Changelog for shim-unsigned-0.9-1.sl7.x86_64.rpm :
Wed Nov 25 13:00:00 2015 Scientific Linux Auto Patch Process
- Added Source: shim-sl-spec.patch
--> Remove the TUV keys and sign with ours
- Added Source: fnal-sl.cer
--> The FNAL SL signing certificate
- Added Source: shim.ini
--> Config file for automated patch script

Mon Jun 22 14:00:00 2015 Peter Jones - 0.9-1
- Update to 0.9-1
- Fix early call to BS->Exit()
Resolves: rhbz#1115843
- Implement shim on aarch64
Resolves: rhbz#1100048
Resolves: rhbz#1190191

Mon Jun 22 14:00:00 2015 Peter Jones - 0.7-14
- Excise mokutil.
Related: rhbz#1100048

Mon Jun 22 14:00:00 2015 Peter Jones - 0.7-13
- Do a build for Aarch64 to make the tree composable.
Related: rhbz#1100048

Wed Feb 25 13:00:00 2015 Peter Jones - 0.7-10
- Fix a couple more minor bugs aavmf has found in fallback.
Related: rhbz#1190191
- Build lib/ with the right CFLAGS
Related: rhbz#1190191

Tue Feb 24 13:00:00 2015 Peter Jones - 0.7-9
- Fix aarch64 section loading.
Related: rhbz#1190191

Tue Sep 30 14:00:00 2014 Peter Jones - 0.7-8
- Build -8 for arm as well.
Related: rhbz#1100048
- out-of-bounds memory read flaw in DHCPv6 packet processing
Resolves: CVE-2014-3675
- heap-based buffer overflow flaw in IPv6 address parsing
Resolves: CVE-2014-3676
- memory corruption flaw when processing Machine Owner Keys (MOKs)
Resolves: CVE-2014-3677

Tue Sep 23 14:00:00 2014 Peter Jones - 0.7-7
- Use the right key for ARM Aarch64.

Sun Sep 21 14:00:00 2014 Peter Jones - 0.7-6
- Preliminary build for ARM Aarch64.

Tue Feb 18 13:00:00 2014 Peter Jones - 0.7-5
- Update for production signing
Resolves: rhbz#1064424
Related: rhbz#1064449

Thu Nov 21 13:00:00 2013 Peter Jones - 0.7-4
- Make dhcpv4 paths work better when netbooting.
Resolves: rhbz#1032583

Thu Nov 14 13:00:00 2013 Peter Jones - 0.7-3
- Make lockdown include UEFI and other KEK/DB entries.
Resolves: rhbz#1030492

Fri Nov 8 13:00:00 2013 Peter Jones - 0.7-2
- Update lockdown to reflect SetupMode better as well
Related: rhbz#996863

Wed Nov 6 13:00:00 2013 Peter Jones - 0.7-1
- Fix logic to handle SetupMode efi variable.
Related: rhbz#996863

Thu Oct 31 13:00:00 2013 Peter Jones - 0.6-1
- Fix a FreePool(NULL) call on machines too old for SB

Fri Oct 4 14:00:00 2013 Peter Jones - 0.5-1
- Update to 0.5

Tue Aug 6 14:00:00 2013 Peter Jones - 0.4-3
- Build with early RHEL test keys.
Related: rhbz#989442

Thu Jul 25 14:00:00 2013 Peter Jones - 0.4-2
- Fix minor RHEL 7.0 build issues
Resolves: rhbz#978766
- Be less verbose by default

Tue Jun 11 14:00:00 2013 Peter Jones - 0.4-1
- Update to 0.4

Fri Jun 7 14:00:00 2013 Peter Jones - 0.3-2
- Require gnu-efi-3.0q for now.
- Don\'t allow mmx or sse during compilation.
- Re-organize this so all real signing happens in shim-signed instead.
- Split out mokutil

Wed Dec 12 13:00:00 2012 Peter Jones - 0.2-3
- Fix mokutil\'s idea of signature sizes.

Wed Nov 28 13:00:00 2012 Matthew Garrett - 0.2-2
- Fix secure_mode() always returning true

Mon Nov 26 13:00:00 2012 Matthew Garrett - 0.2-1
- Update shim
- Include mokutil
- Add debuginfo package since mokutil is a userspace executable

Mon Oct 22 14:00:00 2012 Peter Jones - 0.1-4
- Produce an unsigned shim

Tue Aug 14 14:00:00 2012 Peter Jones - 0.1-3
- Update how embedded cert and signing work.

Mon Aug 13 14:00:00 2012 Josh Boyer - 0.1-2
- Add patch to fix image size calculation

Mon Aug 13 14:00:00 2012 Matthew Garrett - 0.1-1
- initial release