[El-errata] ELBA-2021-0564 Oracle Linux 8 dbxtool bug fix and enhancement update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Thu Feb 18 08:57:25 PST 2021
Oracle Linux Bug Fix Advisory ELBA-2021-0564
http://linux.oracle.com/errata/ELBA-2021-0564.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
dbxtool-8-5.0.1.el8_3.2.x86_64.rpm
aarch64:
dbxtool-8-5.0.1.el8_3.2.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dbxtool-8-5.0.1.el8_3.2.src.rpm
Description of changes:
[8-5.0.1.el8_3.2]
- Provide DBX for Oracle X7 and X8 [Orabug: 31682440]
[8-5.el8_3.2]
- Enable manual gating
Related: rhbz#1681753
Related: rhbz#1912474
[8-5.el8_3.1]
- Fix 'EFI Signature List is malformed' error (lersek)
Resolves: rhbz#1912474
[8-5]
- Fix build flags injection (rhbz#1548123)
[8-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
[8-3]
- Also don't return error if we're using --quiet and PK/KEK are absent.
Resolves: rhbz#1489942
[8-2]
- Don't use -f in dbxtool.service; that'll make it do the thing we're
trying to avoid.
Resolves: rhbz#1489942
[8-1]
- Update to dbxtool 8
- Make a "make coverity" rule to scan the source
Results at: https://scan.coverity.com/projects/rhboot-dbxtool
- Don't try to apply anything if PK and KEK aren't enrolled
- Add --force and --quiet for the PK/KEK checker, and use them in the
systemd service.
Resolves: rhbz#1489942
- Add a .syntastic_c_config for vim's Syntastic modules
- Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
- Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
- Lots of minor bug fixes gcc -Wextra and friends found.
[7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
[7-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
[7-4]
- Rebuild for efivar-31-1.fc26
Related: rhbz#1468841
[7-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
[7-2]
- Rebuild for newer efivar.
[7-1]
- Update to version 7
- Add new dbxupdate.bin for CVE-2016-3320 and
https://support.microsoft.com/en-us/kb/3179577
[0.6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
[0.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
[0.6-4]
- Zbigniew Jędrzejewski-Szmek was kind enough to audit the systemd service,
and had some suggestions, as did Harald Hoyer and Lennart Poettering.
Related: rhbz#1181568
[0.6-3]
- Add systemd scriptlets for the service.
[0.6-2]
- Require efivar >= 0.14-1 specifically.
[0.6-1]
- Update to 0.6
- make "dbxtool -l" correctly show not-well-known guids.
[0.5-1]
- Update to 0.5:
- make applying to dbx when it doesn't exist work (lersek)
- make displaying KEK work right
[0.4-1]
- First packaging attempt.
More information about the El-errata
mailing list