Debian Patches

Status for efitools/1.9.2-3.5

Patch Description Author Forwarded Bugs Origin Last update
makefile-enable-harden-local-files.patch no
fix-deps.patch Fix a typo in the %-blacklist.esl rule This sometimes resulted in FTBFS. Adrian Bunk <bunk@debian.org> no
allow-riscv64-build.patch no
efitools-add-build-support-for-loongarch64.patch Add build support for loongarch64 no 2024-04-17
sbat-compat.patch diff --git a/include/pecoff.h b/include/pecoff.h
index 537d134..6ac57d1 100644		 no
fix-ftbfs-lp2083030.patch Fix FTBFS - Remove redefintions of __STDC_VERSION__
- Add _XOPEN_SOURCE=700 to expose some APIs being used
- Remove dangerous usage of mktemp and sscanf
- Use standard C types over non-standard aliases
- Remove CFLAGS disabling mitigations
- Stop building EFI binaries		 Mate Kukri <mate.kukri@canonical.com> no 2024-09-27
fix-build-stack-protector.patch Make sure stack-protector is disabled, it breaks builds
cc -o cert-to-efi-sig-list cert-to-efi-sig-list.o -g -O3 -Werror=implicit-function-declaration -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -ffile-prefix-map=/efitools-1.9.2=. -flto=auto -ffat-lto-objects -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -fdebug-prefix-map=/efitools-1.9.2=/usr/src/efitools-1.9.2-3.3ubuntu5 -Wl,-Bsymbolic-functions -flto=auto -ffat-lto-objects -Wl,-z,relro -Wl,-z,now lib/lib.a -lcrypto
# check we have no undefined symbols
nm -D HelloWorld.so | grep ' U ' && exit 1 || exit 0
U __stack_chk_fail
make[1]: *** [Make.rules:79: HelloWorld.so] Error 1
rm KeyTool.o DB1.crt ShimReplace.o ReadVars.o SetNull.o HelloWorld.o UpdateVars.o HashTool.o Loader.o DB2.crt
make[1]: Leaving directory '/efitools-1.9.2'
dh_auto_build: error: make -j4 "INSTALL=install --strip-program=true" returned exit code 2
root@Unimatrix04-Noble:/efitools-1.9.2# nm -D HelloWorld.so | grep ' U '
U __stack_chk_fail		 Gianfranco Costamagna <locutusofborg@debian.org> no 2025-03-12
no-efi-on-aarch64.patch Efi binaries building fails on aarch64, for unknown reasons.Disabling it is the fastest way to make the package build there and migrate to testing

Timestamp is 0-0-0 00:00:00
Authentication Payload size 134
Signature of size 1151
Signature at: 40
Invalid DOS header magic
make[1]: *** [Make.rules:136: HelloWorld-signed.efi] Error 1
rm KEK-blacklist.esl SetNull.so KeyTool.o ms-kek.esl DB1.crt DB1.esl PK-hash-blacklist.esl ShimReplace.o ReadVars.o DB2-blacklist.esl ms-kek-blacklist.esl SetNull.o ms-uefi-hash-blacklist.esl HelloWorld.o ms-uefi-blacklist.esl UpdateVars.o KEK-hash-blacklist.esl DB-blacklist.esl HashTool.o DB1-hash-blacklist.esl ms-uefi.esl DB2.esl Loader.o DB2.crt ms-kek-hash-blacklist.esl PK-blacklist.esl DB2-hash-blacklist.esl DB-hash-blacklist.esl DB1-blacklist.esl		 Gianfranco Costamagna <locutusofborg@debian.org> no 2025-03-14

All known versions for source package 'efitools'

Links