[El-errata] ELBA-2021-0564 Oracle Linux 8 dbxtool bug fix and enhancement update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Thu Feb 18 08:57:25 PST 2021


Oracle Linux Bug Fix Advisory ELBA-2021-0564

http://linux.oracle.com/errata/ELBA-2021-0564.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
dbxtool-8-5.0.1.el8_3.2.x86_64.rpm

aarch64:
dbxtool-8-5.0.1.el8_3.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dbxtool-8-5.0.1.el8_3.2.src.rpm



Description of changes:

[8-5.0.1.el8_3.2]
- Provide DBX for Oracle X7 and X8 [Orabug: 31682440]

[8-5.el8_3.2]
- Enable manual gating
  Related: rhbz#1681753
  Related: rhbz#1912474

[8-5.el8_3.1]
- Fix 'EFI Signature List is malformed' error (lersek)
  Resolves: rhbz#1912474

[8-5]
- Fix build flags injection (rhbz#1548123)

[8-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[8-3]
- Also don't return error if we're using --quiet and PK/KEK are absent.
  Resolves: rhbz#1489942

[8-2]
- Don't use -f in dbxtool.service; that'll make it do the thing we're
  trying to avoid.
  Resolves: rhbz#1489942

[8-1]
- Update to dbxtool 8
- Make a "make coverity" rule to scan the source
  Results at: https://scan.coverity.com/projects/rhboot-dbxtool
- Don't try to apply anything if PK and KEK aren't enrolled
- Add --force and --quiet for the PK/KEK checker, and use them in the
  systemd service.
  Resolves: rhbz#1489942
- Add a .syntastic_c_config for vim's Syntastic modules
- Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
- Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
- Lots of minor bug fixes gcc -Wextra and friends found.

[7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[7-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[7-4]
- Rebuild for efivar-31-1.fc26
  Related: rhbz#1468841

[7-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[7-2]
- Rebuild for newer efivar.

[7-1]
- Update to version 7
- Add new dbxupdate.bin for CVE-2016-3320 and
  https://support.microsoft.com/en-us/kb/3179577

[0.6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.6-4]
- Zbigniew Jędrzejewski-Szmek was kind enough to audit the systemd service,
  and had some suggestions, as did Harald Hoyer and Lennart Poettering.
  Related: rhbz#1181568

[0.6-3]
- Add systemd scriptlets for the service.

[0.6-2]
- Require efivar >= 0.14-1 specifically.

[0.6-1]
- Update to 0.6
- make "dbxtool -l" correctly show not-well-known guids.

[0.5-1]
- Update to 0.5:
- make applying to dbx when it doesn't exist work (lersek)
- make displaying KEK work right

[0.4-1]
- First packaging attempt.



More information about the El-errata mailing list