From f35ed4489fa0271b7a261643fd778d073429e705 Mon Sep 17 00:00:00 2001 From: Peter Jones Date: Tue, 19 Mar 2024 16:15:05 -0400 Subject: [PATCH] Fix fbx64/mmx64 signing. Related: rhbz#2189197 Signed-off-by: Peter Jones --- shim.rpmmacros | 2 ++ shim.spec | 6 +++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/shim.rpmmacros b/shim.rpmmacros index 731464a..9ca2fe7 100644 --- a/shim.rpmmacros +++ b/shim.rpmmacros @@ -6,6 +6,8 @@ %global grub_version 2.06-63 %global fwupd_version 1.5.8 +%define __pesign_client_cert grub2-signer + %global bootcsvaa64 %{expand:%{SOURCE10}} %global bootcsvarm %{expand:%{SOURCE13}} %global bootcsvia32 %{expand:%{SOURCE11}} diff --git a/shim.spec b/shim.spec index 3b5852e..17d363a 100644 --- a/shim.spec +++ b/shim.spec @@ -5,7 +5,7 @@ Name: shim Version: 15.8 -Release: 2%{?dist} +Release: 3%{?dist} Summary: First-stage UEFI bootloader License: BSD-3-Clause URL: https://github.com/rhboot/shim/ @@ -107,6 +107,10 @@ install -m 0644 %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/dnf/protected.d/ %endif %changelog +* Tue Mar 19 2024 Peter Jones - 15.8-3 +- Fix fbx64/mmx64 signing. + Related: rhbz#2189197 + * Tue Mar 12 2024 Peter Jones - 15.8-2 - Update to shim-15.8 Resolves: CVE-2023-40546