[Bug 1508926] Re: [MIR] fwupdate

[Michael Terry]

Looked at the -signed version too, it's fine.

What pulls the -signed version in?  Does it need to be seeded or does
something depend on it?

** Also affects: fwupdate-signed (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: fwupdate-signed (Ubuntu)
       Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to fwupdate in Ubuntu.
https://bugs.launchpad.net/bugs/1508926

Title:
  [MIR] fwupdate

Status in fwupdate package in Ubuntu:
  Fix Committed
Status in fwupdate-signed package in Ubuntu:
  Fix Committed

Bug description:
  [Availability]
  fwupdate is available in universe and builds on all the architectures it is designed to work on (amd64, i386, armhf, arm64)

  [Rationale]
  fwupdate is a new EFI component for processing firmware updates for systems which support it. It will be used to allow users to run these upgrades, if their EFI BIOS allows, without the need to boot into Windows since it might not be available to them. This is only available for users with UEFI.

  [Security]
  There are no security reports open for fwupdate. However, fwupdate also ships an EFI binary and as such requires careful security review. Moreover, the fwupdate userland binary writes to ESRT tables in order to speak to the fwupdate EFI binary, so should benefit a security review of its own.

  [Quality assurance]
  Meets requirements. The package currently has bugs filed, but they are already handled although must wait to be fixed as they would require another round of signing of the EFI binary by Microsoft.

  [UI Standards]
  The application is translatable, although currently lacking is translations due to its relative newness.

  [Dependencies]
  All build and binary dependencies are in main.

  [Standards compliance]
  The package meets standards.

  [Maintenance]
  The package is quite small and does not require much effort on our part to maintain, aside from the occasional signing for the fwupdate EFI binary. It is maintained by the Debian EFI team in Debian; and subscribed to by foundations-bugs for Ubuntu.

  [Background information]
  fwupdate is a command-line too as well as an EFI binary for use to enable and apply firmware updates using the UEFI Capsule Update specification, which allows for flashing new firmware on BIOS or system components without requiring the use of a specific operating system, given that it can be done directly from the EFI firmware interfaces.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fwupdate/+bug/1508926/+subscriptions