-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 18 Sep 2026 10:30:15 -0600 Source: edk2 Binary: cloudhv-efi-x86-64 efi-shell-aa64 efi-shell-loongarch64 efi-shell-riscv64 efi-shell-x64 ovmf ovmf-amdsev ovmf-generic ovmf-inteltdx ovmf-legacy qemu-efi-aarch64 qemu-efi-loongarch64 qemu-efi-riscv64 Architecture: source all Version: 2026.05-3 Distribution: unstable Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: dann frazier <dannf@debian.org> Description: cloudhv-efi-x86-64 - UEFI firmware for x86_64 Cloud Hypervisor virtual machines efi-shell-aa64 - UEFI Shell for 64-bit ARM architecture efi-shell-loongarch64 - UEFI Shell for 64-bit LoongArch architecture efi-shell-riscv64 - UEFI Shell for 64-bit RISC-V architecture efi-shell-x64 - UEFI Shell for 64-bit x86 architecture ovmf - UEFI firmware for 64-bit x86 virtual machines ovmf-amdsev - UEFI firmware for AMD SEV-SNP confidential virtual machines ovmf-generic - UEFI firmware for 64-bit x86 virtual machines ovmf-inteltdx - UEFI firmware for Intel TDX confidential virtual machines ovmf-legacy - UEFI firmware for 64-bit x86 VMs, enabling legacy features qemu-efi-aarch64 - UEFI firmware for 64-bit ARM virtual machines qemu-efi-loongarch64 - UEFI firmware for LoongArch64 virtual machines qemu-efi-riscv64 - UEFI firmware for RISCV64 virtual machines Closes: 1138847 Changes: edk2 (2026.05-3) unstable; urgency=medium . [ dann frazier ] * Fix vulnerability leading to the usage of a partition table other than measured, CVE-2024-13745. (Closes: #1138847) - d/p/0001-MdeModulePkg-GptLib-Extract-shareable-GPT-parser-int.patch - d/p/0002-SecurityPkg-DxeTpm2MeasureBootLib-Use-GptLib-parser.patch - d/p/0003-ArmVirtPkg-Resolve-GptLib-library-class.patch - d/p/0004-EmulatorPkg-Resolve-GptLib-library-class.patch - d/p/0005-OvmfPkg-Resolve-GptLib-library-class.patch - d/p/0006-UefiPayloadPkg-Resolve-GptLib-library-class.patch - d/p/0007-MdeModulePkg-GptLib-Validate-GPT-header-fields-befor.patch - d/p/0008-MdeModulePkg-PartitionDxe-Abort-on-primary-GPT-recov.patch - d/p/0009-SecurityPkg-DxeTpmMeasureBootLib-Use-GptLib-parser.patch - d/p/0010-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-va.patch - d/p/0011-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-ma.patch * d/salsa-ci.yml: Allow failures for blhc and debrebuild. . [ Gauthier Jolly ] * Build the CloudHv firmware target (CLOUDHV.fd) for Cloud Hypervisor. * Add new cloudhv-efi-x86-64 binary package shipping the PVH ELF firmware. * Document cloudhv-efi-x86-64 in a README.Debian, and override the lintian tags CLOUDHV.fd trips as the first ELF firmware image in this source package. * d/tests/check-cloudhv.sh: Add a static test to verify that the CloudHv firmware image is a valid PVH ELF image. * d/tests/boot-cloudhv.sh: Add an autopkgtest that boots the firmware under cloud-hypervisor, with no guest image and no kernel. It needs KVM, and is skipped on vendors that do not derive from Ubuntu, where cloud-hypervisor is not packaged yet. Checksums-Sha1: 092748412d49cac91e79e78f366995e04f03a25c 3153 edk2_2026.05-3.dsc deefa9bea9ccf6f77e7660c5b1b23c56e43ca547 95412 edk2_2026.05-3.debian.tar.xz 5e8face6bf0e1795e403034405e5a6991397e39f 995792 cloudhv-efi-x86-64_2026.05-3_all.deb f5333705a343995b0f9f079a0ed0b26a8a1dfe4c 14250 edk2_2026.05-3_amd64.buildinfo d8a3564f2bbd16a3fb06493721ebc27ef11f4ae0 226464 efi-shell-aa64_2026.05-3_all.deb 9d9fa512f10c17e393f1c8c87c6af4de31580be1 276412 efi-shell-loongarch64_2026.05-3_all.deb 8efed6720a59e1231d52c1f932b6a611d483732f 265448 efi-shell-riscv64_2026.05-3_all.deb 7eb14d5458b21262723dcefbb3a2fa4014ec2b4a 255636 efi-shell-x64_2026.05-3_all.deb db87ded1a979ccfe305635ca0bed291f8f2ad28c 712364 ovmf-amdsev_2026.05-3_all.deb dc18fe78e036e472957174c0fcecfcad5c1d03f7 7278096 ovmf-generic_2026.05-3_all.deb 219d3aee8ef5fc3bf57d789ae5761a23666f32ee 1191312 ovmf-inteltdx_2026.05-3_all.deb 3094a181b2949e2d1d48ae7f7f09884341326942 1786036 ovmf-legacy_2026.05-3_all.deb 3eeb7077fad873e1c2a4818e5e0dcf1989be74b0 18020 ovmf_2026.05-3_all.deb 90c3012fee19f95128e88e487e1d049e3472037e 5264404 qemu-efi-aarch64_2026.05-3_all.deb 9c24f6e7ccc5137c0e2d2cd6a6bcc07ba80a79dc 1829372 qemu-efi-loongarch64_2026.05-3_all.deb f991858b5a02b0a384697da80197946b932a4a4f 1501488 qemu-efi-riscv64_2026.05-3_all.deb Checksums-Sha256: a5c02fd94500cc025d76599f08b6c1fe6b14c9381eea3d5d8b04f484ec3d4f5e 3153 edk2_2026.05-3.dsc 369e625ffc86603c94a07568da542277e9f4ebe099743b4b5117fcffc003656c 95412 edk2_2026.05-3.debian.tar.xz 58d289d95bebc7fcad6046b2e132a59be5dda9202c75dd2db946636df8411e35 995792 cloudhv-efi-x86-64_2026.05-3_all.deb e8ee722b101ee42ea4d692dd5925cfc671a248ce390ab4f269b6143334a48af1 14250 edk2_2026.05-3_amd64.buildinfo 8efd2575ef37d29c228612a0d7a863982345b54e384fff731a7de15d6ec16330 226464 efi-shell-aa64_2026.05-3_all.deb 7661514aaac6d0a0c9b665e8a198a56ddefc8766883f93383bdf8d6d8033e3bc 276412 efi-shell-loongarch64_2026.05-3_all.deb c28309a5c250c24d2629dca47c6f0b2b919280d84dc27dab073737ccc7813990 265448 efi-shell-riscv64_2026.05-3_all.deb 2bc97b3518275ee2eb1855857fbd89f6b0e9ce8ec52e3663a532c9f94dba9dea 255636 efi-shell-x64_2026.05-3_all.deb 40b5299f6f0847ba3a2145019a963a3b361fa10c1181e5bc8f6c36bce676016b 712364 ovmf-amdsev_2026.05-3_all.deb 39da523766d8fad2f05659f666bef7ed944a7efabc1c4c72c452f00163a8f625 7278096 ovmf-generic_2026.05-3_all.deb 7a1f341f7e03aea4d5f659ff25c3b917dde1c00d1b980e91c015f9a9ad4dac65 1191312 ovmf-inteltdx_2026.05-3_all.deb d2d3622c697d5a1b0abaa33bae2544500906f178a7e95aef1dffcd4b8ac2389c 1786036 ovmf-legacy_2026.05-3_all.deb de8905c0e273498ac08a0b2552f2dd8622f6529b900c2eca86797a3540be02a4 18020 ovmf_2026.05-3_all.deb dc62b612c447acb4dbb9539f3f2b53e6ba8b48d0cd059590c3bfcd206bccb9b9 5264404 qemu-efi-aarch64_2026.05-3_all.deb 118ad1e2051e93f15ecc4f2cedde6531079ea64cf12befd8cc504f476a34e9c1 1829372 qemu-efi-loongarch64_2026.05-3_all.deb 399ff6c1a48dac31dd03ea936f98c6d6689fd6b9a89b57be43897c4ec82c83cc 1501488 qemu-efi-riscv64_2026.05-3_all.deb Files: 2eaa0282897af4836905dd8ef74c93d6 3153 misc optional edk2_2026.05-3.dsc 17a72b2ddc283aa285b29b833117c3e6 95412 misc optional edk2_2026.05-3.debian.tar.xz c70c1c180805c65911fe60011bbeb7ec 995792 misc optional cloudhv-efi-x86-64_2026.05-3_all.deb 9e8de987da0a53faed09a742d85dd409 14250 misc optional edk2_2026.05-3_amd64.buildinfo 3abcc22192be7df6d9f3279c3f2df772 226464 misc optional efi-shell-aa64_2026.05-3_all.deb 9576abed2c2e8aa57237e755d9b87f85 276412 misc optional efi-shell-loongarch64_2026.05-3_all.deb d23a0c9c16c2f7614ceb4217dc2dd74c 265448 misc optional efi-shell-riscv64_2026.05-3_all.deb 457582dc736af39e78e67ab2e645c5fc 255636 misc optional efi-shell-x64_2026.05-3_all.deb 3e7d428af80f1368105ef173672f2d4c 712364 misc optional ovmf-amdsev_2026.05-3_all.deb 53448f9745caa583359552781d1cce93 7278096 misc optional ovmf-generic_2026.05-3_all.deb c1b2086791ca816eb17bece8d4aa466e 1191312 misc optional ovmf-inteltdx_2026.05-3_all.deb 46d14afb8c24aa3e46a609671610bcd0 1786036 misc optional ovmf-legacy_2026.05-3_all.deb 4cb32bdf85e2f5cab749037c165a9a01 18020 misc optional ovmf_2026.05-3_all.deb 6a38594c2b400ce5671ea7077e22ad34 5264404 misc optional qemu-efi-aarch64_2026.05-3_all.deb badd728590993aac1d0586bb9f554cb7 1829372 misc optional qemu-efi-loongarch64_2026.05-3_all.deb 6d5b4ec1bb46742a6bca1f803aea90cf 1501488 misc optional qemu-efi-riscv64_2026.05-3_all.deb -----BEGIN PGP SIGNATURE----- iIcEARYKAC8WIQTmAeOZuZk0cdzmLptwfKEVz+IfkwUCarFG7hEcZGFubmZAZGVi aWFuLm9yZwAKCRBwfKEVz+Ifk0PnAQC4gqM8pAhDN1isvYwFNBhZhbeBpQFVZD9l ARVaOLZS3wEA9mWKDDGW7hBMsAfPWYJnAVckH6wEHwKw34FaRKurEwM= =0JU5 -----END PGP SIGNATURE-----
