Backport gnu-efi 3.0.8 to all supported releases for SHIM
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gnu-efi (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Trusty |
Fix Released
|
High
|
Unassigned | ||
Xenial |
Fix Released
|
High
|
Unassigned | ||
Bionic |
Fix Released
|
High
|
Unassigned | ||
Cosmic |
Fix Released
|
High
|
Unassigned | ||
syslinux (Ubuntu) |
Fix Released
|
High
|
Mathieu Trudel-Lapierre | ||
Bionic |
Won't Fix
|
High
|
Unassigned | ||
Cosmic |
Fix Released
|
High
|
Unassigned |
Bug Description
[Impact]
All users on UEFI systems.
Gnu-efi needs to be backported everywhere to support new shim releases. This applies to bionic, xenial, and trusty.
This is to properly build the new shim releases on these releases of Ubuntu.
[Test cases]
-- build tests --
Validate that the following reverse-
Reverse-
=======
* syslinux
Reverse-
=======
* dell-recovery
* efitools
* fwupd
* fwupdate
* kexec-tools
* refind
* sbsigntool
* shim
* systemd
Rebuild tests will happen in https:/
== Functionality tests ==
Run the following tests after the packages have been rebuilt against the new gnu-efi.
=== mokutil ===
Validate that mokutil can process:
- Certificate import: mokutil --import <file.der>
- List enrolled certificates: mokutil --list-enrolled
- Set verbosity: mokutil --set-verbosity true
Reboot, and validate that MokManager processes the requested changes.
[Regression potential]
gnu-efi is a library that supports applications in handling EFI variables in and outside of the runtime environment, along with supporting standard library features for EFI applications. As such, any application that makes uses of EFI variables on a running system or as their own EFI application should be validated against possible corruption of the contents of the variables, as well as doing smoketesting of the EFI applications themselves for incorrect behavior, crashes, and other runtime issues.
description: | updated |
tags: |
added: verification-done-bionic verification-done-trusty verification-done-xenial removed: verification-needed verification-needed-bionic verification-needed-trusty verification-needed-xenial |
Changed in syslinux (Ubuntu Bionic): | |
importance: | Undecided → High |
Changed in gnu-efi (Ubuntu): | |
importance: | Undecided → High |
Changed in gnu-efi (Ubuntu Trusty): | |
importance: | Undecided → High |
Changed in gnu-efi (Ubuntu Xenial): | |
importance: | Undecided → High |
Changed in gnu-efi (Ubuntu Bionic): | |
importance: | Undecided → High |
tags: |
added: verification-needed-bionic verification-needed-cosmic removed: verification-failed-bionic |
Changed in gnu-efi (Ubuntu Cosmic): | |
importance: | Undecided → High |
Changed in syslinux (Ubuntu Cosmic): | |
importance: | Undecided → High |
syslinux in bionic and newer need a small fix to avoid FTBFS now that gnu-efi provides memset() and memcpy().