fix CVE-2023-48733: disable EFI shell in SB mode

[pve-edk2-firmware.git] / debian / changelog

pve-edk2-firmware (4.2023.08-3) bookworm; urgency=medium

  * fixes for "PixieFAIL" PXE vulnerabilities
    - CVE-2023-45229 to CVE-2023-45237

 -- Proxmox Support Team <support@proxmox.com>  Wed, 17 Jan 2024 09:00:02 +0100

pve-edk2-firmware (4.2023.08-2) bookworm; urgency=medium

  * enable deprecated PVSCSI support again for backwards compatibility

 -- Proxmox Support Team <support@proxmox.com>  Fri, 24 Nov 2023 13:57:33 +0100

pve-edk2-firmware (4.2023.08-1) bookworm; urgency=medium

  * update to edk2-stable202308

  * switch to shorter and easier to read version format

  * ship 2MB builds via legacy 2023.02 versions, as upstream dropped support
    for them, to avoid breakage

  * split out ARM64 build into separate package

  * add RISC-V build as separate package

 -- Proxmox Support Team <support@proxmox.com>  Tue, 07 Nov 2023 16:19:26 +0100

pve-edk2-firmware (3.20230228-4) bookworm; urgency=medium

  * limiting the phys-bits to 46 instead of 47 to work around older guest
    kernel bug, e.g., kernel 4.15 on Ubuntu 18.04.

 -- Proxmox Support Team <support@proxmox.com>  Tue, 06 Jun 2023 16:06:21 +0200

pve-edk2-firmware (3.20230228-3) bookworm; urgency=medium

  * re-build for Proxmox VE 8 / Debian Bookworm

  * fix empty AAVMF_VARS.fd file

  * fix #4696: Revert "ArmVirtPkg: make EFI_LOADER_DATA non-executable" until
    GRUB fixes are more generally available.

 -- Proxmox Support Team <support@proxmox.com>  Wed, 24 May 2023 10:53:40 +0200

pve-edk2-firmware (3.20230228-2) bullseye; urgency=medium

  * fix #4625: restore SMBIOS type 0 table defaults

 -- Proxmox Support Team <support@proxmox.com>  Tue, 04 Apr 2023 16:11:23 +0200

pve-edk2-firmware (3.20230228-1) bullseye; urgency=medium

  * update sources to upstream edk2-stable202302 tag

 -- Proxmox Support Team <support@proxmox.com>  Fri, 24 Mar 2023 09:21:50 +0100

pve-edk2-firmware (3.20221111-2) bullseye; urgency=medium

  * d/rules: re-enable PVSCSI support

 -- Proxmox Support Team <support@proxmox.com>  Thu, 23 Mar 2023 11:25:08 +0100

pve-edk2-firmware (3.20221111-1) bullseye; urgency=medium

  * update sources to upstream edk2-stable202211 tag

  * sync in some packaging updates from Debian

 -- Proxmox Support Team <support@proxmox.com>  Tue, 07 Mar 2023 10:04:21 +0100

pve-edk2-firmware (3.20220526-1) bullseye; urgency=medium

  * update sources to upstream edk2-stable202205 tag

 -- Proxmox Support Team <support@proxmox.com>  Tue, 19 Jul 2022 13:47:58 +0200

pve-edk2-firmware (3.20210831-2) bullseye; urgency=medium

  * change default resolution to 1024x768

 -- Proxmox Support Team <support@proxmox.com>  Mon, 15 Nov 2021 16:54:02 +0100

pve-edk2-firmware (3.20210831-1) bullseye; urgency=medium

  * update sources to upstream edk2-stable202108 tag

  * ship secureboot enabled code and EFI-vars images

 -- Proxmox Support Team <support@proxmox.com>  Tue, 05 Oct 2021 14:11:12 +0200

pve-edk2-firmware (3.20200531-2) bullseye; urgency=medium

  * enable TPM support

 -- Proxmox Support Team <support@proxmox.com>  Tue, 05 Oct 2021 08:40:12 +0200

pve-edk2-firmware (3.20200531-1) bullseye; urgency=medium

  * re-build for Debian Bullseye / Proxmox VE 7

 -- Proxmox Support Team <support@proxmox.com>  Thu, 13 May 2021 18:20:01 +0200

pve-edk2-firmware (2.20200531-1) pve; urgency=medium

  * update sources to upstream edk2-stable202005 tag

 -- Proxmox Support Team <support@proxmox.com>  Tue, 09 Jun 2020 13:01:26 +0200

pve-edk2-firmware (2.20200229-1) pve; urgency=medium

  * update sources to upstream edk2-stable202002 tag

 -- Proxmox Support Team <support@proxmox.com>  Thu, 05 Mar 2020 09:52:38 +0100

pve-edk2-firmware (2.20191127-1) pve; urgency=medium

  * update sources to upstream edk2-stable201911 tag

 -- Proxmox Support Team <support@proxmox.com>  Sat, 30 Nov 2019 10:59:14 +0100

pve-edk2-firmware (2.20191002-1) pve; urgency=medium

  * update sources to upstream edk2-stable201908 tag

 -- Proxmox Support Team <support@proxmox.com>  Wed, 02 Oct 2019 17:28:25 +0200

pve-edk2-firmware (2.20190614-1) pve; urgency=medium

  * update sources to upstream edk2-stable201905 tag

 -- Proxmox Support Team <support@proxmox.com>  Mon, 17 Jun 2019 15:55:47 +0200

pve-edk2-firmware (2.20190312-1) pve; urgency=medium

  * bump for Debian Buster / PVE 6

 -- Proxmox Support Team <support@proxmox.com>  Wed, 22 May 2019 14:43:22 +0200

pve-edk2-firmware (1.20190312-1) stable; urgency=medium

  * update sources to upstream edk2-stable201903 tag

  * ship AAVMF to support EFI in ARM64 VMs

 -- Proxmox Support Team <support@proxmox.com>  Tue, 12 Mar 2019 13:38:10 +0100

pve-edk2-firmware (1.20181023-1) stable; urgency=medium

  * update sources to upstream commit

  * ship AAVMF to support EFI in ARM64 VMs

 -- Proxmox Support Team <support@proxmox.com>  Tue, 23 Oct 2018 09:41:49 +0200

pve-edk2-firmware (1.20180612-1) stable; urgency=medium

  * update OVMF to commit 5a56c0493955cf55e7eef96dbba815cfbb067d7d

  * fix issues with USB on passthrough

  * faster boot with multiple disks

 -- Proxmox Support Team <support@proxmox.com>  Tue, 12 Jun 2018 16:36:58 +0200

pve-edk2-firmware (1.20180316-1) stable; urgency=medium

  * updated to newer OVMF release (commit
    d0976b9accedfd1f45fe2f81c59351ed17f34aa0)

  * build from source instead of tracking binary rreleases (BLOBs)

  * split from pve-qemu into separate package

 -- Proxmox Support Team <support@proxmox.com>  Fri, 16 Mar 2018 12:10:02 +0200