Public bug reported:
A new release of edk2 is available for merging from Debian.
Ubuntu: 2026.05-2ubuntu3
Debian Unstable: 2026.08+ds-2
### New Debian Changes ###
edk2 (2026.08+ds-2) unstable; urgency=medium
* d/watch: Adjust for +ds versioning scheme.
* d/copyright: Add Files-Excluded entry containing the files from
d/binary-check.remove.
* d/tests/control: Drop deprecated skip-not-installable restriction,
thanks lintian. Install cloud-hypervisor at runtime on Ubuntu
derivatives instead, thanks Gauthier Jolly.
* d/salsa-ci.yml: Bump timeouts for test-build-all, test-build-profiles
and test-validate-cleanup to 3h.
* d/rules: Remove empty OvmfPkg/AmdSev/Grub/grub.efi on clean.
-- dann frazier <[email protected]> Sat, 26 Sep 2026 12:14:17 -0600
edk2 (2026.08+ds-1) unstable; urgency=medium
* New upstream release, based on edk2-stable202608
- Drop patches merged upstream:
+ CVE-2025-9232.patch
+ 0001-MdeModulePkg-GptLib-Extract-shareable-GPT-parser-int.patch
+ 0002-SecurityPkg-DxeTpm2MeasureBootLib-Use-GptLib-parser.patch
+ 0003-ArmVirtPkg-Resolve-GptLib-library-class.patch
+ 0004-EmulatorPkg-Resolve-GptLib-library-class.patch
+ 0005-OvmfPkg-Resolve-GptLib-library-class.patch
+ 0006-UefiPayloadPkg-Resolve-GptLib-library-class.patch
+ 0007-MdeModulePkg-GptLib-Validate-GPT-header-fields-befor.patch
+ 0008-MdeModulePkg-PartitionDxe-Abort-on-primary-GPT-recov.patch
+ 0009-SecurityPkg-DxeTpmMeasureBootLib-Use-GptLib-parser.patch
+ 0010-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-va.patch
+ 0011-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-ma.patch
- Refresh patches:
+ x64-baseline-abi.patch
* Apply DBXUpdate-2026-09-09.amd64.bin and DBXUpdate-2026-09-09.arm64.bin
-- dann frazier <[email protected]> Tue, 22 Sep 2026 11:05:16 -0400
edk2 (2026.05-3) unstable; urgency=medium
[ dann frazier ]
* Fix vulnerability leading to the usage of a partition table other
than measured, CVE-2024-13745. (Closes: #1138847)
- d/p/0001-MdeModulePkg-GptLib-Extract-shareable-GPT-parser-int.patch
- d/p/0002-SecurityPkg-DxeTpm2MeasureBootLib-Use-GptLib-parser.patch
- d/p/0003-ArmVirtPkg-Resolve-GptLib-library-class.patch
- d/p/0004-EmulatorPkg-Resolve-GptLib-library-class.patch
- d/p/0005-OvmfPkg-Resolve-GptLib-library-class.patch
- d/p/0006-UefiPayloadPkg-Resolve-GptLib-library-class.patch
- d/p/0007-MdeModulePkg-GptLib-Validate-GPT-header-fields-befor.patch
- d/p/0008-MdeModulePkg-PartitionDxe-Abort-on-primary-GPT-recov.patch
- d/p/0009-SecurityPkg-DxeTpmMeasureBootLib-Use-GptLib-parser.patch
- d/p/0010-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-va.patch
- d/p/0011-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-ma.patch
* d/salsa-ci.yml: Allow failures for blhc and debrebuild.
[ Gauthier Jolly ]
* Build the CloudHv firmware target (CLOUDHV.fd) for Cloud Hypervisor.
* Add new cloudhv-efi-x86-64 binary package shipping the PVH ELF firmware.
* Document cloudhv-efi-x86-64 in a README.Debian, and override the lintian
tags CLOUDHV.fd trips as the first ELF firmware image in this source
package.
* d/tests/check-cloudhv.sh: Add a static test to verify that the
CloudHv firmware image is a valid PVH ELF image.
* d/tests/boot-cloudhv.sh: Add an autopkgtest that boots the firmware
under cloud-hypervisor, with no guest image and no kernel. It needs
KVM, and is skipped on vendors that do not derive from Ubuntu, where
cloud-hypervisor is not packaged yet.
-- dann frazier <[email protected]> Fri, 18 Sep 2026 10:30:15 -0600
### Old Ubuntu Delta ###
edk2 (2026.05-2ubuntu3) stonking; urgency=medium
* Prefer generic firmware for regular guests instead
using amdsev or inteltdx:
- d/descriptors/*: rename amdsev and inteltdx descriptor files.
- d/{ovmf-amdsev,ovmf-inteltdx}.install: update install files.
(LP: #2169887).
-- Hector Cao <[email protected]> Thu, 08 Oct 2026 14:58:05
+0200
edk2 (2026.05-2ubuntu2) stonking; urgency=medium
* d/{rules, hwe-helper/postrm-snippet}: add postrm hook to manage purge race
condition between base/hwe stacks (LP: #2164849)
* d/control: add version constraint for dependency on ubuntu-virt
-- Hector Cao <[email protected]> Wed, 26 Aug 2026 17:07:27
+0200
edk2 (2026.05-2ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2153188). Remaining changes:
- d/rules: remove the relax of strictnx in secure boots variants
d/t/shell.py: remove tests on no-strictnx firmwares
- d/t/shell.py : skip PVSCSI test on s390x host (LP 2143351)
- Add FirmwareSecvarUpdater for adding Microsoft 2023 CAs
to existing VMs (LP 2146560)
- Add integration tests for FirmwareSecvarUpdater (LP 2146560)
- d/control : add dependencies to -hwe components (LP 2143146)
* Dropped changes:
- d/control: Add missing separator, thanks lintian.
[Fixed in Debian 2025.11-4]
- Drop absolute symlink from future orig.tar.gz's
[Fixed in Debian 2025.11-4]
- d/p/no-stack-protector-all-archs.diff: Drop
[Fixed in Debian 2025.11-4]
- d/p/x64-baseline-abi.patch: Refresh.
[Fixed in Debian 2025.11-4]
- d/control, d/rules: Add ovmf-legacy package, shipping an OVMF.legacy.fd
firmware that enables deprecated features such as PVSCSI (LP 2129178)
[Fixed in Debian 2025.11-4]
- d/tests: Add test-case for PVSCSI, using ovmf-legacy
[Fixed in Debian 2025.11-4]
- d/rules: Drop unused OVMF32 flags
[Fixed in Debian 2025.11-4]
- d/rules: Use OVMF_4M_COMMON_FLAGS instead of OVMF_COMMON_FLAGS
for OVMF_4M_NO_SECBOOT_FLAGS
[Fixed in Debian 2025.11-4]
- d/rules: Declare AMDSEV variant flags at the top like others
[Fixed in Debian 2025.11-4]
- SECURITY UPDATE: Out-of-bounds read in HTTP client no_proxy handling
+ debian/patches/CVE-2025-9232.patch: add missing terminating NUL byte
in CryptoPkg/Library/OpensslLib/openssl/crypto/http/http_lib.c.
+ CVE-2025-9232
[Fixed in Debian 2025.11-4]
- debian: python: fix caching issue with shutil.copyfileobj()
[Fixed in Debian 2025.11-5]
- d/p/0006-BaseTools-EfiRom-fix-compiler-warning.patch
Fix FTBFS with glibc2.43 (LP 2142889)
[Fixed in upstream edk2-stable202602]
* The following bugs are fixed in the new merged Debian/Upstream version:
- d/descriptors/60-edk2-x86_64-amdsev.json: set amd sev
descriptor device to memory instead of flash
(LP: #2160129)
[Fixed in Debian 2026.05-2]
-- Hector Cao <[email protected]> Tue, 18 Aug 2026 12:36:40
+0200
** Affects: edk2 (Ubuntu)
Importance: Wishlist
Status: New
** Tags: needs-merge upgrade-software-version
** Changed in: edk2 (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: edk2 (Ubuntu)
Milestone: None => ubuntu-27.01
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171122
Title:
Merge edk2 2026.08+ds-2 from Debian for tenacious cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2171122/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
