Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

mokutil-15-8.el7 RPM for x86_64

From CentOS 7.9.2009 for x86_64 / Packages

Name: mokutil Distribution: Unknown
Version: 15 Vendor: CentOS
Release: 8.el7 Build date: Fri Jul 31 22:41:40 2020
Group: Unspecified Build host: kbuilder.bsys.centos.org
Size: 83441 Source RPM: shim-signed-15-8.el7.src.rpm
Packager: CentOS BuildSystem <http://bugs.centos.org>
Url: https://github.com/rhboot/shim/
Summary: Utilities for managing Secure Boot/MoK keys.
Utilities for managing the "Machine's Own Keys" list.

Provides

Requires

License

BSD

Changelog

* Fri Jul 31 2020 Peter Jones <pjones@redhat.com> - 15-8.el7
  - Update to fix hang on some systems.
    Resolves: rhbz#1862045
* Tue Jul 28 2020 Peter Jones <pjones@redhat.com> - 15-7
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
* Thu Mar 21 2019 Peter Jones <pjones@redhat.com> - 15-2
  - Fix MoK mirroring issue which breaks kdump without intervention
    Related: rhbz#1649270
* Fri Jul 20 2018 Peter Jones <pjones@redhat.com> - 15-1
  - Update to shim version 15
    Resolves: rhbz#1589962
* Wed Jul 11 2018 Peter Jones <pjones@redhat.com> - 12-3
  - Fix broken file owner/modes
    Resolves: rhbz#1595677
* Sat Jun 23 2018 Peter Jones <pjones@redhat.com> - 12-2
  - Fix /boot/efi/... permissions to match the filesystem's requirements
    Related: rhbz#1512749
  - Minor .spec cleanups
    Related: rhbz#1512749
* Mon May 01 2017 Peter Jones <pjones@redhat.com> - 12-1
  - Update to 12-1 to work around a signtool.exe bug
    Resolves: rhbz#1445393
* Mon Apr 24 2017 Peter Jones <pjones@redhat.com> - 11-4
  - Another shot at better obsoletes.
    Related: rhbz#1310764
* Mon Apr 24 2017 Peter Jones <pjones@redhat.com> - 11-3
  - Fix Obsoletes
    Related: rhbz#1310764
* Thu Apr 13 2017 Peter Jones <pjones@redhat.com> - 11-2
  - Make sure Aarch64 still has shim.efi as well
    Related: rhbz#1310766
* Wed Apr 12 2017 Peter Jones <pjones@redhat.com> - 11-1
  - Rebuild with signed shim
    Related: rhbz#1310766
* Mon Apr 03 2017 Peter Jones <pjones@redhat.com> - 11-0.1
  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766
* Mon Mar 27 2017 Peter Jones <pjones@redhat.com> - 10-0.1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k
* Mon Jul 20 2015 Peter Jones <pjones@redhat.com> - 0.9-2
  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048
* Mon Jun 29 2015 Peter Jones <pjones@redhat.com> - 0.9-0.1
  - Bump version for 0.9
    Also use mokutil-0.3.0
    Related: rhbz#1100048
* Tue Jun 23 2015 Peter Jones <pjones@redhat.com> - 0.7-14.1
  - Fix mokutil_version usage.
    Related: rhbz#1100048
* Mon Jun 22 2015 Peter Jones <pjones@redhat.com> - 0.7-14
  - Pull in aarch64 build so they can compose that tree.
    (-14 to match -unsigned)
    Related: rhbz#1100048
* Wed Feb 25 2015 Peter Jones <pjones@redhat.com> - 0.7-12
  - Fix some minor build bugs on Aarch64
    Related: rhbz#1190191
* Tue Feb 24 2015 Peter Jones <pjones@redhat.com> - 0.7-11
  - Fix section loading on Aarch64
    Related: rhbz#1190191
* Wed Dec 17 2014 Peter Jones <pjones@redhat.com> - 0.7-10
  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    (I managed to fix the inputs but not the outputs in -9.)
    Related: rhbz#1100048
* Wed Dec 17 2014 Peter Jones <pjones@redhat.com> - 0.7-9
  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    Related: rhbz#1100048
* Tue Oct 21 2014 Peter Jones <pjones@redhat.com> - 0.7-8
  - Build for aarch64 as well 
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677
* Tue Sep 23 2014 Peter Jones <pjones@redhat.com> - 0.7-7
  - Make sure we use the right keys on Aarch64.
    (It's only a demo at this stage.)
    Related: rhbz#1100048
* Tue Sep 23 2014 Peter Jones <pjones@redhat.com> - 0.7-6
  - Add ARM Aarch64.
    Related: rhbz#1100048
* Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.2
  - Get the right signatures on shim-redhat.efi
    Related: rhbz#1064449
* Thu Feb 27 2014 Peter Jones <pjones@redhat.com> - 0.7-5.1
  - Update for signed shim for RHEL 7
    Resolves: rhbz#1064449
* Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-5
  - Fix shim-unsigned deps.
    Related: rhbz#1032583
* Thu Nov 21 2013 Peter Jones <pjones@redhat.com> - 0.7-4
  - Make dhcp4 work better.
    Related: rhbz#1032583
* Thu Nov 14 2013 Peter Jones <pjones@redhat.com> - 0.7-3
  - Make lockdown include UEFI and other KEK/DB entries.
    Related: rhbz#1030492
* Fri Nov 08 2013 Peter Jones <pjones@redhat.com> - 0.7-2
  - Handle SetupMode better in lockdown as well
    Related: rhbz#996863
* Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.7-1
  - Don't treat SetupMode variable's presence as meaning we're in SetupMode.
    Related: rhbz#996863
* Wed Nov 06 2013 Peter Jones <pjones@redhat.com> - 0.6-3
  - Use the correct CA and signer certificates.
    Related: rhbz#996863
* Thu Oct 31 2013 Peter Jones <pjones@redhat.com> - 0.6-1
  - Update to 0.6-1
    Resolves: rhbz#1008379
* Wed Aug 07 2013 Peter Jones <pjones@redhat.com> - 0.4-3.2
  - Depend on newer pesign.
    Related: rhbz#989442
* Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.4-3.1
  - Rebuild with newer pesign
    Related: rhbz#989442
* Tue Aug 06 2013 Peter Jones <pjones@redhat.com> - 0.4-3
  - Update for RHEL signing with early test keys.
    Related: rhbz#989442
* Thu Jun 20 2013 Peter Jones <pjones@redhat.com> - 0.4-1
  - Provide a fallback for uninitialized Boot#### and BootOrder
    Resolves: rhbz#963359
  - Move all signing from shim-unsigned to here
  - properly compare our generated hash from shim-unsigned with the hash of
    the signed binary (as opposed to doing it manually)
* Fri May 31 2013 Peter Jones <pjones@redhat.com> - 0.2-4.4
  - Re-sign to get alignments that match the new specification.
    Resolves: rhbz#963361
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2-4.3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Wed Jan 02 2013 Peter Jones <pjones@redhat.com> - 0.2-3.3
  - Add obsoletes and provides for earlier shim-signed packages, to cover
    the package update cases where previous versions were installed.
    Related: rhbz#888026
* Mon Dec 17 2012 Peter Jones <pjones@redhat.com> - 0.2-3.2
  - Make the shim-unsigned dep be on the subpackage.
* Sun Dec 16 2012 Peter Jones <pjones@redhat.com> - 0.2-3.1
  - Rebuild to provide "shim" package directly instead of just as a Provides:
* Sat Dec 15 2012 Peter Jones <pjones@redhat.com> - 0.2-3
  - Also provide shim-fedora.efi, signed only by the fedora signer.
  - Fix the fedora signature on the result to actually be correct.
  - Update for shim-unsigned 0.2-3
* Mon Dec 03 2012 Peter Jones <pjones@redhat.com> - 0.2-2
  - Initial build

Files

/usr/bin/mokutil
/usr/share/bash-completion/completions/mokutil
/usr/share/doc/mokutil-15
/usr/share/doc/mokutil-15/README
/usr/share/licenses/mokutil-15
/usr/share/licenses/mokutil-15/COPYING
/usr/share/man/man1/mokutil.1.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Sun Jun 9 13:31:22 2024