelog (Show File list) (Show related packages)

• Tue Nov 04 2014 Kevin Lyons <kevin.x.lyons@oracle.com> - 0.7-8.0.1

  - Oracle Linux certificates (Alexey Petrenko)

• Thu Oct 16 2014 Peter Jones <pjones@redhat.com> - 0.7-8

  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677

• Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.2

  - Get the right signatures on shim-redhat.efi
    Related: rhbz#1064449

• Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.1

  - Update for signed shim for RHEL 7
    Resolves: rhbz#1064449

• Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-5

  - Fix shim-unsigned deps.
    Related: rhbz#1032583

• Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-4

  - Make dhcp4 work better.
    Related: rhbz#1032583

• Thu Nov 14 2013 Peter Jones <pjones@redhat.com> - 0.7-3

  - Make lockdown include UEFI and other KEK/DB entries.
    Related: rhbz#1030492

• Fri Nov 08 2013 Peter Jones <pjones@redhat.com> - 0.7-2

  - Handle SetupMode better in lockdown as well
    Related: rhbz#996863

• Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.7-1

  - Don't treat SetupMode variable's presence as meaning we're in SetupMode.
    Related: rhbz#996863

• Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.6-3

  - Use the correct CA and signer certificates.
    Related: rhbz#996863