[ubuntu/hirsute-proposed] shim_15.4-0ubuntu1_arm64.tar.gz - (Accepted)

[Dimitri John Ledkov]

shim (15.4-0ubuntu1) hirsute; urgency=medium

  [ Dimitri John Ledkov ]
  * New upstream release 15.4 LP: #1921134
    - Update the commit hash in debian/rules
  * debian/rules: add request to sign EFI binaries with archive signing key.
  * debian/rules: stop using ENABLE_SHIM_CERT=1.
  * debian/rules: add canonical 2021 DBX.
  * deiban/rules: start using DISABLE_EBS_PROTECTION=1 to allow
    chainloading shim to shim, and shim to kernel.efi.
  * Add shim-dbg package, skip stripping files.
  * Update watch file, now uscan can generate new upstream tarballs.
  * Upgrade to debhelper 12.
  * Drop gnu-efi build-dep, now vendored upstream.
  * Add debian/rules target to generate gnu-efi components.
  * Do not clean gnu-efi Makefile.orig
  * Remove fallback 5s delay with TPM. LP: #1922581
  * Add xxd build-dep to run unittests.

  [ Chris Coulson ]
  * Drop patches that are fixed upstream:
    - debian/patches/Fix-OBJ_create-to-tolerate-a-NULL-sn-and-ln.patch
    - debian/patches/MokManager-avoid-unaligned.patch
    - debian/patches/tpm-correctness-1.patch
    - debian/patches/tpm-correctness-2.patch
    - debian/patches/tpm-correctness-3.patch
    - debian/patches/MokManager-hidpi-support.patch
    - debian/patches/fix-path-checks.patch
  * Drop the ENABLE_HTTPBOOT option - this is always built now.
    - update debian/rules
  * Add vendor SBAT metadata to shim.
    - add debian/sbat.ubuntu.csv.in
    - update debian/rules
  * Add vendor dbx esl to include-binaries
  * Build-depend on dos2unix
    - update debian/control

Date: Wed, 24 Mar 2021 11:32:25 +0000
Changed-By: Dimitri John Ledkov <xnox at ubuntu.com>
Maintainer: Launchpad Build Daemon <buildd at bos02-arm64-060.buildd>

-------------- next part --------------
Format: 1.8
Date: Wed, 24 Mar 2021 11:32:25 +0000
Source: shim
Binary: shim shim-dbg
Built-For-Profiles: noudeb
Architecture: arm64
Version: 15.4-0ubuntu1
Distribution: hirsute
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at bos02-arm64-060.buildd>
Changed-By: Dimitri John Ledkov <xnox at ubuntu.com>
Description:
 shim       - boot loader to chain-load signed boot loaders under Secure Boot
 shim-dbg   - boot loader to chain-load signed boot loaders under Secure Boot (
Launchpad-Bugs-Fixed: 1921134 1922581
Changes:
 shim (15.4-0ubuntu1) hirsute; urgency=medium
 .
   [ Dimitri John Ledkov ]
   * New upstream release 15.4 LP: #1921134
     - Update the commit hash in debian/rules
   * debian/rules: add request to sign EFI binaries with archive signing key.
   * debian/rules: stop using ENABLE_SHIM_CERT=1.
   * debian/rules: add canonical 2021 DBX.
   * deiban/rules: start using DISABLE_EBS_PROTECTION=1 to allow
     chainloading shim to shim, and shim to kernel.efi.
   * Add shim-dbg package, skip stripping files.
   * Update watch file, now uscan can generate new upstream tarballs.
   * Upgrade to debhelper 12.
   * Drop gnu-efi build-dep, now vendored upstream.
   * Add debian/rules target to generate gnu-efi components.
   * Do not clean gnu-efi Makefile.orig
   * Remove fallback 5s delay with TPM. LP: #1922581
   * Add xxd build-dep to run unittests.
 .
   [ Chris Coulson ]
   * Drop patches that are fixed upstream:
     - debian/patches/Fix-OBJ_create-to-tolerate-a-NULL-sn-and-ln.patch
     - debian/patches/MokManager-avoid-unaligned.patch
     - debian/patches/tpm-correctness-1.patch
     - debian/patches/tpm-correctness-2.patch
     - debian/patches/tpm-correctness-3.patch
     - debian/patches/MokManager-hidpi-support.patch
     - debian/patches/fix-path-checks.patch
   * Drop the ENABLE_HTTPBOOT option - this is always built now.
     - update debian/rules
   * Add vendor SBAT metadata to shim.
     - add debian/sbat.ubuntu.csv.in
     - update debian/rules
   * Add vendor dbx esl to include-binaries
   * Build-depend on dos2unix
     - update debian/control
Checksums-Sha1:
 cdc6b9b2826ebd7cb4ffeb22c6c2efe48c85e042 11964 shim-dbg_15.4-0ubuntu1_arm64.deb
 727e64b1d936cba6a0fec2cbf56b1943966ea6b2 6187 shim_15.4-0ubuntu1_arm64.buildinfo
 a42fbfb04c8240633db9ecafea07af495c347a05 11860 shim_15.4-0ubuntu1_arm64.deb
 4dd9d5bd6a2a62413aa78db6cf69edab8a49062f 638568 shim_15.4-0ubuntu1_arm64.tar.gz
Checksums-Sha256:
 eb182257398a148497c0b9598aed4e84d89ad506436e58d5a0ad9331a621e39d 11964 shim-dbg_15.4-0ubuntu1_arm64.deb
 10fa7e50301639e8e96d8a146bc897445961a9cfbf6df6c7cbc3fda5c87e7958 6187 shim_15.4-0ubuntu1_arm64.buildinfo
 41c81f9ba6853f2d47725e886f101c6086287613decc7f8b5a5660a5fd5280b6 11860 shim_15.4-0ubuntu1_arm64.deb
 fc43a1adadeef8adfb5916a4e1492b9a91e827f0db55910690a3e4475614b628 638568 shim_15.4-0ubuntu1_arm64.tar.gz
Files:
 4687a890df69b75cc6243060750455e4 11964 debug optional shim-dbg_15.4-0ubuntu1_arm64.deb
 c84abcd06f6b897ee0bc28aa75f8804e 6187 admin optional shim_15.4-0ubuntu1_arm64.buildinfo
 67439d2a7eac709baafe364216dd56c5 11860 admin optional shim_15.4-0ubuntu1_arm64.deb
 c04bb3385e8ba856395b70e277a31c45 638568 raw-signing - shim_15.4-0ubuntu1_arm64.tar.gz
Original-Maintainer: Steve Langasek <vorlon at debian.org>