[Bug 1790709] Re: Backport gnu-efi 3.0.8 to all supported releases for SHIM

[Mathieu Trudel-Lapierre]

syslinux 3:6.04~git20171011.af7e95c3+dfsg1-4ubuntu1.18.10.2
verification-done in cosmic:

I've build new d-i images (mini.iso for netboot) in a PPA with the use
of the new syslinux in cosmic-proposed; the images were bootable and
correctly showing the minimal gfxboot menu expected for mini.iso.

So, obviously no issues in rebuilding syslinux with the new version of
gnu-efi.

** Tags removed: verification-needed-cosmic
** Tags added: verification-done-cosmic

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gnu-efi in Ubuntu.
https://bugs.launchpad.net/bugs/1790709

Title:
  Backport gnu-efi 3.0.8 to all supported releases for SHIM

Status in gnu-efi package in Ubuntu:
  Fix Released
Status in syslinux package in Ubuntu:
  Fix Released
Status in gnu-efi source package in Trusty:
  Fix Released
Status in gnu-efi source package in Xenial:
  Fix Released
Status in gnu-efi source package in Bionic:
  Fix Released
Status in syslinux source package in Bionic:
  Fix Committed
Status in gnu-efi source package in Cosmic:
  Fix Released
Status in syslinux source package in Cosmic:
  Fix Committed

Bug description:
  [Impact]
  All users on UEFI systems.

  Gnu-efi needs to be backported everywhere to support new shim
  releases. This applies to bionic, xenial, and trusty.

  This is to properly build the new shim releases on these releases of
  Ubuntu.

  [Test cases]
  -- build tests --
  Validate that the following reverse-dependencies build correctly:

  Reverse-Build-Depends-Indep
  ===========================
  * syslinux

  Reverse-Build-Depends
  =====================
  * dell-recovery
  * efitools
  * fwupd
  * fwupdate
  * kexec-tools
  * refind
  * sbsigntool
  * shim
  * systemd

  Rebuild tests will happen in
  https://launchpad.net/~cyphermox/+archive/ubuntu/rebuild-tests

  
  == Functionality tests ==

  Run the following tests after the packages have been rebuilt against
  the new gnu-efi.

  === mokutil ===
  Validate that mokutil can process:
  - Certificate import: mokutil --import <file.der>
  - List enrolled certificates: mokutil --list-enrolled
  - Set verbosity: mokutil --set-verbosity true

  Reboot, and validate that MokManager processes the requested changes.

  
  [Regression potential]
  gnu-efi is a library that supports applications in handling EFI variables in and outside of the runtime environment, along with supporting standard library features for EFI applications. As such, any application that makes uses of EFI variables on a running system or as their own EFI application should be validated against possible corruption of the contents of the variables, as well as doing smoketesting of the EFI applications themselves for incorrect behavior, crashes, and other runtime issues.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnu-efi/+bug/1790709/+subscriptions