We believe that the bug you reported is fixed in the latest version of
edk2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1138847@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
dann frazier <dannf@debian.org> (supplier of updated edk2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 18 Sep 2026 10:30:15 -0600
Source: edk2
Binary: cloudhv-efi-x86-64 efi-shell-aa64 efi-shell-loongarch64 efi-shell-riscv64 efi-shell-x64 ovmf ovmf-amdsev ovmf-generic ovmf-inteltdx ovmf-legacy qemu-efi-aarch64 qemu-efi-loongarch64 qemu-efi-riscv64
Architecture: source all
Version: 2026.05-3
Distribution: unstable
Urgency: medium
Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org>
Changed-By: dann frazier <dannf@debian.org>
Description:
cloudhv-efi-x86-64 - UEFI firmware for x86_64 Cloud Hypervisor virtual machines
efi-shell-aa64 - UEFI Shell for 64-bit ARM architecture
efi-shell-loongarch64 - UEFI Shell for 64-bit LoongArch architecture
efi-shell-riscv64 - UEFI Shell for 64-bit RISC-V architecture
efi-shell-x64 - UEFI Shell for 64-bit x86 architecture
ovmf - UEFI firmware for 64-bit x86 virtual machines
ovmf-amdsev - UEFI firmware for AMD SEV-SNP confidential virtual machines
ovmf-generic - UEFI firmware for 64-bit x86 virtual machines
ovmf-inteltdx - UEFI firmware for Intel TDX confidential virtual machines
ovmf-legacy - UEFI firmware for 64-bit x86 VMs, enabling legacy features
qemu-efi-aarch64 - UEFI firmware for 64-bit ARM virtual machines
qemu-efi-loongarch64 - UEFI firmware for LoongArch64 virtual machines
qemu-efi-riscv64 - UEFI firmware for RISCV64 virtual machines
Closes: 1138847
Changes:
edk2 (2026.05-3) unstable; urgency=medium
.
[ dann frazier ]
* Fix vulnerability leading to the usage of a partition table other
than measured, CVE-2024-13745. (Closes: #1138847)
- d/p/0001-MdeModulePkg-GptLib-Extract-shareable-GPT-parser-int.patch
- d/p/0002-SecurityPkg-DxeTpm2MeasureBootLib-Use-GptLib-parser.patch
- d/p/0003-ArmVirtPkg-Resolve-GptLib-library-class.patch
- d/p/0004-EmulatorPkg-Resolve-GptLib-library-class.patch
- d/p/0005-OvmfPkg-Resolve-GptLib-library-class.patch
- d/p/0006-UefiPayloadPkg-Resolve-GptLib-library-class.patch
- d/p/0007-MdeModulePkg-GptLib-Validate-GPT-header-fields-befor.patch
- d/p/0008-MdeModulePkg-PartitionDxe-Abort-on-primary-GPT-recov.patch
- d/p/0009-SecurityPkg-DxeTpmMeasureBootLib-Use-GptLib-parser.patch
- d/p/0010-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-va.patch
- d/p/0011-MdeModulePkg-GptLib-Add-host-based-unit-tests-for-ma.patch
* d/salsa-ci.yml: Allow failures for blhc and debrebuild.
.
[ Gauthier Jolly ]
* Build the CloudHv firmware target (CLOUDHV.fd) for Cloud Hypervisor.
* Add new cloudhv-efi-x86-64 binary package shipping the PVH ELF firmware.
* Document cloudhv-efi-x86-64 in a README.Debian, and override the lintian
tags CLOUDHV.fd trips as the first ELF firmware image in this source
package.
* d/tests/check-cloudhv.sh: Add a static test to verify that the
CloudHv firmware image is a valid PVH ELF image.
* d/tests/boot-cloudhv.sh: Add an autopkgtest that boots the firmware
under cloud-hypervisor, with no guest image and no kernel. It needs
KVM, and is skipped on vendors that do not derive from Ubuntu, where
cloud-hypervisor is not packaged yet.
Checksums-Sha1:
092748412d49cac91e79e78f366995e04f03a25c 3153 edk2_2026.05-3.dsc
deefa9bea9ccf6f77e7660c5b1b23c56e43ca547 95412 edk2_2026.05-3.debian.tar.xz
5e8face6bf0e1795e403034405e5a6991397e39f 995792 cloudhv-efi-x86-64_2026.05-3_all.deb
f5333705a343995b0f9f079a0ed0b26a8a1dfe4c 14250 edk2_2026.05-3_amd64.buildinfo
d8a3564f2bbd16a3fb06493721ebc27ef11f4ae0 226464 efi-shell-aa64_2026.05-3_all.deb
9d9fa512f10c17e393f1c8c87c6af4de31580be1 276412 efi-shell-loongarch64_2026.05-3_all.deb
8efed6720a59e1231d52c1f932b6a611d483732f 265448 efi-shell-riscv64_2026.05-3_all.deb
7eb14d5458b21262723dcefbb3a2fa4014ec2b4a 255636 efi-shell-x64_2026.05-3_all.deb
db87ded1a979ccfe305635ca0bed291f8f2ad28c 712364 ovmf-amdsev_2026.05-3_all.deb
dc18fe78e036e472957174c0fcecfcad5c1d03f7 7278096 ovmf-generic_2026.05-3_all.deb
219d3aee8ef5fc3bf57d789ae5761a23666f32ee 1191312 ovmf-inteltdx_2026.05-3_all.deb
3094a181b2949e2d1d48ae7f7f09884341326942 1786036 ovmf-legacy_2026.05-3_all.deb
3eeb7077fad873e1c2a4818e5e0dcf1989be74b0 18020 ovmf_2026.05-3_all.deb
90c3012fee19f95128e88e487e1d049e3472037e 5264404 qemu-efi-aarch64_2026.05-3_all.deb
9c24f6e7ccc5137c0e2d2cd6a6bcc07ba80a79dc 1829372 qemu-efi-loongarch64_2026.05-3_all.deb
f991858b5a02b0a384697da80197946b932a4a4f 1501488 qemu-efi-riscv64_2026.05-3_all.deb
Checksums-Sha256:
a5c02fd94500cc025d76599f08b6c1fe6b14c9381eea3d5d8b04f484ec3d4f5e 3153 edk2_2026.05-3.dsc
369e625ffc86603c94a07568da542277e9f4ebe099743b4b5117fcffc003656c 95412 edk2_2026.05-3.debian.tar.xz
58d289d95bebc7fcad6046b2e132a59be5dda9202c75dd2db946636df8411e35 995792 cloudhv-efi-x86-64_2026.05-3_all.deb
e8ee722b101ee42ea4d692dd5925cfc671a248ce390ab4f269b6143334a48af1 14250 edk2_2026.05-3_amd64.buildinfo
8efd2575ef37d29c228612a0d7a863982345b54e384fff731a7de15d6ec16330 226464 efi-shell-aa64_2026.05-3_all.deb
7661514aaac6d0a0c9b665e8a198a56ddefc8766883f93383bdf8d6d8033e3bc 276412 efi-shell-loongarch64_2026.05-3_all.deb
c28309a5c250c24d2629dca47c6f0b2b919280d84dc27dab073737ccc7813990 265448 efi-shell-riscv64_2026.05-3_all.deb
2bc97b3518275ee2eb1855857fbd89f6b0e9ce8ec52e3663a532c9f94dba9dea 255636 efi-shell-x64_2026.05-3_all.deb
40b5299f6f0847ba3a2145019a963a3b361fa10c1181e5bc8f6c36bce676016b 712364 ovmf-amdsev_2026.05-3_all.deb
39da523766d8fad2f05659f666bef7ed944a7efabc1c4c72c452f00163a8f625 7278096 ovmf-generic_2026.05-3_all.deb
7a1f341f7e03aea4d5f659ff25c3b917dde1c00d1b980e91c015f9a9ad4dac65 1191312 ovmf-inteltdx_2026.05-3_all.deb
d2d3622c697d5a1b0abaa33bae2544500906f178a7e95aef1dffcd4b8ac2389c 1786036 ovmf-legacy_2026.05-3_all.deb
de8905c0e273498ac08a0b2552f2dd8622f6529b900c2eca86797a3540be02a4 18020 ovmf_2026.05-3_all.deb
dc62b612c447acb4dbb9539f3f2b53e6ba8b48d0cd059590c3bfcd206bccb9b9 5264404 qemu-efi-aarch64_2026.05-3_all.deb
118ad1e2051e93f15ecc4f2cedde6531079ea64cf12befd8cc504f476a34e9c1 1829372 qemu-efi-loongarch64_2026.05-3_all.deb
399ff6c1a48dac31dd03ea936f98c6d6689fd6b9a89b57be43897c4ec82c83cc 1501488 qemu-efi-riscv64_2026.05-3_all.deb
Files:
2eaa0282897af4836905dd8ef74c93d6 3153 misc optional edk2_2026.05-3.dsc
17a72b2ddc283aa285b29b833117c3e6 95412 misc optional edk2_2026.05-3.debian.tar.xz
c70c1c180805c65911fe60011bbeb7ec 995792 misc optional cloudhv-efi-x86-64_2026.05-3_all.deb
9e8de987da0a53faed09a742d85dd409 14250 misc optional edk2_2026.05-3_amd64.buildinfo
3abcc22192be7df6d9f3279c3f2df772 226464 misc optional efi-shell-aa64_2026.05-3_all.deb
9576abed2c2e8aa57237e755d9b87f85 276412 misc optional efi-shell-loongarch64_2026.05-3_all.deb
d23a0c9c16c2f7614ceb4217dc2dd74c 265448 misc optional efi-shell-riscv64_2026.05-3_all.deb
457582dc736af39e78e67ab2e645c5fc 255636 misc optional efi-shell-x64_2026.05-3_all.deb
3e7d428af80f1368105ef173672f2d4c 712364 misc optional ovmf-amdsev_2026.05-3_all.deb
53448f9745caa583359552781d1cce93 7278096 misc optional ovmf-generic_2026.05-3_all.deb
c1b2086791ca816eb17bece8d4aa466e 1191312 misc optional ovmf-inteltdx_2026.05-3_all.deb
46d14afb8c24aa3e46a609671610bcd0 1786036 misc optional ovmf-legacy_2026.05-3_all.deb
4cb32bdf85e2f5cab749037c165a9a01 18020 misc optional ovmf_2026.05-3_all.deb
6a38594c2b400ce5671ea7077e22ad34 5264404 misc optional qemu-efi-aarch64_2026.05-3_all.deb
badd728590993aac1d0586bb9f554cb7 1829372 misc optional qemu-efi-loongarch64_2026.05-3_all.deb
6d5b4ec1bb46742a6bca1f803aea90cf 1501488 misc optional qemu-efi-riscv64_2026.05-3_all.deb
-----BEGIN PGP SIGNATURE-----
iIcEARYKAC8WIQTmAeOZuZk0cdzmLptwfKEVz+IfkwUCarFG7hEcZGFubmZAZGVi
aWFuLm9yZwAKCRBwfKEVz+Ifk0PnAQC4gqM8pAhDN1isvYwFNBhZhbeBpQFVZD9l
ARVaOLZS3wEA9mWKDDGW7hBMsAfPWYJnAVckH6wEHwKw34FaRKurEwM=
=0JU5
-----END PGP SIGNATURE-----