Changelog for shim-x64-15-2.el7.centos.x86_64.rpm :

* Fri Feb 22 2019 Fabian Arrotin -15-2.el7.centos- Rebuilt with a patch for non SB machines (Fixes #15522)
* Fri Nov 09 2018 Fabian Arrotin -15-1.el7.centos- Built with CentOS key/cert rolled-in
* Fri Jul 20 2018 Peter Jones - 15-1- Update to shim version 15 Resolves: rhbz#1589962
* Wed Jul 11 2018 Peter Jones - 12-3- Fix broken file owner/modes Resolves: rhbz#1595677
* Sat Jun 23 2018 Peter Jones - 12-2- Fix /boot/efi/... permissions to match the filesystem\'s requirements Related: rhbz#1512749- Minor .spec cleanups Related: rhbz#1512749
* Mon May 01 2017 Peter Jones - 12-1- Update to 12-1 to work around a signtool.exe bug Resolves: rhbz#1445393
* Mon Apr 24 2017 Peter Jones - 11-4- Another shot at better obsoletes. Related: rhbz#1310764
* Mon Apr 24 2017 Peter Jones - 11-3- Fix Obsoletes Related: rhbz#1310764
* Thu Apr 13 2017 Peter Jones - 11-2- Make sure Aarch64 still has shim.efi as well Related: rhbz#1310766
* Wed Apr 12 2017 Peter Jones - 11-1- Rebuild with signed shim Related: rhbz#1310766
* Mon Apr 03 2017 Peter Jones - 11-0.1- Update to 11-0.1 to match shim-11-1 Related: rhbz#1310766- Fix regression in PE loader Related: rhbz#1310766- Fix case where BDS invokes us wrong and we exec shim again as a result Related: rhbz#1310766
* Mon Mar 27 2017 Peter Jones - 10-0.1- Support ia32 Resolves: rhbz#1310766- Handle various different load option implementation differences- TPM 1 and TPM 2 support.- Update to OpenSSL 1.0.2k
* Mon Jul 20 2015 Peter Jones - 0.9-2- Apparently I\'m
*never
* going to learn to build this in the right target the first time through. Related: rhbz#1100048
* Mon Jun 29 2015 Peter Jones - 0.9-0.1- Bump version for 0.9 Also use mokutil-0.3.0 Related: rhbz#1100048
* Tue Jun 23 2015 Peter Jones - 0.7-14.1- Fix mokutil_version usage. Related: rhbz#1100048
* Mon Jun 22 2015 Peter Jones - 0.7-14- Pull in aarch64 build so they can compose that tree. (-14 to match -unsigned) Related: rhbz#1100048
* Wed Feb 25 2015 Peter Jones - 0.7-12- Fix some minor build bugs on Aarch64 Related: rhbz#1190191
* Tue Feb 24 2015 Peter Jones - 0.7-11- Fix section loading on Aarch64 Related: rhbz#1190191
* Wed Dec 17 2014 Peter Jones - 0.7-10- Rebuild for Aarch64 to get \\EFI\\BOOT\\BOOTAA64.EFI named right. (I managed to fix the inputs but not the outputs in -9.) Related: rhbz#1100048
* Wed Dec 17 2014 Peter Jones - 0.7-9- Rebuild for Aarch64 to get \\EFI\\BOOT\\BOOTAA64.EFI named right. Related: rhbz#1100048
* Tue Oct 21 2014 Peter Jones - 0.7-8- Build for aarch64 as well Related: rhbz#1100048- out-of-bounds memory read flaw in DHCPv6 packet processing Resolves: CVE-2014-3675- heap-based buffer overflow flaw in IPv6 address parsing Resolves: CVE-2014-3676- memory corruption flaw when processing Machine Owner Keys (MOKs) Resolves: CVE-2014-3677
* Tue Sep 23 2014 Peter Jones - 0.7-7- Make sure we use the right keys on Aarch64. (It\'s only a demo at this stage.) Related: rhbz#1100048
* Tue Sep 23 2014 Peter Jones - 0.7-6- Add ARM Aarch64. Related: rhbz#1100048
* Thu Feb 27 2014 Peter Jones - 0.7-5.2- Get the right signatures on shim-redhat.efi Related: rhbz#1064449
* Thu Feb 27 2014 Peter Jones - 0.7-5.1- Update for signed shim for RHEL 7 Resolves: rhbz#1064449
* Thu Nov 21 2013 Peter Jones - 0.7-5- Fix shim-unsigned deps. Related: rhbz#1032583
* Thu Nov 21 2013 Peter Jones - 0.7-4- Make dhcp4 work better. Related: rhbz#1032583
* Thu Nov 14 2013 Peter Jones - 0.7-3- Make lockdown include UEFI and other KEK/DB entries. Related: rhbz#1030492
* Fri Nov 08 2013 Peter Jones - 0.7-2- Handle SetupMode better in lockdown as well Related: rhbz#996863
* Wed Nov 06 2013 Peter Jones - 0.7-1- Don\'t treat SetupMode variable\'s presence as meaning we\'re in SetupMode. Related: rhbz#996863
* Wed Nov 06 2013 Peter Jones - 0.6-3- Use the correct CA and signer certificates. Related: rhbz#996863
* Thu Oct 31 2013 Peter Jones - 0.6-1- Update to 0.6-1 Resolves: rhbz#1008379
* Wed Aug 07 2013 Peter Jones - 0.4-3.2- Depend on newer pesign. Related: rhbz#989442
* Tue Aug 06 2013 Peter Jones - 0.4-3.1- Rebuild with newer pesign Related: rhbz#989442
* Tue Aug 06 2013 Peter Jones - 0.4-3- Update for RHEL signing with early test keys. Related: rhbz#989442
* Thu Jun 20 2013 Peter Jones - 0.4-1- Provide a fallback for uninitialized Boot#### and BootOrder Resolves: rhbz#963359- Move all signing from shim-unsigned to here- properly compare our generated hash from shim-unsigned with the hash of the signed binary (as opposed to doing it manually)
* Fri May 31 2013 Peter Jones - 0.2-4.4- Re-sign to get alignments that match the new specification. Resolves: rhbz#963361
* Thu Feb 14 2013 Fedora Release Engineering - 0.2-4.3- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jan 02 2013 Peter Jones - 0.2-3.3- Add obsoletes and provides for earlier shim-signed packages, to cover the package update cases where previous versions were installed. Related: rhbz#888026
* Mon Dec 17 2012 Peter Jones - 0.2-3.2- Make the shim-unsigned dep be on the subpackage.
* Sun Dec 16 2012 Peter Jones - 0.2-3.1- Rebuild to provide \"shim\" package directly instead of just as a Provides:
* Sat Dec 15 2012 Peter Jones - 0.2-3- Also provide shim-fedora.efi, signed only by the fedora signer.- Fix the fedora signature on the result to actually be correct.- Update for shim-unsigned 0.2-3
* Mon Dec 03 2012 Peter Jones - 0.2-2- Initial build