Changelog for ipxe-bootimgs-1.21.1+git20240329.764e34f-71.15.i586.rpm :

* Mon Apr 01 2024 william.brownAATTsuse.com- Remove 1082.patch which has an alternative merged upstream- Update to version 1.21.1+git20240329.764e34f:
* [http] Add error table entry for HTTP 404 Not Found error
* [tftp] Add error table entry for TFTP \"file not found\" error code
* [efi] Add error table entry for local filesystem EFI_NOT_FOUND error
* [efi] Report local file errors during download, rather than on opening
* [image] Allow opaque URI component to provide image name
* [build] Fix build failures with random versions of gcc
* [efi] Extract basic network settings from loaded image device path
* [efi] Add efi_path_mac() to parse a MAC address from an EFI device path
* [efi] Add support for driving EFI_MANAGED_NETWORK_PROTOCOL devices
* [efi] Allow for drivers to be located via child handles
* [efi] Add helper functions for service binding protocols
* [efi] Match chainloaded device by uppermost matching handle
* [efi] Set current working URI from our own device path URI, if present
* [efi] Add efi_path_uri() to parse a URI from an EFI device path
* [settings] Expose current working URI and directory URI via settings
* [efi] Pad transmit buffer length to work around vendor driver bugs
* [golan] Use ETH_HLEN for inline header size
* [build] Fix building on older versions of gcc
* [snp] Allocate additional padding for receive buffers
* [ucode] Add support for updating x86 microcode
* [bios] Provide a multiprocessor API for BIOS
* [librm] Add support for installing a startup IPI handler
* [efi] Provide a multiprocessor API for EFI
* [mp] Define an API for multiprocessor functions
* [efi] Update to current EDK2 headers
* [ci] Update action versions to silence GitHub warnings
* [efi] Do not report return status from efi_block_local()
* [block] Allow SAN boot device to be identified by filesystem label
* [block] Allow SAN boot device to be identified by an extra filename
* [block] Allow SAN boot device to be identified by UUID
* [efi] Add efi_path_guid() utility function
* [block] Allow for additional SAN boot parameters alongside filename
* [efi] Allow booting from local disks via the \"sanboot\" command
* [block] Allow for iteration over SAN device list in drive number order
* [efi] Generalise block device boot to support arbitrary EFI handles
* [efi] Use file system protocol to check for SAN boot filename existence
* [block] Use drive number as debug message stream ID
* [efi] Use long forms of device paths in debug messages
* [parseopt] Add parse_uuid() for parsing UUID command-line arguments
* [settings] Add parsing for UUID and GUID settings types
* [uuid] Add uuid_aton() to parse a UUID from a string
* [efi] Work around broken boot services table manipulation by UEFI shim
* [eap] Add support for the MS-CHAPv2 authentication method
* [eap] Allow MD5-Challenge authentication method to be disabled
* [eap] Add progress debug messages
* [efi] Ignore new LoongArch PC-relative relocations and relaxations
* [drivers] Sort PCI_ROM() entries numerically
* [crypto] Force inlining of trivial wrapper functions
* [crypto] Add implementation of MS-CHAPv2 authentication
* [crypto] Allow for multiple cross-signed certificate download attempts
* [crypto] Add x509_is_self_signed() helper function
* [crypto] Add x509_truncate() to truncate a certificate chain
* [list] Add list_for_each_entry_safe_continue()
* [list] Add list_is_head_entry()
* [build] Fix build failures with older versions of gcc
* [libc] Allow build_assert() failures to be ignored via NO_WERROR=1
* [bnxt] Add support for BCM957608
* [crypto] Add implementation of the DES cipher
* [test] Remove dummy initialisation vector for ECB-mode AES tests
* [crypto] Fix stray references to AES
* [tls] Tidy up error handling flow in tls_send_plaintext()
* [efi] Fix hang during ExitBootServices()
* [tls] Add ECDHE cipher suites
* [tls] Make key exchange algorithms selectable via build configuration
* [crypto] Add X25519 OID-identified algorithm and TLS named curve
* [tls] Add support for Ephemeral Elliptic Curve Diffie-Hellman key exchange
* [tls] Split out Diffie-Hellman parameter signature verification
* [tls] Generate key material after sending ClientKeyExchange
* [tls] Restructure construction of ClientHello message
* [crypto] Add an abstraction of an elliptic curve
* [crypto] Check for all-zeros result from X25519 key exchange
* [bnxt] Add support for additional chip IDs
* [crypto] Add X25519 key exchange algorithm
* [loong64] Replace broken big integer arithmetic implementations
* [crypto] Add bigint_swap() to conditionally swap big integers
* [crypto] Add bigint_copy() as a convenient wrapper macro
* [crypto] Allow multiplicand and multiplier to differ in size
* [libc] Replace linker_assert() with build_assert()
* [libc] Make static_assert() available via assert.h
* [build] Fix building with newer binutils
* [build] Remove unnecessary \".text\" directives
* [eap] Add support for the MD5-Challenge authentication type
* [eap] Add support for sending an EAP identity
* [eap] Ignore any received EAP responses
* [build] Reduce scope of wildcard .gitignore rules
* [smbios] Support scanning for the 64-bit SMBIOS3 entry point
* [intel] Add PCI ID for I219-LM (23)
* [efi] Add potentially missing relocation types
* [efi] Fix Coverity warning about unintended sign extension
* [efi] Add relocation types generated by clang
* [build] Use SOURCE_DATE_EPOCH for FAT serial number if it exists
* [efi] Allow compiling elf2efi with clang
* [efi] Avoid modifying PE/COFF debug filename
* [efi] Extend PE header size to cover space up to first section
* [efi] Fix dependency list construction in EDK2 header import script
* [efi] Maximise image base address
* [efi] Do not assume canonical PE section ordering
* [efi] Treat 16-bit sections as hidden in hybrid binaries
* [efi] Place PE debug information in a hidden section
* [efi] Fix recorded overall size of headers in NT optional header
* [efi] Write out PE header only after writing sections
* [efi] Use load memory address as file offset for hybrid binaries
* [efi] Mark PE images as large address aware
* [efi] Set NXCOMPAT bit in PE header
* [efi] Treat writable sections as data sections
* [efi] Update to current EDK2 headers
* [cloud] Add utility script to read iPXE output from INT13CON partition
* [cloud] Add ability to overwrite existing AMI images
* [eapol] Limit number of EAPoL-Start packets transmitted per attempt
* [eapol] Delay EAPoL-Start while waiting for EAP to complete
* [pci] Require discovery of a PCI device when determining usable PCI APIs
* [pci] Check that ECAM configuration space is within reachable memory
* [pci] Cache ECAM mapping errors
* [pci] Handle non-zero starting bus in ECAM allocations
* [pci] Force completion of ECAM configuration space writes
* [iphone] Add missing va_start()/va_end() around reused argument list
* Mon Nov 20 2023 Bernhard Wiedemann - Add 1082.patch to make ipxe.sdsk build reproducible (boo#1062303)
* Mon Nov 06 2023 Dominique Leuenberger - Fix build with RPM 4.19: unnumbered patches are no longer supported.
* Wed Oct 18 2023 Michal Suchanek - Add floppy disk image.
* use syslinux-mtools for building the image syslinux-mtools.patch
* Wed Oct 18 2023 Michal Suchanek - Update to version 1.21.1+git20231006.ff0f8604:
* [libc] Use wall clock time as seed for the (non-cryptographic) RNG
* [eapol] Send EAPoL-Start packets to trigger EAP authentication
* [eap] Define a supplicant model for EAP and EAPoL
* [dhcp] Request NTP server option
* [ntp] Define NTP server setting
* [efi] Provide read-only access to EFI variables via settings mechanism
* [crypto] Add support for PKCS#8 private key format
* [efi] Add support for executing images via a shim
* [image] Generalise concept of selected image
* [tls] Handle fragmented handshake records (jsc#PED-5536)
* [params] Allow for arbitrary HTTP request headers to be specified
* [rng] Allow entropy source to be selected at runtime
* [efi] Support the initrd autodetection mechanism in newer Linux kernels
* [loong64] Add initial support for LoongArch64
* [efi] Enable NET_PROTO_LLDP by default
* [dhcp] Ignore DHCPNAK unless originating from the selected DHCP server
* [xen] Update to current Xen headers
* [efi] Allow autoexec script to be located alongside iPXE binary
* [efi] Accept a command line passed to an iPXE image via LoadOptions
* [efi] Update to current EDK2 headers
* [golan] Add new PCI ID for NVIDIA BlueField-3 network device
* [arm] Support building as a Linux userspace binary for AArch64
* Wed Aug 23 2023 Héctor Orón Martínez - enable HTTPS downloads (jsc#PED-5536)
* Mon Feb 06 2023 Egbert Eich - cross-aarch64-gcc7 is not available for SLE-15 (i586). Also, there is no Leap port for i586, so let\'s disable aarch64 cross-compile target on i586 (bsc#1207796).
* Mon Jan 23 2023 Christian Goll - enable compressed images
* Fri Jan 20 2023 msuchanekAATTsuse.com- Update to version 1.21.1+git20230120.a99e435c:
* [efi] Do not rely on ProcessorBind.h when building host binaries (bsc#1207310)
* multiple [ena] [efi] [tls] [intel] [intelxl] enhancements
* [image] Do not clear current working URI when executing embedded image
* [console] Fix definition of unreachability for remapped keys
* [console] Add Swedish \"se\" keymap
* [efi] Support keyboard remapping via the EFI console
* [usb] Support keyboard remapping via the native USB keyboard driver
* [ecm] Use ACPI-provided system-specific MAC address if present- Build on all architectures (jsc#PED-1148)
* Thu Jan 19 2023 Bernhard Wiedemann - Make bootimgs subpackage architecture-specific
* Mon Jun 20 2022 Dominique Leuenberger - Use the default gcc version in Tumbleweed builds.
* Sun May 22 2022 Ferdinand Thiessen - Update to version 1.21.1+git20210908.02ec659b:
* [acpi] Generalise DSDT/SSDT data extraction logic
* [efi] Record cached ProxyDHCPOFFER and PXEBSACK, if present
* [efi] Use zero for PCI vendor/device IDs when no applicable ID exists
* [cloud] Retry DHCP aggressively in AWS EC2
* [efi] Match signtool expectations for file alignment
* [libc] Allow for externally-defined LITTLE_ENDIAN and BIG_ENDIAN constants
* [uri] Make URI schemes case-insensitive
* [rdc] Add driver for RDC R6040 embedded NIC
* [realtek] Work around hardware bug on RTL8211B
* [cloud] Show ifstat output after a failed boot attempt
* [peerdist] Assume that most recently discovered peer can be reused- Fixes build on Leap- Add workaround for building with GCC12 (Factory)
* Sun May 22 2022 Ferdinand Thiessen - Fix version, base version, starting with 1.20.1+git20210604.065dce8d, was 1.21.1 not 1.20.1 as 1.21.1 was released December 2020. So current version is: 1.21.1+git20210614.bf4ccd42
* Thu Jun 17 2021 Guillaume GARDET - Since last update, syslinux is required to build the ISO but it is available only on x86
*, so disable ISO build for non-x86
*
* Mon Jun 14 2021 bwiedemannAATTsuse.com- Update to version 1.20.1+git20210614.bf4ccd42:
* [build] Ensure build ID is deterministic (boo#1047218)
* [efi] Veto the Itautec Ip4ConfigDxe driver
* [libc] Match standard prototype for putchar()
* [base64] Include terminating NUL within base64 character array
* [rndis] Fix size of reserved fields
* Fri Jun 04 2021 bwiedemannAATTsuse.com- use xorrisofs for creating iso- Update to version 1.20.1+git20210604.065dce8d:
* [ath5k] Avoid returning uninitialised data on EEPROM read errors
* [crypto] Add memory output constraints for big-integer inline assembly
* [build] Use SOURCE_DATE_EPOCH for isohybrid MBR ID if it exists
* [build] Use SOURCE_DATE_EPOCH for .iso timestamps if it exists
* [cpio] Split out bzImage initrd CPIO header construction
* [x509] Use case-insensitive comparison for certificate names
* [libc] Add strncasecmp()
* [bnxt] Use hexadecimal values in PCI_ROM entries
* [intel] Add PCI ID for I219-V and -LM 10 to 15
* [image] Support archive image formats independently of \"imgextract\" command
* [image] Propagate trust flag to extracted archive images
* [image] Allow single-member archive images to be executed transparently
* [undi] Read TSC only when profiling
* [rng] Check for TSC support before using RTC entropy source
* [prefix] Specify i486 architecture for LZMA decompressor
* [gzip] Add support for gzip archive images
* [zlib] Add support for zlib archive images
* [image] Add \"imgextract\" command for extracting archive images
* [image] Provide image_set_len() utility function
* [cloud] Allow multiple images to be imported simultaneously
* [cloud] Attempt to include CPUID_SETTINGS only for x86 builds
* [cloud] Autodetect CPU architecture from AMI disk image
* [cloud] Use a sortable default AMI name
* [cloud] Add ability to generate Dokuwiki table of AMI images
* [settings] Add --timeout option to \"read\" command
* [readline] Add an optional timeout to readline_history()
* [build] Fix genfsimg to build ISO with long filenames
* [xen] Avoid infinite loop on allocation failure in xenstore_response()
* [xen] Support scatter-gather to allow for jumbo frames
* [int13] Do not report INT 13 extension support for emulated floppies
* [cloud] Enable \"poweroff\" command in cloud images
* [netdevice] Ensure driver transmit() and poll() will not be re-entered
* [pci] Avoid scanning nonexistent buses when using PCIAPI_DIRECT
* [intel] Add additional PCI device ID to table
* [dhcp] Handle DHCPNAK by returning to discovery state
* [linux] Do not assume that stat() works on sysfs files
* [linux] Validate length of ACPI table read from sysfs
* [linux] Place -lslirp at end of linker search list
* [linux] Use fstat() rather than statx()
* [linux] Use generic sysfs mechanism to read SMBIOS + ACPI tables
* [linux] Add a generic function for reading files from sysfs
* [linux] Free cached ACPI tables on shutdown
* [dns] Reduce debug verbosity for DNS server list
* [linux] Allow arbitrary settings to be applied to Linux devices
* [linux] Add missing pci_num_bus() stub
* [slirp] Add libslirp driver for Linux
* [linux] Provide ACPI settings via /sys/firmware/acpi/tables
* [acpi] Allow for platforms that provide ACPI tables individually
* [acpi] Eliminate redundant acpi_find_rsdt() in acpi_sx()
* [acpi] Use a fixed colour for debug messages
* [linux] Use host glibc system call wrappers
* [linux] Add a prefix to all symbols to avoid future name collisions
* [bitops] Provide an explicit operand size for bit test instructions
* [librm] Test for FXSAVE/FXRSTOR instruction support
* [librm] Add missing __asmcall on init_idt()
* [prefix] Add a generic raw image prefix
* [initrd] Allow for zero-length initrd files
* [cloud] Do not enable serial console on EFI platforms
* [pxe] Split out platform-independent portions of cachedhcp.c
* [ath5k] Add missing AR5K_EEPROM_READ in ath5k_eeprom_read_turbo_modes
* [cloud] Enable IPv6 and HTTPS in cloud boot images
* [cloud] Add utility for importing images to AWS EC2
* [cloud] Use PCIAPI_DIRECT for cloud images
* [ena] Switch to two-phase reset mechanism
* [ci] Disable redundant scheduled execution of Coverity Scan
* [ci] Disable Travis CI
* [ci] Add GitHub action for Coverity Scan
* [ci] Add GitHub action for build testing
* [contrib] Update bochsrc.txt to work with current versions
* [hermon] Add support for ConnectX-3 based cards
* [autoboot] Avoid closing and immediately reopening network device
* [hermon] Avoid parsing length field on completion errors
* [hermon] Make hermon_dump_xxx() functions no-ops on non-debug builds
* [hermon] Minimise reset time
* [hermon] Throttle debug output when sensing port type
* [hermon] Add a debug notice when initialization is complete
* [hermon] Add support for port management event
* [hermon] Adjust Ethernet work queue size
* [hermon] Use reset value suitable for ConnectX-3
* [hermon] Clean up whitespace in hermon.c
* [iscsi] Update link to iBFT reference manual
* [hermon] Limit link poll frequency in DOWN state
* [hermon] Perform clean MPT unmap on device shutdown
* [hermon] Use Ethernet MAC as eIPoIB local EMAC
* [hermon] Increase polling rate for command completions
* [hermon] Add event queue debug functions
* [hermon] Increase command timeout from 2 to 10 seconds
* [hermon] Add assorted debug error messages
* [hermon] Show \"issuing command\" messages only at DBGLVL_EXTRA
* [hermon] Reorganize PCI ROM list and document well-known product names
* [golan] Backport typo fix in nodnic_prm.h: s/HERMON/NODNIC/
* [arbel] Clean up whitespace in MT25218_PRM.h header
* [hermon] Clean up whitespace in MT25408_PRM.h header
* [image] Implicitly trust first embedded image
* [infiniband] Require drivers to specify the number of ports
* [ifmgmt] Make \"ifstat\" show the link-layer protocol for each netdev
* [cmdline] Expose \"iflinkwait\" as a command
* [image] Provide image_memory()
* [travis] Update to current default build environment
* [tftp] Allow for profiling of client and server turnaround times
* [image] Add the \"imgmem\" command
* [image] Provide image_set_data()
* [ipv6] Defer router discovery timeout while link is blocked
* [dhcp] Allow for links that remained blocked for up to three minutes
* [eap] Treat an EAP Request-Identity as indicating a blocked link
* [eapol] Replace EAPoL code
* [dhcp] Continue transmitting DHCPDISCOVER while link is blocked
* [isa] Add missing #include
* [xhci] Avoid false positive Coverity warning
* [xhci] Show meaningful error messages after command failures
* [xhci] Fail attempts to issue concurrent commands
* [smbios] Add support for the 64-bit SMBIOS3 entry point
* [sfc] Update email addresses
* [x509] Clarify debug message for an untrusted X.509 issuer
* [golan] Add new PCI IDs
* [iphone] Add iPhone tethering driver
* [crypto] Allow private key to be specified as a TLS connection parameter
* [tls] Include root of trust within definition of TLS session
* [x509] Make root of trust a reference-counted structure
* [x509] Record root of trust used when validating a certificate
* [ocsp] Remove dummy OCSP certificate root
* [http] Hide HTTP transport-layer filter implementation details
* [asn1] Define ASN1_SHORT() for constructing short tagged values
* [asn1] Rename ASN1_OID_CURSOR to ASN1_CURSOR
* [asn1] Add constant for UTF-8 string tag
* [tls] Allow provision of a client certificate chain
* [tls] Use intf_insert() to add TLS to an interface
* [interface] Provide intf_insert() to insert a filter interface
* [interface] Ignore any attempts to plug in the null interface
* [xhci] Update driver to use DMA API
* [dma] Provide dma_umalloc() for allocating large DMA-coherent buffers
* [netdevice] Fix misleading comment on netdev_rx()
* [netdevice] Do not attempt to unmap a null I/O buffer
* [dma] Move I/O buffer DMA operations to iobuf.h
* [dma] Record DMA device as part of DMA mapping if needed
* [dma] Modify DMA API to simplify calculation of medial addresses
* [intelxl] Configure DMA mask as 64-bit
* [intel] Configure DMA mask as 64-bit
* [intelxl] Update driver to use DMA API
* [intelxl] Read PCI bus:dev.fn number from PFFUNC_RID register
* [intelxl] Read MAC address from PRTPM_SA[HL] instead of PRTGL_SA[HL]
* [intel] Use physical addresses in debug messages
* [realtek] Use physical addresses in debug messages
* [intel] Update driver to use DMA API
* [realtek] Update driver to use DMA API
* [dma] Define a DMA API to allow for non-flat device address spaces
* [malloc] Rename malloc_dma() to malloc_phys()
* [realtek] Reset NIC when closing interface if using legacy mode
* [infiniband] Allow SRP device to be described using an EFI device path
* [fcp] Allow Fibre Channel device to be described using an EFI device path
* [iscsi] Allow iSCSI device to be described using an EFI device path
* [aoe] Allow AoE device to be described using an EFI device path
* [http] Allow HTTP connection to be described using an EFI device path
* [usbblk] Allow USB block device to be described using an EFI device path
* [interface] Allow for the definition of an unused interface operation
* [ipv6] Reduce time spent waiting for router discovery
* [lacp] Ignore (and do not echo) trailing padding on received packets
* [lacp] Detect and ignore erroneously looped back LACP packets
* [usbblk] Add support for USB mass storage devices
* [usb] Move usbio driver to end of USB driver list
* [usb] Allow endpoints to be refilled to a specified upper limit
* [usb] Allow device halt to be cleared independently of host controller
* [ncm] Treat a zero divisor as indicating no alignment requirements
* [usb] Avoid integer underflow on malformed string descriptors
* [usb] Show debug message on device removal
* [usb] Reset control endpoints immediately after failure
* [pci] Update drivers to use pci_ioremap()
* [pci] Define pci_ioremap() for mapping PCI bus addresses