[Bug 2011808] Re: [SRU] [HWE] fwupd-efi/1:1.4-0ubuntu0.1 tracker

[Launchpad Bug Tracker]

This bug was fixed in the package fwupd-efi - 1:1.4-0ubuntu0.1

---------------
fwupd-efi (1:1.4-0ubuntu0.1) kinetic; urgency=medium

  * Stable release series backport (LP: #2011808)
  * Remove i386 from list of architectures, we do not build on there in
    the target build release. armhf will continue to receive unsigned
    updates.

fwupd-efi (1:1.4-1) unstable; urgency=medium

  [ Mario Limonciello ]
  * New upstream release.
  * Notable changes:
    - Enforces NX by default.
    - Improvements for aarch64 builds.

  [ Jelmer Vernooij ]
  * Specify branch in Vcs-Git/Vcs-Browser headers

 -- Julian Andres Klode <juliank at ubuntu.com>  Mon, 20 Mar 2023 13:11:14
+0100

** Changed in: fwupd-efi (Ubuntu Kinetic)
       Status: Fix Committed => Fix Released

** Changed in: fwupd-signed (Ubuntu Kinetic)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to fwupd-signed in Ubuntu.
https://bugs.launchpad.net/bugs/2011808

Title:
  [SRU] [HWE] fwupd-efi/1:1.4-0ubuntu0.1 tracker

Status in fwupd-efi package in Ubuntu:
  Fix Released
Status in fwupd-signed package in Ubuntu:
  New
Status in fwupd-efi source package in Bionic:
  Fix Committed
Status in fwupd-signed source package in Bionic:
  Fix Committed
Status in fwupd-efi source package in Focal:
  Fix Committed
Status in fwupd-signed source package in Focal:
  Fix Committed
Status in fwupd-efi source package in Jammy:
  Fix Committed
Status in fwupd-signed source package in Jammy:
  Fix Released
Status in fwupd-efi source package in Kinetic:
  Fix Released
Status in fwupd-signed source package in Kinetic:
  Fix Released
Status in fwupd-efi source package in Lunar:
  Fix Released
Status in fwupd-signed source package in Lunar:
  New

Bug description:
  [Impact]
  fwupd-efi 1.4 fixes issues with firmware updates on some hardware and is the first release with the NX bit set.

  [[Release Notes]]
  ## 1.3

  This release fixes the following bugs:

  Fix a regression when applying updates on an HP M60
  Fix the ARM system crt0 name
  Show the version when starting fwupd-efi

  ## 1.4

  This release fixes the following bugs:

  Add additional checks for incompatible CRT0
  Align sections to 512 bytes
  Generate images that are NX compatible
  Use manual symbols mode on ARM32
  Use objcopy to build arm/aarch64 binaries for new binutils

  [Workflow]
  fwupd-efi is built in ppa:ubuntu-uefi-team/ubuntu/ppa against the security  pocket in kinetic only and then binary copied following the in-progress signed boot asset workflow. fwupd-signed are built in the signing PPA in each release separately.

  [Test plan]
  - Boot it in the VM
  - Boot it on real hardware (Julian can check built binary on ThinkPad T14 G3 AMD)

  [Where problems could occur]
  fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from upgrading their firmware.

  [See also]
  bug 2011804 for the related gnu-efi update.

  [Other info]
  We branched kinetic fwupd-signed packaging off a bit, and hence the versioning is now 1.51.1 (lunar is at 1.52), and it is that 1.51.1 that gets also backported to older releases (reuploaded with ~22.04.1 and similar).

  Some changes were needed for the SRUs due to the fwupd-unsigned build-
  dep being to strong in 1.52, and having to install binaries to
  /usr/lib on bionic.

  This brings it in line with grub2-signed., which also maintains one
  devel series and one stable series.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fwupd-efi/+bug/2011808/+subscriptions