Oracle Linux 6245 Published by

A dbxtool bug fix and enhancement update has been released for Oracle Linux 8.



El-errata: ELBA-2021-0564 Oracle Linux 8 dbxtool bug fix and enhancement update


Oracle Linux Bug Fix Advisory ELBA-2021-0564

  http://linux.oracle.com/errata/ELBA-2021-0564.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
dbxtool-8-5.0.1.el8_3.2.x86_64.rpm

aarch64:
dbxtool-8-5.0.1.el8_3.2.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/dbxtool-8-5.0.1.el8_3.2.src.rpm


Description of changes:

[8-5.0.1.el8_3.2]
- Provide DBX for Oracle X7 and X8 [Orabug: 31682440]

[8-5.el8_3.2]
- Enable manual gating
Related: rhbz#1681753
Related: rhbz#1912474

[8-5.el8_3.1]
- Fix 'EFI Signature List is malformed' error (lersek)
Resolves: rhbz#1912474

[8-5]
- Fix build flags injection (rhbz#1548123)

[8-4]
- Rebuilt for   https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[8-3]
- Also don't return error if we're using --quiet and PK/KEK are absent.
Resolves: rhbz#1489942

[8-2]
- Don't use -f in dbxtool.service; that'll make it do the thing we're
trying to avoid.
Resolves: rhbz#1489942

[8-1]
- Update to dbxtool 8
- Make a "make coverity" rule to scan the source
Results at:   https://scan.coverity.com/projects/rhboot-dbxtool
- Don't try to apply anything if PK and KEK aren't enrolled
- Add --force and --quiet for the PK/KEK checker, and use them in the
systemd service.
Resolves: rhbz#1489942
- Add a .syntastic_c_config for vim's Syntastic modules
- Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
- Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
- Lots of minor bug fixes gcc -Wextra and friends found.

[7-6]
- Rebuilt for   https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[7-5]
- Rebuilt for   https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[7-4]
- Rebuild for efivar-31-1.fc26
Related: rhbz#1468841

[7-3]
- Rebuilt for   https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[7-2]
- Rebuild for newer efivar.

[7-1]
- Update to version 7
- Add new dbxupdate.bin for CVE-2016-3320 and
  https://support.microsoft.com/en-us/kb/3179577

[0.6-6]
- Rebuilt for   https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.6-5]
- Rebuilt for   https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.6-4]
- Zbigniew Jędrzejewski-Szmek was kind enough to audit the systemd service,
and had some suggestions, as did Harald Hoyer and Lennart Poettering.
Related: rhbz#1181568

[0.6-3]
- Add systemd scriptlets for the service.

[0.6-2]
- Require efivar >= 0.14-1 specifically.

[0.6-1]
- Update to 0.6
- make "dbxtool -l" correctly show not-well-known guids.

[0.5-1]
- Update to 0.5:
- make applying to dbx when it doesn't exist work (lersek)
- make displaying KEK work right

[0.4-1]
- First packaging attempt.