21 Pull requests merged by 15 people

• Add configuration option to boot an alternative 2nd stage

  #608 merged Feb 6, 2025

• Apply EKU check with compile option

  #664 merged Feb 5, 2025

• Generate SbatLevel Metadata from SbatLevel_Variable.txt

  #711 merged Feb 5, 2025

• Multiple certificate handling improvements

  #644 merged Feb 4, 2025

• pe: Enhance debug report for update_mem_attrs

  #594 merged Feb 4, 2025

• test.mk: don't use a temporary random.bin

  #718 merged Feb 4, 2025

• Allow fallback to default loader when encountering errors on network boot

  #666 merged Jan 21, 2025

• Ignore a minor clang-tidy nit

  #716 merged Jan 21, 2025

• Fix file system browser hang when enrolling MOK from disk

  #622 merged Jan 21, 2025

• test-mok-mirror: minor bug fix

  #715 merged Jan 18, 2025

• Test import_mok_state() when MokListRT would be bigger than available size

  #417 merged Jan 17, 2025

• MokManager: remove redundant logical constraints

  #409 merged Jan 17, 2025

• tpm: Boot with a warning if the event log is full

  #657 merged Jan 17, 2025

• Provide better error message when MokManager is not found

  #663 merged Jan 17, 2025

• Improve shortcut performance when comparing two boolean expressions

  #667 merged Jan 15, 2025

• avoid EFIv2 runtime services on Apple x86 machines

  #690 merged Jan 15, 2025

• Increase EFI file alignment

  #673 merged Jan 15, 2025

• Update gnu-efi submodule for EFI_HTTP_ERROR

  #674 merged Jan 15, 2025

• Handle network file not found like disks

  #695 merged Jan 15, 2025

• shim: Allow data after the end of device path node in load options

  #694 merged Jan 15, 2025

• Fix the issue that the gBS->LoadImage pointer was empty.

  #703 merged Jan 15, 2025

2 Pull requests opened by 2 people

• shim: ensure vendor_db gets logged into `db`

  #717 opened Jan 21, 2025

• Document how revocations can be delivered

  #722 opened Feb 5, 2025

3 Issues closed by 1 person

• Too big `dbx` causes Shim to refuse to boot, presumably due to "failure" from `tpm2->hash_log_extend_event()`

  #654 closed Jan 17, 2025

• shim fails to boot on some (older) Aarch64 laptops

  #670 closed Jan 15, 2025

• Strange calls during network boot

  #649 closed Jan 15, 2025

2 Issues opened by 2 people

• load_options is broken.

  #719 opened Jan 24, 2025

• PCR7 change in 15.7+ due to the switch to using MokListRT instead of MokList

  #714 opened Jan 10, 2025

14 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• netboot cleanup for additional files

  #686 commented on Feb 5, 2025 • 3 new comments

• Investigate if OpenSSL (libcrypto) vendored in here can be FIPS certified

  #586 commented on Jan 12, 2025 • 0 new comments

• The latest Microsoft update marks multi-boot setups as "violating security policies."

  #682 commented on Jan 29, 2025 • 0 new comments

• Error when using Shim (at least) 15.8 and DHCP Option 67 with non-Microsoft DHCP server

  #710 commented on Feb 4, 2025 • 0 new comments

• Improving the robustness of value retention for the variable second_stage

  #626 commented on Feb 6, 2025 • 0 new comments

• Reject HTTP message with duplicate Content-Length header fields

  #637 commented on Feb 5, 2025 • 0 new comments

• Updated support for SHIM on RISC-V

  #641 commented on Jan 14, 2025 • 0 new comments

• Fix parallel build of gnu-efi

  #643 commented on Jan 21, 2025 • 0 new comments

• cmac.c: optimize make_kn and move zero_iv to const segment.

  #652 commented on Feb 5, 2025 • 0 new comments

• Add features for the Host Security ID program

  #660 commented on Jan 21, 2025 • 0 new comments

• Load shim_certificates.efi during netboot

  #665 commented on Feb 6, 2025 • 0 new comments

• Add user facing message when SBAT self check fails

  #671 commented on Jan 15, 2025 • 0 new comments

• shim: skip verification for multiple signatures once one of them is matched

  #700 commented on Feb 4, 2025 • 0 new comments

• post-process-pe: add tests to validate NX compliance

  #705 commented on Feb 6, 2025 • 0 new comments