This bug was fixed in the package edk2 - 2026.05-2ubuntu1
---------------
edk2 (2026.05-2ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2153188). Remaining changes:
- d/rules: remove the relax of strictnx in secure boots variants
d/t/shell.py: remove tests on no-strictnx firmwares
- d/t/shell.py : skip PVSCSI test on s390x host (LP 2143351)
- Add FirmwareSecvarUpdater for adding Microsoft 2023 CAs
to existing VMs (LP 2146560)
- Add integration tests for FirmwareSecvarUpdater (LP 2146560)
- d/control : add dependencies to -hwe components (LP 2143146)
* Dropped changes:
- d/control: Add missing separator, thanks lintian.
[Fixed in Debian 2025.11-4]
- Drop absolute symlink from future orig.tar.gz's
[Fixed in Debian 2025.11-4]
- d/p/no-stack-protector-all-archs.diff: Drop
[Fixed in Debian 2025.11-4]
- d/p/x64-baseline-abi.patch: Refresh.
[Fixed in Debian 2025.11-4]
- d/control, d/rules: Add ovmf-legacy package, shipping an OVMF.legacy.fd
firmware that enables deprecated features such as PVSCSI (LP 2129178)
[Fixed in Debian 2025.11-4]
- d/tests: Add test-case for PVSCSI, using ovmf-legacy
[Fixed in Debian 2025.11-4]
- d/rules: Drop unused OVMF32 flags
[Fixed in Debian 2025.11-4]
- d/rules: Use OVMF_4M_COMMON_FLAGS instead of OVMF_COMMON_FLAGS
for OVMF_4M_NO_SECBOOT_FLAGS
[Fixed in Debian 2025.11-4]
- d/rules: Declare AMDSEV variant flags at the top like others
[Fixed in Debian 2025.11-4]
- SECURITY UPDATE: Out-of-bounds read in HTTP client no_proxy handling
+ debian/patches/CVE-2025-9232.patch: add missing terminating NUL byte
in CryptoPkg/Library/OpensslLib/openssl/crypto/http/http_lib.c.
+ CVE-2025-9232
[Fixed in Debian 2025.11-4]
- debian: python: fix caching issue with shutil.copyfileobj()
[Fixed in Debian 2025.11-5]
- d/p/0006-BaseTools-EfiRom-fix-compiler-warning.patch
Fix FTBFS with glibc2.43 (LP 2142889)
[Fixed in upstream edk2-stable202602]
* The following bugs are fixed in the new merged Debian/Upstream version:
- d/descriptors/60-edk2-x86_64-amdsev.json: set amd sev
descriptor device to memory instead of flash
(LP: #2160129)
[Fixed in Debian 2026.05-2]
edk2 (2026.05-2) unstable; urgency=medium
[ dann frazier ]
* d/rules: Enable hardening flags when building BaseTools.
[ Hector Cao ]
* ovmf-amdsev: descriptors: set amd sev descriptor device to memory
instead of flash.
edk2 (2026.05-1) unstable; urgency=medium
* New upstream release, based on edk2-stable202605 tag.
- Drop patches merged upstream:
+ ArmVirtPkg-ArmPlatformLibQemu-Support-early-ID-map-o.patch
+ OvmfPkg-RiscVVirt-PlatformPei-Do-not-set-PcdTpmBaseA.patch
+ BaseTools-Source-C-VfrCompile-Fix-parallel-make-fail.patch
- Refresh patches:
+ x64-baseline-abi.patch
- The GCC5 toolchain definition has been removed, switch to GCC.
* Apply DBXUpdate-2026-06-30.amd64.bin
* d/watch: Correct version mangling.
* d/rules: Call BaseTools clean target in override_dh_auto_clean.
* d/salsa-ci.yml: Disable some blhc checks that are not relevant for edk2.
* d/*: Reformat with `wrap-and-sort`
* d/salsa-ci.yml: Enable `wrap-and-sort` check.
* d/copyright, d/lrc.config: Now licenserecon clean.
* d/salsa-ci.yml: Enable `licenserecon` check.
* d/README.source: Document initiating a new upstream release.
edk2 (2026.02-3) unstable; urgency=medium
* Try a different backport to hopefully resolve FTBFS on official builders:
- Drop: BaseTools-VfrCompile-Add-pragma-once-support.patch
- Add: BaseTools-Source-C-VfrCompile-Fix-parallel-make-fail.patch
edk2 (2026.02-2) unstable; urgency=medium
* Backport patch adding #pragma once support to BaseTools/VfrCompile,
to hopefully resolve FTBFS:
- BaseTools-VfrCompile-Add-pragma-once-support.patch
edk2 (2026.02-1) unstable; urgency=medium
* New upstream release, based on edk2-stable202602 tag.
- Drop patches merged upstream:
+ fix_nasm_compile.patch
- Refresh patches:
+ brotlicompress-disable.diff
+ x64-baseline-abi.patch
- Replace reverts related to ARM LPA2 mode with upstream fix backport:
+ Drop:
- revert-ArmPkg-UefiCpuPkg-fix-boot-failure-with-LPA2.patch
- revert-MdePkg-UefiCpuPkg-fix-wrong-DS-bit-and-add-he.patch
- revert-UefiCpuPkg-ArmMmuLib-Add-support-for-LPA2.patch
+ Add:
- ArmVirtPkg-ArmPlatformLibQemu-Support-early-ID-map-o.patch
* qemu-efi-riscv64: Backport upstream fix to avoid boot hang:
- OvmfPkg-RiscVVirt-PlatformPei-Do-not-set-PcdTpmBaseA.patch
edk2 (2025.11-5) unstable; urgency=medium
[ Hector Cao ]
* debian: python: fix caching issue with shutil.copyfileobj()
[ Michael Tokarev ]
* d/patches: revert 3 commits related to ARM LPA2 mode, for now:
revert-ArmPkg-UefiCpuPkg-fix-boot-failure-with-LPA2.patch
revert-MdePkg-UefiCpuPkg-fix-wrong-DS-bit-and-add-he.patch
revert-UefiCpuPkg-ArmMmuLib-Add-support-for-LPA2.patch
(Closes: #1124168)
edk2 (2025.11-4) unstable; urgency=medium
[ Lukas Märdian ]
* d/control: Add missing separator, thanks lintian.
* d/p/no-stack-protector-all-archs.diff: Drop. This patch was
added over 10 years ago for ARM and has been cargo-culted ever
since. It's not clear what it fixed, or if it is still necessary.
Let's find out.
* d/p/x64-baseline-abi.patch: Refresh.
* d/control, d/rules: Add ovmf-legacy package, shipping an OVMF.legacy.fd
firmware that enables deprecated features such as PVSCSI (LP #2129178)
* d/tests: Add test-case for PVSCSI, using ovmf-legacy
[ Mate Kukri ]
* d/rules: Drop unused OVMF32 flags
* d/rules: Add NO_STRICTNX_COMMON_FLAGS to OVMF legacy target as well
* d/rules: Use OVMF_4M_COMMON_FLAGS instead of OVMF_COMMON_FLAGS for
OVMF_4M_NO_SECBOOT_FLAGS
* d/rules: Declare AMDSEV variant flags at the top like others
[ Hector Cao ]
* Fix Out-of-bounds read in HTTP client no_proxy handling, CVE-2025-9232
-- Hector Cao <[email protected]> Tue, 18 Aug 2026 12:36:40
+0200
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2153188
Title:
Merge edk2 from Debian for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2153188/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
