[Bug 2011808] [NEW] [SRU] [HWE] fwupd-efi 1.4

Thu Mar 16 10:12:49 UTC 2023

Public bug reported:

[Impact]
fwupd-efi 1.4 fixes issues with firmware updates on some hardware and is the first release with the NX bit set.

[[Release Notes]]
## 1.3

This release fixes the following bugs:

Fix a regression when applying updates on an HP M60
Fix the ARM system crt0 name
Show the version when starting fwupd-efi

## 1.4

This release fixes the following bugs:

Add additional checks for incompatible CRT0
Align sections to 512 bytes
Generate images that are NX compatible
Use manual symbols mode on ARM32
Use objcopy to build arm/aarch64 binaries for new binutils

[Workflow]
fwupd-efi is built in ppa:ubuntu-uefi-team/ubuntu/ppa against the security  pocket in kinetic only and then binary copied following the in-progress signed boot asset workflow. fwupd-signed are built in the signing PPA in each release separately.

[Test plan]
- Boot it in the VM
- Boot it on real hardware (Julian can check built binary on ThinkPad T14 G3 AMD)

[Where problems could occur]
fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from upgrading their firmware.

[See also]
bug 2011804 for the related gnu-efi update.

** Affects: fwupd-efi (Ubuntu)
     Importance: Undecided
         Status: Fix Released

** Affects: fwupd-efi (Ubuntu Bionic)
     Importance: Undecided
         Status: New

** Affects: fwupd-efi (Ubuntu Focal)
     Importance: Undecided
         Status: New

** Affects: fwupd-efi (Ubuntu Jammy)
     Importance: Undecided
         Status: New

** Affects: fwupd-efi (Ubuntu Kinetic)
     Importance: Undecided
         Status: New

** Affects: fwupd-efi (Ubuntu Lunar)
     Importance: Undecided
         Status: Fix Released

** Description changed:

  [Impact]
  fwupd-efi 1.4 fixes issues with firmware updates on some hardware and is the first release with the NX bit set.

  [Release Notes]
  ## 1.3

  This release fixes the following bugs:

  Fix a regression when applying updates on an HP M60
  Fix the ARM system crt0 name
  Show the version when starting fwupd-efi

  ## 1.4

  This release fixes the following bugs:

  Add additional checks for incompatible CRT0
  Align sections to 512 bytes
  Generate images that are NX compatible
  Use manual symbols mode on ARM32
  Use objcopy to build arm/aarch64 binaries for new binutils

  [Test plan]
  - Boot it in the VM
  - Boot it on real hardware (Julian can check built binary on ThinkPad T14 G3 AMD)

  [Where problems could occur]
  fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from ugprading their firmware.
+ 
+ [See also]
+ bug 2011804 for the related gnu-efi update.

** Description changed:

  [Impact]
  fwupd-efi 1.4 fixes issues with firmware updates on some hardware and is the first release with the NX bit set.
+ 
+ [Workflow]
+ fwupd-efi is built in ppa:ubuntu-uefi-team/ubuntu/ppa against the security  pocket in kinetic only and then binary copied following the in-progress signed boot asset workflow. fwupd-signed are built in the signing PPA in each release separately.

  [Release Notes]
  ## 1.3

  This release fixes the following bugs:

  Fix a regression when applying updates on an HP M60
  Fix the ARM system crt0 name
  Show the version when starting fwupd-efi

  ## 1.4

  This release fixes the following bugs:

  Add additional checks for incompatible CRT0
  Align sections to 512 bytes
  Generate images that are NX compatible
  Use manual symbols mode on ARM32
  Use objcopy to build arm/aarch64 binaries for new binutils

  [Test plan]
  - Boot it in the VM
  - Boot it on real hardware (Julian can check built binary on ThinkPad T14 G3 AMD)

  [Where problems could occur]
  fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from ugprading their firmware.

  [See also]
  bug 2011804 for the related gnu-efi update.

** Also affects: fwupd-efi (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Also affects: fwupd-efi (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: fwupd-efi (Ubuntu Kinetic)
   Importance: Undecided
       Status: New

** Also affects: fwupd-efi (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Also affects: fwupd-efi (Ubuntu Lunar)
   Importance: Undecided
       Status: New

** Changed in: fwupd-efi (Ubuntu Lunar)
       Status: New => Fix Released

** Description changed:

  [Impact]
  fwupd-efi 1.4 fixes issues with firmware updates on some hardware and is the first release with the NX bit set.

  [Workflow]
  fwupd-efi is built in ppa:ubuntu-uefi-team/ubuntu/ppa against the security  pocket in kinetic only and then binary copied following the in-progress signed boot asset workflow. fwupd-signed are built in the signing PPA in each release separately.

  [Release Notes]
  ## 1.3

  This release fixes the following bugs:

  Fix a regression when applying updates on an HP M60
  Fix the ARM system crt0 name
  Show the version when starting fwupd-efi

  ## 1.4

  This release fixes the following bugs:

  Add additional checks for incompatible CRT0
  Align sections to 512 bytes
  Generate images that are NX compatible
  Use manual symbols mode on ARM32
  Use objcopy to build arm/aarch64 binaries for new binutils

  [Test plan]
  - Boot it in the VM
  - Boot it on real hardware (Julian can check built binary on ThinkPad T14 G3 AMD)

  [Where problems could occur]
- fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from ugprading their firmware.
+ fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from upgrading their firmware.

  [See also]
  bug 2011804 for the related gnu-efi update.

** Description changed:

  [Impact]
  fwupd-efi 1.4 fixes issues with firmware updates on some hardware and is the first release with the NX bit set.

- [Workflow]
- fwupd-efi is built in ppa:ubuntu-uefi-team/ubuntu/ppa against the security  pocket in kinetic only and then binary copied following the in-progress signed boot asset workflow. fwupd-signed are built in the signing PPA in each release separately.
- 
- [Release Notes]
+ [[Release Notes]]
  ## 1.3

  This release fixes the following bugs:

  Fix a regression when applying updates on an HP M60
  Fix the ARM system crt0 name
  Show the version when starting fwupd-efi

  ## 1.4

  This release fixes the following bugs:

  Add additional checks for incompatible CRT0
  Align sections to 512 bytes
  Generate images that are NX compatible
  Use manual symbols mode on ARM32
  Use objcopy to build arm/aarch64 binaries for new binutils

+ 
+ [Workflow]
+ fwupd-efi is built in ppa:ubuntu-uefi-team/ubuntu/ppa against the security  pocket in kinetic only and then binary copied following the in-progress signed boot asset workflow. fwupd-signed are built in the signing PPA in each release separately.
+ 
  [Test plan]
  - Boot it in the VM
  - Boot it on real hardware (Julian can check built binary on ThinkPad T14 G3 AMD)

  [Where problems could occur]
  fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from upgrading their firmware.

  [See also]
  bug 2011804 for the related gnu-efi update.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to fwupd-efi in Ubuntu.
https://bugs.launchpad.net/bugs/2011808

Title:
  [SRU] [HWE] fwupd-efi 1.4

Status in fwupd-efi package in Ubuntu:
  Fix Released
Status in fwupd-efi source package in Bionic:
  New
Status in fwupd-efi source package in Focal:
  New
Status in fwupd-efi source package in Jammy:
  New
Status in fwupd-efi source package in Kinetic:
  New
Status in fwupd-efi source package in Lunar:
  Fix Released

Bug description:
  [Impact]
  fwupd-efi 1.4 fixes issues with firmware updates on some hardware and is the first release with the NX bit set.

  [[Release Notes]]
  ## 1.3

  This release fixes the following bugs:

  Fix a regression when applying updates on an HP M60
  Fix the ARM system crt0 name
  Show the version when starting fwupd-efi

  ## 1.4

  This release fixes the following bugs:

  Add additional checks for incompatible CRT0
  Align sections to 512 bytes
  Generate images that are NX compatible
  Use manual symbols mode on ARM32
  Use objcopy to build arm/aarch64 binaries for new binutils

  [Workflow]
  fwupd-efi is built in ppa:ubuntu-uefi-team/ubuntu/ppa against the security  pocket in kinetic only and then binary copied following the in-progress signed boot asset workflow. fwupd-signed are built in the signing PPA in each release separately.

  [Test plan]
  - Boot it in the VM
  - Boot it on real hardware (Julian can check built binary on ThinkPad T14 G3 AMD)

  [Where problems could occur]
  fwupd efi binary could regress on some platforms if there's bugs, preventing people on those platforms from upgrading their firmware.

  [See also]
  bug 2011804 for the related gnu-efi update.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fwupd-efi/+bug/2011808/+subscriptions