http://open-source-security-software.net/project/edk2/releases.atom Recent releases for edk2 2025-08-29T01:42:34.369688+00:00 python-feedgen edk2 vUDK2017 edk2 vUDK2017 2017-06-23T22:45:58+00:00 # UDK2017 Release Page ## How to build See wiki page [UDK2017 How to Build]( https://github.com/tianocore/tianocore.github.io/wiki/UDK2017#how-to-build-udk2017) on the UDK2017 Release wiki page ## UDK2017 Features / Updates / Changes See the wiki page [UDK2017 Features Updates Changes](https://github.com/tianocore/tianocore.github.io/wiki/UDK2017#udk2017-features--updates--changes) for list of Features, Updates and Changes to the UDK2017 Release from the previous UDK release ### UDK2017 Package Notes See wiki page [UDK2017 Package notes]( https://github.com/tianocore/tianocore.github.io/wiki/UDK2017#udk2017-package-notes ) for list of Package's Notes details on changes & updates ## Downloads - File Descriptions (Below files) ### Source Code These source code downloads are the from the tag [vUDK2017](https://github.com/tianocore/edk2/releases/tag/vUDK2017) for the official UDK2017 release. <br> UDK2017 edk-vUDK2017 Workspace [Source code (zip file)](https://github.com/tianocore/edk2/archive/vUDK2017.zip ) UDK2017 edk-vUDK2017 Workspace [Source code (tar.gz file)](https://github.com/tianocore/edk2/archive/vUDK2017.tar.gz ) ### Documentation This download contains all .chm and .html documents for UDK2017. Each package includes details on the definitions (including PPIs/PROTOCOLs/GUIDs and library classes) and libraries instances associated with each package.<br> [UDK2017 Documents (ZIP File)]( https://github.com/tianocore/edk2/releases/download/vUDK2017/UDK2017.Documents.zip) ********** ## More Information about this release **Note:** For a detailed list of Changes and updates See the [UDK2017 Release wiki]( https://github.com/tianocore/tianocore.github.io/wiki/UDK2017) page ********** 2017-06-23T22:45:58+00:00 edk2 vUDK2018 edk2 vUDK2018 2018-03-30T22:21:25+00:00 # UDK2018 Release Page ## How to build See wiki page [UDK2018 How to Build]( https://github.com/tianocore/tianocore.github.io/wiki/UDK2018#how-to-build-UDK2018) on the UDK2018 Release wiki page ## UDK2018 Features / Updates / Changes See the wiki page [UDK2018 Features Updates Changes](https://github.com/tianocore/tianocore.github.io/wiki/UDK2018#UDK2018-features--updates--changes) for list of Features, Updates and Changes to the UDK2018 Release from the previous UDK release ### UDK2018 Package Notes See wiki page [UDK2018 Package notes]( https://github.com/tianocore/tianocore.github.io/wiki/UDK2018#UDK2018-package-notes ) for list of Package's Notes details on changes & updates ## Downloads - File Descriptions (Below files) ### Source Code These source code downloads are the from the tag [vUDK2018](https://github.com/tianocore/edk2/releases/tag/vUDK2018) for the official UDK2018 release. <br> UDK2018 edk-vUDK2018 Workspace [Source code (zip file)](https://github.com/tianocore/edk2/archive/vUDK2018.zip ) UDK2018 edk-vUDK2018 Workspace [Source code (tar.gz file)](https://github.com/tianocore/edk2/archive/vUDK2018.tar.gz ) ### Documentation This download contains all .chm and .html documents for UDK2018. Each package includes details on the definitions (including PPIs/PROTOCOLs/GUIDs and library classes) and libraries instances associated with each package.<br> [UDK2018 Documents (ZIP File)]( https://github.com/tianocore/edk2/releases/download/vUDK2018/UDK2018.Documents.zip) ********** ## More Information about this release **Note:** For a detailed list of Changes and updates See the [UDK2018 Release wiki]( https://github.com/tianocore/tianocore.github.io/wiki/UDK2018) page ********** 2018-03-30T22:21:25+00:00 edk2 edk2-stable201811 edk2 edk2-stable201811 2018-11-15T18:39:43+00:00 # Release Date 2018-11-15 # New Features * [SMBIOS 3.2.0 support](https://bugzilla.tianocore.org/show_bug.cgi?id=1099) * [New APIs in UefiLib to locate ACPI table by signature](https://bugzilla.tianocore.org/show_bug.cgi?id=967) * [32bit subnet mask support for IP4 PXE](https://bugzilla.tianocore.org/show_bug.cgi?id=1125) * [TFTP windowsize option support (RFC7440)](https://bugzilla.tianocore.org/show_bug.cgi?id=886) * [Non-stop mode for Heap Guard and Null Pointer Detection](https://bugzilla.tianocore.org/show_bug.cgi?id=1095) * [PEI Stack Guard](https://bugzilla.tianocore.org/show_bug.cgi?id=1126) * [Support MSRs define in SDM 2018-05](https://bugzilla.tianocore.org/show_bug.cgi?id=1213) * [Add Use-After-Free heap detection in DXE core](https://bugzilla.tianocore.org/show_bug.cgi?id=1240) * [Remove FatBinPkg from edk2/master](https://bugzilla.tianocore.org/show_bug.cgi?id=1105) * Add support for Pyrite 2.0 to Opal BIOS Password management * Add support for TCG PTP Spec Revision 1.03 * Improvement capsule feature support * Add PCI NVMe PEI BlockIO support * Performance measurement with new macros and control functionality * Optimize CPU feature initialization and microcode loading performance * Add SHA384/512 support in TPM2 device driver * Support SpinUp and DevSlp functionality in AtaAtapiPassThru * Support PUIS enabling/disabling in AtaAtapiPassThru * Expose interface to enable or disable signaling SERR from xHCI * Support short-form USB device path in ConPlatform. * Remove all IPF only modules from edk2/master * DSC/FDF Support for a !error Conditional Directive * Display Integers in the Build Report in Hexadecimal Format * Add BuildOptionPcd support to GenCfgOpt.py # [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=deadline&component=Code&component=Security%20Issue&component=Tools&f1=delta_ts&f2=delta_ts&list_id=11279&o1=greaterthaneq&o2=lessthaneq&order=changeddate%2Cassigned_to%20DESC%2Cpriority%2Cbug_severity&product=EDK2&product=EDK2%20Platforms&product=EDK2%20Test&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=FIXED&v1=2018-08-16&v2=2018-11-15) # Wiki * [Edk2 Performance Infrastructure](https://github.com/tianocore/tianocore.github.io/wiki/Edk2-Performance-Infrastructure) # Update Notes 1. Core driver(`BootGraphicsResourceTableDxe)/library(DxeCapsuleLibFmp`) are updated to consume `BmpSupportLib/SafeIntLib/DisplayUpdateProgressLib`. Below library instances are required to be added into platform DSC `[LibraryClasses]` section. ``` BmpSupportLib|MdeModulePkg/Library/BaseBmpSupportLib/BaseBmpSupportLib.inf SafeIntLib|MdePkg/Library/BaseSafeIntLib/BaseSafeIntLib.inf DisplayUpdateProgressLib|MdeModulePkg/Library/DisplayUpdateProgressLibText/XXXXXX.inf ``` 2. According to the Intelligent Platform Management Interface Specification Second Generation v2.0 Document Revision 1.1 (October 1, 2013), a couple of definitions get updated within below IPMI header files. 'union' types are used in structure definitions that have bitmap fields. This will provide the users with both bit-level and byte/word-level accesses to those structures. ``` MdePkg\Include\IndustryStandard\IpmiNetFnApp.h MdePkg\Include\IndustryStandard\IpmiNetFnChassis.h MdePkg\Include\IndustryStandard\IpmiNetFnStorage.h MdePkg\Include\IndustryStandard\IpmiNetFnTransport.h ``` 3. UefiCpuPkg MpInitLib improved the performance by shadowing microcode to memory before doing microcode update. The enhancement may cause S3 resume failure because the shadow uses lots of S3 resume memory if the microcode file is large and the S3 resume memory is small. Platform needs to increase the S3 resume memory size in this case. 4. Core driver(`SystemFirmwareUpdateDxe`) is updated to consume new interface `PerformFlashWriteWithProgress() of PlatformFlashAccessLib`. Platform's PlatformFlashAccessLib library instance is required to be updated to implement the new interface `PerformFlashWriteWithProgress()`. 5. Remove DxeSmmPerformanceLib from platform DSC, because it has been removed. 6. Use FatPkg in Platform DSC/FDF to replace FatBinPkg, because FatBinPkg is removed. 7. BaseTools adds the checker of the guid format defined in Package.dec file. It requires (`<CName> = <GuidValueInCFormat:{8,4,4,{2,2,2,2,2,2,2,2}}>`). Otherwise, BaseTools reports the error for the invalid GUID format. 8. BaseTools adds the check for VOID* PCD max size. Max size is UINT16. 9. BaseTools adds the checker that the datum type of a FeatureFlag PCD must be BOOLEAN. 10. BaseTools drops the support to freeze python tools as the windows executable files. BaseTools only supports python tools run from source in Windows OS. 11. If `PcdMaxPeiPerformanceLogEntries16` is configured in DSC file to set the maximum number of performance log entries during PEI phase, its value suggests to be less than 880. If its value is bigger, such as 1000, it will cause PEI performance HOB data exceed HOB size limit. 12. UefiCpuPkg MpInitLib is enhanced to forbidden AP calls PEI services (following PI spec). Exception or hang may occur when AP procedure contains code to use PEI services. 13. `PlatformBootManagerLib` adds a new API called `PlatformBootManagerUnableToBoot()`. BdsDxe driver calls this new API when unable to boot. `PlatformBootManagerLib` library instance needs to implement this API to avoid build failure. `OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c` contains an implementation to pop up UI; `EmulatorPkg/Library/PlatformBmLib/PlatformBm.c` contains an implementation to do nothing. 2018-11-15T18:39:43+00:00 edk2 edk2-stable201903 edk2 edk2-stable201903 2019-03-08T16:10:53+00:00 # Release Date 2019-03-08 (UTC - 8 12PM) ## New Features * [Python 3 migration](https://bugzilla.tianocore.org/show_bug.cgi?id=55) * [BaseTool Suggestions for improving building performance](https://bugzilla.tianocore.org/show_bug.cgi?id=1288) * [Delete IPv4 only TCP/iSCSI/PXE drivers in MdeModulePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1278) * [Remove EdkShellPkg from edk2/master](https://bugzilla.tianocore.org/show_bug.cgi?id=1107) * [Remove EdkShellBinPkg from edk2/master](https://bugzilla.tianocore.org/show_bug.cgi?id=1108) * [BaseTools: Support Array and C code style initialization in Structure PCD](https://bugzilla.tianocore.org/show_bug.cgi?id=1292) * [Merge EmuVariable and Real variable driver](https://bugzilla.tianocore.org/show_bug.cgi?id=1323) * [Remove DuetPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1322) * [Upgrade OpenSSL to 1.1.0j](https://bugzilla.tianocore.org/show_bug.cgi?id=1393) * [Split the S3 phase device initialization codes from the OpalPassword PEI driver](https://bugzilla.tianocore.org/show_bug.cgi?id=1409) * [Remove PcdPeiCoreMaxXXX PCDs](https://bugzilla.tianocore.org/show_bug.cgi?id=1405) * [Remove unused tool logic in BaseTools C\Python](https://bugzilla.tianocore.org/show_bug.cgi?id=1350) * [BaseTools: Enable component override functionality](https://bugzilla.tianocore.org/show_bug.cgi?id=1449) * [Support PI1.7 EFI_PEI_CORE_FV_LOCATION_PPI](https://bugzilla.tianocore.org/show_bug.cgi?id=1524) * [Remove unused tool chain configuration in tools_def.template](https://bugzilla.tianocore.org/show_bug.cgi?id=1377) * [Add Security feature set support for ATA devices](https://bugzilla.tianocore.org/show_bug.cgi?id=1529) * [SMM CET support](https://bugzilla.tianocore.org/show_bug.cgi?id=1521) * [Add Wi-Fi Connection Manager to NetworkPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1492) * [Standalone MM build of authenticated variable stack](https://bugzilla.tianocore.org/show_bug.cgi?id=1589) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=deadline&chfieldto=Now&component=Code&component=Security%20Issue&component=Tools&f1=delta_ts&f2=delta_ts&o1=greaterthaneq&o2=lessthaneq&product=EDK2&product=EDK2%20Platforms&product=EDK2%20Test&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=FIXED&v1=2018-11-15&v2=2019-03-0) ## Wiki * [CET in SMM](https://github.com/tianocore/tianocore.github.io/wiki/CET-in-SMM) * [C array structure PCD usage](https://github.com/tianocore/tianocore.github.io/wiki/Structure-Array-PCD) * [ECC tool usage](https://github.com/tianocore/tianocore.github.io/wiki/ECC-tool) * [BaseTools Support Python2 and Python3](https://github.com/tianocore/tianocore.github.io/wiki/BaseTools-Support-Python2-Python3) ## Update Notes 1. Use ShellPkg in Platform DSC/FDF to replace EdkShellBinPkg, because EdkShellBinPkg is removed. 2. Remove the using of PcdPeiCoreMaxFvSupported, PcdPeiCoreMaxPeimPerFv and PcdPeiCoreMaxPpiSupported in platform code as they have been removed for [BZ1405](https://bugzilla.tianocore.org/show_bug.cgi?id=1405). 3. Remove the using of EmuVariableRuntimeDxe and use the merged Variable driver instead like below as EmuVariableRuntimeDxe has been removed for [BZ1323](https://bugzilla.tianocore.org/show_bug.cgi?id=1323). ``` MdeModulePkg/Universal/Variable/RuntimeDxe/VariableRuntimeDxe.inf { <PcdsFixedAtBuild> gEfiMdeModulePkgTokenSpaceGuid.PcdEmuVariableNvModeEnable|TRUE <LibraryClasses> AuthVariableLib|MdeModulePkg/Library/AuthVariableLibNull/AuthVariableLibNull.inf TpmMeasurementLib|MdeModulePkg/Library/TpmMeasurementLibNull/TpmMeasurementLibNull.inf VarCheckLib|MdeModulePkg/Library/VarCheckLib/VarCheckLib.inf } ``` 4. Remove the TCP/iSCSI/PXE drivers in MdeModulePkg for [BZ1278](https://bugzilla.tianocore.org/show_bug.cgi?id=1278). Below components in NetworkPkg should be used to support both IPv4 and IPv6. ``` [Components] NetworkPkg/TcpDxe/TcpDxe.inf NetworkPkg/IScsiDxe/IScsiDxe.inf NetworkPkg/UefiPxeBcDxe/UefiPxeBcDxe.inf ``` 5. New working model [BZ1409](https://bugzilla.tianocore.org/show_bug.cgi?id=1409) has been adopted for the ATA and NVM Express OPAL devices S3 auto-unlock feature. The S3 phase hardware (ATA and NVM Express) initialization codes have been removed from the OpalPassword drivers. The OpalPasswordPei PEIM now will consume the Storage Security Command (SSC) PPI instances to unlock OPAL devices in S3. For the new working model, the following PEIMs: ``` MdeModulePkg/Bus/Ata/AhciPei/AhciPei.inf MdeModulePkg/Bus/Pci/NvmExpressPei/NvmExpressPei.inf ``` should be included by platforms so that SSC PPI instances will be produced for ATA and NVM Express devices respectively. Platforms also need to provide Host Controller PEIMs for ATA and NVM Express controllers. These PEIMs should respectively produce EDKII_ATA_AHCI_HOST_CONTROLLER_PPI and EDKII_NVM_EXPRESS_HOST_CONTROLLER_PPI in order to support the new working scheme. Lastly, please note that the PEIMs involved here will be executed during S3 resume. As a result, they may not be compressed, so there will be an impact to the image size. 6. Unused tool chain VS2003/VS2015, GCC44/GCC45/GCC46/GCC47, ELFGCC/UNIXGCC/CYGGCC, DDK3790, MYTOOLS are removed. Please use the latest VS2015 or GCC5 as the default tool chain. 7. In case that a C function body contains the string of L'', L'\\"', L"\\"", L''' or L""", ECC tool running under python3 interpreter will report error with code 5005. Please ignore it for this error is false reported. For example, in ShellPkg\\Application\\Shell\\Shell.c, line 212 contains L"\\"". ```FirstQuote = FindNextInstance (CmdLine, L"\"", TRUE)``` That line will cause ECC tool under python3 report error “The close brace should be at the very beginning of a line for the function [ContainsSplit].”, this error is a false report. ECC tool under python2 interpreter has no such issue. 2019-03-08T16:10:53+00:00 edk2 edk2-stable201905 edk2 edk2-stable201905 2019-06-06T09:09:03+00:00 # Release Date 2019-06-06 (UTC - 8 01:00) ## New Features * [Update OpenSSL version to upcoming 1.1.1](https://bugzilla.tianocore.org/show_bug.cgi?id=1089) * [Delete EdkCompatibilityPkg from edk2/master](https://bugzilla.tianocore.org/show_bug.cgi?id=1103) * [Remove .S assembly code for IA32 and X64 arch](https://bugzilla.tianocore.org/show_bug.cgi?id=1594) * [Replace BSD 2-Clause License with BSD + Patent Licence](https://bugzilla.tianocore.org/show_bug.cgi?id=1373) * [Recovery PEI BlockIO support for ATA device](https://bugzilla.tianocore.org/show_bug.cgi?id=1483) * [Add PCD to Enabled/Disabled IPv4/IPv6 PXE Support in NetworkPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1695) * [Remove NetworkPkg/IpSecDxe](https://bugzilla.tianocore.org/show_bug.cgi?id=1697) * [Add api to DebubLib to expose a print routine with VaList parameter](https://bugzilla.tianocore.org/show_bug.cgi?id=1395) * [Introduce DebugPpi to save the image size with the debug message](https://bugzilla.tianocore.org/show_bug.cgi?id=1549) * [ResetSystemLib Adds a new API ResetSystem](https://bugzilla.tianocore.org/show_bug.cgi?id=1460) * [ResetUtilityLib Add a new API ResetSystemWithSubtype](https://bugzilla.tianocore.org/show_bug.cgi?id=1458) * [Add support for get organization name to x509 in BaseCryptLib](https://bugzilla.tianocore.org/show_bug.cgi?id=1401) * [Add support for checking x509 EKUs in BaseCryptLib](https://bugzilla.tianocore.org/show_bug.cgi?id=1402) * [Add support for PKCS 1v2 RSAES-OAEP PKI encryption in BaseCryptLib](https://bugzilla.tianocore.org/show_bug.cgi?id=1403) * [Remove ShellBinPkg from edk2/master](https://bugzilla.tianocore.org/show_bug.cgi?id=1675) * [Enable multiple thread /MP option for MSVC compiler](https://bugzilla.tianocore.org/show_bug.cgi?id=1672) * [Upstream the EnrollDefaultKeys application to OvmfPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1747) * [Share code for BaseUefiDecompressLib in MdePkg and MdeModulePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1722) * [Move network related components from MdeModulePkg to NetworkPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1293) * [Move BeagleBoardPkg and Omap35xxPkg from edk2 to edk2-platforms repo](https://bugzilla.tianocore.org/show_bug.cgi?id=1467) * [Move MinnowMax and Quark platform to edk2-platforms repo](https://bugzilla.tianocore.org/show_bug.cgi?id=1374) * [Move OptionRomPkg into new Drivers directory edk2-platforms repo](https://bugzilla.tianocore.org/show_bug.cgi?id=1793) * [Add ACPI6.3 definition](https://bugzilla.tianocore.org/show_bug.cgi?id=1813) * [Remove Nt32Pkg from edk2/master](https://bugzilla.tianocore.org/show_bug.cgi?id=1812) * [update ArmSoftFloatLib to latest upstream version (= 3e)](https://bugzilla.tianocore.org/show_bug.cgi?id=1845) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&component=Code&component=Security%20Issue&component=Tools&f1=delta_ts&f2=delta_ts&o1=lessthaneq&o2=greaterthaneq&product=EDK2&product=EDK2%20Platforms&product=EDK2%20Test&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME&v1=2019-06-06&v2=2019-03-08) ## Update Notes 1. PEIM DebugServicePei and library instance PeiDebugLibDebugPpi are added to save the PEIM Debug Image size. This can be enabled in platform DSC/FDF. Platform DSC is changed to include DebugServicePei and update DebugLib library instance. ``` [LibraryClasses.Common.PEIM] DebugLib|MdeModulePkg/Library/PeiDebugLibDebugPpi/PeiDebugLibDebugPpi.inf [Components] MdeModulePkg/Universal/DebugServicePei/DebugServicePei.inf { <LibraryClasses> DebugLib|MdeModulePkg/Library/PeiDxeDebugLibReportStatusCode/PeiDxeDebugLibReportStatusCode.inf } ``` Platform FDF also needs to be changed to include DebugServicePei and place it into apriori list. ``` [FV.PEIFV] APRIORI PEI { INF MdeModulePkg/Universal/DebugServicePei/DebugServicePei.inf } INF MdeModulePkg/Universal/DebugServicePei/DebugServicePei.inf ``` 2. ShellBinPkg has been removed. Shell binaries can be download from the Assets section in edk2-stable201905 release page. Platform can also use ShellPkg directly, and update platform dsc/fdf file as below. Add shell application in platform fdf file: ``` INF ShellPkg/Application/Shell/Shell.inf ``` Add shell application in platform dsc file: ``` ShellPkg/Application/Shell/Shell.inf { <PcdsFixedAtBuild> gEfiShellPkgTokenSpaceGuid.PcdShellLibAutoInitialize|FALSE <LibraryClasses> NULL|ShellPkg/Library/UefiShellLevel2CommandsLib/UefiShellLevel2CommandsLib.inf NULL|ShellPkg/Library/UefiShellLevel1CommandsLib/UefiShellLevel1CommandsLib.inf NULL|ShellPkg/Library/UefiShellLevel3CommandsLib/UefiShellLevel3CommandsLib.inf NULL|ShellPkg/Library/UefiShellDriver1CommandsLib/UefiShellDriver1CommandsLib.inf NULL|ShellPkg/Library/UefiShellInstall1CommandsLib/UefiShellInstall1CommandsLib.inf NULL|ShellPkg/Library/UefiShellDebug1CommandsLib/UefiShellDebug1CommandsLib.inf NULL|ShellPkg/Library/UefiShellNetwork1CommandsLib/UefiShellNetwork1CommandsLib.inf NULL|ShellPkg/Library/UefiShellNetwork2CommandsLib/UefiShellNetwork2CommandsLib.inf ShellLib|ShellPkg/Library/UefiShellLib/UefiShellLib.inf ShellCommandLib|ShellPkg/Library/UefiShellCommandLib/UefiShellCommandLib.inf HandleParsingLib|ShellPkg/Library/UefiHandleParsingLib/UefiHandleParsingLib.inf BcfgCommandLib|ShellPkg/Library/UefiShellBcfgCommandLib/UefiShellBcfgCommandLib.inf FileHandleLib|MdePkg/Library/UefiFileHandleLib/UefiFileHandleLib.inf SortLib|MdeModulePkg/Library/UefiSortLib/UefiSortLib.inf } ``` Note: If platform doesn’t have shell boot option after updating to use ShellPkg, please check platform code logic of registering shell boot option, make sure it use the correct UEFI Shell file GUID as below. Shell file GUID: { 0x7C04A583, 0x9E3E, 0x4f1c, {0xAD, 0x65, 0xE0, 0x52, 0x68, 0xD0, 0xB4, 0xD1} }. 3. Remove IpSec driver and IpSecConfig application from NetworkPkg. Platform DSC/FDF should remove them. ``` NetworkPkg/Application/IpsecConfig/IpSecConfig.inf NetworkPkg/IpSecDxe/IpSecDxe.inf ``` 4. UefiDecompressLib instance `IntelFrameworkModulePkg/Library/BaseUefiTianoCustomDecompressLib` has been merged into `MdePkg/Library/BaseUefiDecompressLib`. If platform still use the one in IntelFrameworkModulePkg, please update it to use the one in MdePkg. ``` UefiDecompressLib|IntelFrameworkModulePkg/Library/BaseUefiTianoCustomDecompressLib/BaseUefiTianoCustomDecompressLib.inf ==> UefiDecompressLib|MdePkg/Library/BaseUefiDecompressLib/BaseUefiTianoCustomDecompressLib.inf ``` 5. Removed EDK Compatibility support. If platform still use the `PcdFrameworkCompatibilitySupport` or framework VFR, please remove or update the related code logic or source file. 6. Network Module and Libraries are moved from MdeModulePkg to NetworkPkg. The platform DSC/FDF needs to include Network segment files to enable Network features instead of including the group of network modules. Those segment files are included into the different sections in DSC/FDF as below. If the module consumes Network library class, its INF needs to make sure `NetworkPkg\NetworkPkg.dec` in `[Packages]` section. ``` Platform.dsc: [Defines] !include NetworkPkg/NetworkDefines.dsc.inc [PcdsFixedAtBuild] !include NetworkPkg/NetworkPcds.dsc.inc [LibraryClasses] !include NetworkPkg/NetworkLibs.dsc.inc [Components] !include NetworkPkg/NetworkComponents.dsc.inc Platform.fdf: [FV.DXEFV] ... !include NetworkPkg/Network.fdf.inc ``` 7. Openssl has been updated to new 1.1.1b version. Compared to previous version, new version openssl increases the image size for the driver that consumes CryptoLib. Platform FDF file may reserve more space in FV image to contain them. 8. NT32 has been removed. EmulatorPkg can be used to run in Windows or Linux OS. 2019-06-06T09:09:03+00:00 edk2 edk2-stable201908 edk2 edk2-stable201908 2019-08-30T07:53:18+00:00 # Release Date 2019-08-30 (UTC - 8 00:00) ## New Features * [Remove IntelFrameworkPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1604) * [Remove IntelFrameworkModulePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1605) * [Standardize EDK II PI root-of-trust verification implementation](https://bugzilla.tianocore.org/show_bug.cgi?id=1617) * [Remove IntelFsp[Wrapper]Pkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1819) * [Move IntelSiliconPkg from edk2 repo to edk2-platforms repo](https://bugzilla.tianocore.org/show_bug.cgi?id=1890) * [Remove framework modules within PcAtChipsetPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1844) * [[NvmExpressPei] Update the driver to produce NVM Express PassThru PPI](https://bugzilla.tianocore.org/show_bug.cgi?id=1879) * [Enable new MM MP Protocol](https://bugzilla.tianocore.org/show_bug.cgi?id=1937) * [Change PiSmmCpu driver to enable 5-level paging when CPU supports it](https://bugzilla.tianocore.org/show_bug.cgi?id=1946) * [Support Capsule On Disk](https://bugzilla.tianocore.org/show_bug.cgi?id=1852) * [BaseTools Enable multiple-thread autogen](https://bugzilla.tianocore.org/show_bug.cgi?id=1875) * [Enable 5-level paging in DXE long mode](https://bugzilla.tianocore.org/show_bug.cgi?id=2008) * [Update FmpDxe to support service drivers that manage more than one device at a time](https://bugzilla.tianocore.org/show_bug.cgi?id=1525) * [RegularExpressionDxe: Update Oniguruma to the latest Release 6.9.3 (security fix release)](https://bugzilla.tianocore.org/show_bug.cgi?id=2066) * [Add EDKII_UFS_HC_PLATFORM_PROTOCOL to support platform specific programming of UFS host controllers](https://bugzilla.tianocore.org/show_bug.cgi?id=1343) * [Enable SM3 digest algorithm for measured boot and TCG2 EVENT protocol](https://bugzilla.tianocore.org/show_bug.cgi?id=1781) * [Add a new MODULE_TYPE HOST_APPLICATION in BaseTool](https://bugzilla.tianocore.org/show_bug.cgi?id=1956) * [Add support for KDF function](https://bugzilla.tianocore.org/show_bug.cgi?id=1928) * [[SD/MMC] Allow platform to tweak device working parameters during SD card/eMMC initialization](https://bugzilla.tianocore.org/show_bug.cgi?id=1882) * [port TLS_ENABLE from OvmfPkg to ArmVirtPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=1009) * [IntelFsp2Pkg: add TempRamExitPpi.h per FSP 2.1 spec](https://bugzilla.tianocore.org/show_bug.cgi?id=1883) * [IntelFsp2Pkg: Add support for FSP 1.x binaries to SplitFspBin.py](https://bugzilla.tianocore.org/show_bug.cgi?id=1308) * [New OvmfXen platform with Xen PVH support](https://bugzilla.tianocore.org/show_bug.cgi?id=1689) * [Tool to generate a Windows Firmware Update Drivers](https://bugzilla.tianocore.org/show_bug.cgi?id=1837) * [BaseTools/Scripts: Add GetUtcDateTime script](https://bugzilla.tianocore.org/show_bug.cgi?id=2067) * [Adding a new TSC library by using CPUID(0x15) TSC leaf](https://bugzilla.tianocore.org/show_bug.cgi?id=1909) * [Build Cache very easily miss because of monolithic platform hash](https://bugzilla.tianocore.org/show_bug.cgi?id=1927) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&component=Code&component=Security%20Issue&component=Tools&f1=delta_ts&f2=delta_ts&o1=lessthaneq&o2=greaterthaneq&product=EDK2&product=EDK2%20Platforms&product=EDK2%20Test&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME&v1=2019-08-30&v2=2019-06-06) ## Wiki * [UEFI Capsule on Disk Introducation](https://github.com/tianocore/tianocore.github.io/wiki/UEFI-Capsule-on-Disk-Introducation) * [OBB Verification](https://github.com/tianocore/tianocore.github.io/wiki/OBB-Verification) ## Update Notes 1. Update code to use `CPU_FEATURE_THREE_STRIKE_COUNTER` instead of `CPU_FEATURE_THREE_STRICK_COUNTER` from RegisterCpuFeaturesLib.h as [BZ1642](https://bugzilla.tianocore.org/show_bug.cgi?id=1642) fixed the typo. 2. Removed IntelFrameworkPkg and IntelFrameworkModulePkg. If platforms still use the components in those packages please use the below substitutions: ``` IntelFrameworkModulePkg/Library/BaseUefiTianoCustomDecompressLib/BaseUefiTianoCustomDecompressLib.inf ==> MdePkg/Library/BaseUefiDecompressLib/BaseUefiTianoCustomDecompressLib.inf IntelFrameworkModulePkg/Library/LzmaCustomDecompressLib/LzmaCustomDecompressLib.inf ==> MdeModulePkg/Library/LzmaCustomDecompressLib/LzmaCustomDecompressLib.inf IntelFrameworkModulePkg/Library/PeiDxeDebugLibReportStatusCode/PeiDxeDebugLibReportStatusCode.inf ==> MdeModulePkg/Library/PeiDxeDebugLibReportStatusCode/PeiDxeDebugLibReportStatusCode.inf IntelFrameworkModulePkg/Library/GenericBdsLib/GenericBdsLib.inf ==> Switch to the MdeModulePkg BDS MdeModulePkg/Universal/BdsDxe/BdsDxe.inf and drop the above library ``` 3. Removed several legacy framework modules in PcAtChipsetPkg. Platforms can use the below substitutions: ``` PcAtChipsetPkg/8259InterruptControllerDxe/8259.inf PcAtChipsetPkg/8254TimerDxe/8254Timer.inf ==> PcAtChipsetPkg/HpetTimerDxe/HpetTimerDxe.inf (Please note that platform/silicon codes may still need to mask 8259 interrupts to avoid unexpected interrupts being triggered.) PcAtChipsetPkg/IsaAcpiDxe/IsaAcpi.inf ==> Platform specific Super IO bus driver (An example for OVMF platform can be referred at OvmfPkg/SioBusDxe/SioBusDxe.inf) ``` 4. Removed --nt32 option for edksetup.bat since Nt32Pkg has been removed. Added `VS2017 VS2015 VS2013 VS2012` tool chain options for edksetup.bat to set up different VS environment. For example: when your dev machine has installed VS2017 and VS2015, call `edksetup.bat VS2015` can set VS2015 build env. Call `edksetup.bat` without any tool chain option, the highest version of VS tool env will be set. 5. PiSmmCpuDxeSmm was updated to create 5-level page table for SMM environment when CPU is capable. If the platform uses platform-specific SmmCpuFeatureLib and the library provides custom SMI handler, the SMI handler assembly code needs to be updated to set BIT12 in CR4 before entering to 64bit mode. 2019-08-30T07:53:18+00:00 edk2 edk2-stable201911 edk2 edk2-stable201911 2019-12-02T00:24:52+00:00 # Release Date 2019-12-02 ## New Features * [Add new tool chain for LLVM/CLANG9.0](https://bugzilla.tianocore.org/show_bug.cgi?id=1603) * [BaseTools: Enable --genfds-multi-thread by default build](https://bugzilla.tianocore.org/show_bug.cgi?id=1302) * [Add STATIC_ASSERT macro](https://bugzilla.tianocore.org/show_bug.cgi?id=2048) * [Add VS2019 Toolchain def](https://bugzilla.tianocore.org/show_bug.cgi?id=2182) * [Upgrade Openssl to 1.1.1d due to CVEs in v1.1.1b](https://bugzilla.tianocore.org/show_bug.cgi?id=2226) * [UEFI Variable SMI Reduction](https://bugzilla.tianocore.org/show_bug.cgi?id=2220) * [ScsiDiskDxe Support the Storage Security Command Protocol](https://bugzilla.tianocore.org/show_bug.cgi?id=1546) * [Add support SMBIOS spec 3.3.0](https://bugzilla.tianocore.org/show_bug.cgi?id=2305) * [Allow PCDs to be used in conditional statements if not referenced in an INF](https://bugzilla.tianocore.org/show_bug.cgi?id=2270) * [Add Support Laml and Lasa for TPM2 ACPI](https://bugzilla.tianocore.org/show_bug.cgi?id=978) * [Add PCI Device Security Support](https://bugzilla.tianocore.org/show_bug.cgi?id=2303) * [Invalid server certificate accepted in HTTPS Boot (CVE-2019-14553)](https://bugzilla.tianocore.org/show_bug.cgi?id=960) * [MdeModulePkg: Enable/Disable S3BootScript dynamically](https://bugzilla.tianocore.org/show_bug.cgi?id=2212) * [Enable Phase 1 of Continuous Integration (CI) on the edk2 repository](https://bugzilla.tianocore.org/show_bug.cgi?id=2315) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2019-08-31&chfieldto=2019-11-30&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) ## Wiki * [LLVM/CLANGPDB Tool Chain](https://github.com/tianocore/tianocore.github.io/wiki/CLANG9-Tools-Chain) * [UEFI Variable Runtime Cache](https://github.com/tianocore/tianocore.github.io/wiki/UEFI-Variable-Runtime-Cache) * [EDKII Continuous Integration](https://github.com/tianocore/tianocore.github.io/wiki/EDK-II-Continuous-Integration) 2019-12-02T00:24:52+00:00 edk2 edk2-stable202002 edk2 edk2-stable202002 2020-03-04T08:54:59+00:00 # Release Date 2020-03-04 ## New Features * [Basetool: Reuse compiler show-include feature for the incremental build quality and performance](https://bugzilla.tianocore.org/show_bug.cgi?id=2311) * [BaseTools GenerateCapsule: Support capsule dependency](https://bugzilla.tianocore.org/show_bug.cgi?id=2412) * [FmpDxe: Support capsule dependency](https://bugzilla.tianocore.org/show_bug.cgi?id=2421) * [New BaseCryptLib instances to compile independently from callers](https://bugzilla.tianocore.org/show_bug.cgi?id=2420) * [Add TCG PFP revision 105 support and NIST SP800-155 event](https://bugzilla.tianocore.org/show_bug.cgi?id=2439) * [MpInitLib: Build information for loaded and detected microcode patches](https://bugzilla.tianocore.org/show_bug.cgi?id=2430) * [Add platform microcode shadow PPI to UefiCpuPkg](https://tianocore.acgmultimedia.com/show_bug.cgi?id=2449) * [BaseCryptLib: Remove HmacXxxGetContextSize and replace HmacXxxInit with HmacXxxSetKey](https://bugzilla.tianocore.org/show_bug.cgi?id=1792) * [Enable Unified API for UEFI drivers utilizing HASH/RSA Authentication Mechanism](https://bugzilla.tianocore.org/show_bug.cgi?id=2151) * [Add Unit Test Framework to edk2 repository](https://bugzilla.tianocore.org/show_bug.cgi?id=2505) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2019-12-01&chfieldto=2020-03-04&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) ## Wiki * [Fmp Capsule Dependency](https://github.com/tianocore/tianocore.github.io/wiki/Fmp-Capsule-Dependency-Introduction) 2020-03-04T08:54:59+00:00 edk2 edk2-stable202005 edk2 edk2-stable202005 2020-06-03T08:34:10+00:00 # Release Date 2020-06-03 ## New Features * [RegularExpressionDxe: Use submodule way to access third party Oniguruma](https://bugzilla.tianocore.org/show_bug.cgi?id=2073) * [BrotliCustomDecompressLib: Use submodule way to access third party brotli](https://bugzilla.tianocore.org/show_bug.cgi?id=2559) * [BaseTools: Use submodule way to access third party brotli](https://bugzilla.tianocore.org/show_bug.cgi?id=2558) * [RISC-V architecture on EDK2](https://bugzilla.tianocore.org/show_bug.cgi?id=2672) * [Disabling safe string constraint assertions](https://bugzilla.tianocore.org/show_bug.cgi?id=2054) * [ArmVirtPkg Implement support for TPM2 measured boot](https://bugzilla.tianocore.org/show_bug.cgi?id=2560) * [OVMF Implement support for Linux v5.7+ initrd and mixed mode loading](https://bugzilla.tianocore.org/show_bug.cgi?id=2564) * [OVMF Use loadimage/startimage for loading the kernel passed via the QEMU command line](https://bugzilla.tianocore.org/show_bug.cgi?id=2566) * [OVMF Support booting from Fusion-MPT SCSI controllers](https://bugzilla.tianocore.org/show_bug.cgi?id=2390) * [OVMF Support booting from VMware PVSCSI controllers](https://bugzilla.tianocore.org/show_bug.cgi?id=2567) * [OVMF RFE: VCPU hotplug with SMM](https://bugzilla.tianocore.org/show_bug.cgi?id=1512) * [OVMF PEI phase variable driver / MemoryTypeInfo tracking](https://bugzilla.tianocore.org/show_bug.cgi?id=386) * [ArmVirtPkg, OvmfPkg: Pass parameter from QEMU to control PXE IPv4/v6 boot](https://bugzilla.tianocore.org/show_bug.cgi?id=2681) * [FmpDxe: Implement Fmp Capsule Dependency feature in library](https://bugzilla.tianocore.org/show_bug.cgi?id=2696) * [Remove deprecate APIs in BaseCryptLib](https://bugzilla.tianocore.org/show_bug.cgi?id=1898) * [IntelFsp2Pkg: Support Multi-Phase silicon initialization and debug handlers](https://bugzilla.tianocore.org/show_bug.cgi?id=2698) * [Enable Host Unit Tests for Linux in Core CI](https://bugzilla.tianocore.org/show_bug.cgi?id=2513) * [Add Open CI build test for Ovmf and Emulator](https://bugzilla.tianocore.org/show_bug.cgi?id=2570) * [Add UEFI 2.8/2.8a definition in MdePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=2768) * [Add PI1.7/PI1.7a definition into MdePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=2769) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2020-03-05&chfieldto=2020-06-03&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) ## Update Notes 1. The brotli source code is accessed through submodule way. So anybody updates to the latest edk2 should type ‘git submodule update –init’ to checkout submodule brotli. 2. BaseCryptoLib MD4, ARC4, TDES, AES ECB MODE, HMAC MD5, HMAC SHA1 API have been deprecated. The consumer that use above functions should remove the related code and return unsupported status. 3. SecurityPkg Tcg2PhysicalPresenceLib library class removes two macros TCG2_BIOS_TPM_MANAGEMENT_FLAG_DEFAULT and TCG2_BIOS_STORAGE_MANAGEMENT_FLAG_DEFAULT. The consumer code should use gEfiSecurityPkgTokenSpaceGuid.PcdTcg2PhysicalPresenceFlags to get the default flags. 2020-06-03T08:34:10+00:00 edk2 edk2-stable202008 edk2 edk2-stable202008 2020-09-04T08:01:35+00:00 # Release Date 2020-09-04 ## New Features * [BootGuard TOCTOU vulnerability (CVE-2019-11098)](https://bugzilla.tianocore.org/show_bug.cgi?id=1614) * [Provide MACROs to disable SHA1 support](https://bugzilla.tianocore.org/show_bug.cgi?id=1682) * [Update openssl version to latest stable version 1.1.1g](https://bugzilla.tianocore.org/show_bug.cgi?id=2898) * [TPM Add capability to let PEIM extend TcgEvent](https://bugzilla.tianocore.org/show_bug.cgi?id=2841) * [TPM Bios to verify TPM2_ChangeEPS Support through TPM Capabilities command request and enable it if available](https://bugzilla.tianocore.org/show_bug.cgi?id=2793) * [Add FSP binary measurement](https://bugzilla.tianocore.org/show_bug.cgi?id=2376) * [CXL 1.1 Base Specification Register definitions](https://bugzilla.tianocore.org/show_bug.cgi?id=2611) * [BaseTools: Add support on C files to consume ASL files](https://bugzilla.tianocore.org/show_bug.cgi?id=2425) * [Enable BSD-2-Clause-Patent license checker for new added files in open CI](https://bugzilla.tianocore.org/show_bug.cgi?id=2691) * [Enable ECC (EFI Code Checker) checker in open CI](https://bugzilla.tianocore.org/show_bug.cgi?id=2606) * [Add UNIT_TESTING_DEBUG define to enable source level debugging of host based unit tests](https://bugzilla.tianocore.org/show_bug.cgi?id=2804) * [Add new instance of BaseLib that for host based unit tests called UnitTestHostBaseLib](https://bugzilla.tianocore.org/show_bug.cgi?id=2800) * [Add a pre-memory AP vector at 0xFF000](https://bugzilla.tianocore.org/show_bug.cgi?id=2776) * [IntelFsp2Pkg: Add FSP*_ARCH_UPD](https://bugzilla.tianocore.org/show_bug.cgi?id=2781) * [Dynamic AML: A solution to simplify runtime generation of Definition Block tables](https://bugzilla.tianocore.org/show_bug.cgi?id=2900) * [Add support to OVMF for AMD SEV-ES](https://bugzilla.tianocore.org/show_bug.cgi?id=2198) * [Add bhyve hypervisor support to EDK2](https://bugzilla.tianocore.org/show_bug.cgi?id=2658) * [Add LSI 53C895A SCSI controller support to OVMF](https://bugzilla.tianocore.org/show_bug.cgi?id=2899) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2020-06-03&chfieldto=2020-09-04&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) ## Wiki * [How to debug OVMF with QEMU using WinDbg](https://github.com/tianocore/tianocore.github.io/wiki/How-to-debug-OVMF-with-QEMU-using-WinDbg) * [Boot Guard TOCTOU Vulnerability Mitigation](https://github.com/tianocore/tianocore.github.io/wiki/Boot-Guard-TOCTOU-Vulnerability-Mitigation) 2020-09-04T08:01:35+00:00 edk2 edk2-stable202011 edk2 edk2-stable202011 2020-11-27T07:45:40+00:00 # Release Date 2020-11-27 ## New Features * [ShellPkg: add HttpDynamicCommand](https://bugzilla.tianocore.org/show_bug.cgi?id=2860) * [OvmfPkg, ArmVirtPkg: enable HttpDynamicCommand](https://bugzilla.tianocore.org/show_bug.cgi?id=2857) * [CryptoPkg/BaseCryptLib: fix NULL dereference (CVE-2019-14584)](https://bugzilla.tianocore.org/show_bug.cgi?id=1914) * [Security fix: possible heap corruption with LzmaUefiDecompressGetInfo](https://bugzilla.tianocore.org/show_bug.cgi?id=1816) * [Security fix: unlimited FV recursion, round 2 (DXE Core)](https://bugzilla.tianocore.org/show_bug.cgi?id=1743) * [Remove DEPRECATED code wrapped by new macro DISABLE_NEW_DEPRECATED_INTERFACES](https://bugzilla.tianocore.org/show_bug.cgi?id=2777) * [MdePkg: Add definitions for HTTP Chunked Transfer](https://bugzilla.tianocore.org/show_bug.cgi?id=2915) * [Add SMBIOS 3.4.0 DDR5 Support](https://bugzilla.tianocore.org/show_bug.cgi?id=2352) * [UefiCpuPkg: MpServices2Ppi and MpServicesPpi compatibility support.](https://bugzilla.tianocore.org/show_bug.cgi?id=2883) * [Add RngLib instead of TimerLib for OpensslLib](https://bugzilla.tianocore.org/show_bug.cgi?id=1871) * [SecurityPkg/DxeImageVerificationLib: Disable SHA1 base on MACRO](https://bugzilla.tianocore.org/show_bug.cgi?id=2943) * [Remove the deprecated MD5 and SHA1 support of Hash2DxeCrypto](https://bugzilla.tianocore.org/show_bug.cgi?id=3027) * [Adopt VariablePolicy, Deprecate VarLock and VarCheckPolicy.](https://bugzilla.tianocore.org/show_bug.cgi?id=2522) * [BaseCryptLib: Add Host and Shell based unit tests](https://bugzilla.tianocore.org/show_bug.cgi?id=3054) * [Implementation of UEFI EFI_REST_JSON_STRUCTURE_PROTOCOL](https://bugzilla.tianocore.org/show_bug.cgi?id=2907) * [Implementation of UEFI Redfish Host Interface Dxe](https://bugzilla.tianocore.org/show_bug.cgi?id=2912) * [Add SATA port error recovery when operating in AHCI mode](https://bugzilla.tianocore.org/show_bug.cgi?id=3025) * [Restart failed ATA packets when operating in AHCI mode](https://bugzilla.tianocore.org/show_bug.cgi?id=3026) * [Extend usage of LastAttemptStatus in FmpDxe](https://bugzilla.tianocore.org/show_bug.cgi?id=2802) * [Add firmware support for Kvmtool](https://bugzilla.tianocore.org/show_bug.cgi?id=3055) * [EmulatorPkg: Add CI build for SECURE_BOOT_ENABLE](https://bugzilla.tianocore.org/show_bug.cgi?id=2979) * [BaseTools: Add EDKII_DSC_PLATFORM_GUID MACRO](https://bugzilla.tianocore.org/show_bug.cgi?id=2969) * [BaseTools: Enable Module Scope Structure Pcd](https://bugzilla.tianocore.org/show_bug.cgi?id=2648) * [BaseTools: Incremental build enhancement](https://bugzilla.tianocore.org/show_bug.cgi?id=3052) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2020-09-04&chfieldto=2020-11-27&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) ## Wiki * [VariablePolicy Protocol Enhanced Method for Managing Variables](https://github.com/tianocore/tianocore.github.io/wiki/VariablePolicy-Protocol---Enhanced-Method-for-Managing-Variables) * [TianoCore: Who we are](https://github.com/tianocore/tianocore.github.io/wiki/TianoCore:-Who-we-are) ## Update Notes 1. DEPRECATED functions are removed. New secure version functions are required to be used. 2. RngLib library instance is required to be specified in [LibraryClasses] section of Platform.dsc file. 3. VariablePolicyLib and VariablePolicyHelperLib library instances are requried to be specified in [LibraryClasses] section of Platform.dsc file. 2020-11-27T07:45:40+00:00 edk2 edk2-stable201808 edk2 edk2-stable201808 2020-11-30T03:21:00+00:00 2020-11-30T03:21:00+00:00 edk2 edk2-stable202102 edk2 edk2-stable202102 2021-03-05T08:22:36+00:00 # Release Date 2021-03-05 ## New Features * [ArmVirtPkg: support extra pci root bridges (pxb)](https://bugzilla.tianocore.org/show_bug.cgi?id=3059) * [SEV Encrypted Boot for Ovmf (remote attestation)](https://bugzilla.tianocore.org/show_bug.cgi?id=3077) * [virtio-fs driver for OvmfPkg and ArmVirtPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3097) * [Apply SEV-ES mitigations for encryption bit position and MMIO](https://bugzilla.tianocore.org/show_bug.cgi?id=3108) * [Add Core CI support for StandaloneMmPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3150) * [Update LZMA module to LZMA SDK latest version 19.00](https://bugzilla.tianocore.org/show_bug.cgi?id=3101) * [IntelFsp2Pkg: Support FSP private temporary memory](https://bugzilla.tianocore.org/show_bug.cgi?id=3153) * [Port open source JSON library (jansson)](https://bugzilla.tianocore.org/show_bug.cgi?id=3163) * [add file buffering to the UEFI shell's COMP command](https://bugzilla.tianocore.org/show_bug.cgi?id=3123) * [Shell: pathname / filename sorting](https://bugzilla.tianocore.org/show_bug.cgi?id=3151) * [Extend support of peripheral x64 MM_STANDALONE drivers](https://bugzilla.tianocore.org/show_bug.cgi?id=3129) * [BaseTools: Convert the Split tool from C language to Python](https://bugzilla.tianocore.org/show_bug.cgi?id=3165) * [ArmPkg: Add Universal/Smbios](https://bugzilla.tianocore.org/show_bug.cgi?id=3225) * [Move to Pip based Basetools python](https://bugzilla.tianocore.org/show_bug.cgi?id=3231) * [Add support for use of FF-A calls](https://bugzilla.tianocore.org/show_bug.cgi?id=3230) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2020-11-27&chfieldto=2021-03-05&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) ## Update Notes * If the user has the windows bat script that calls Split in it,it needs to change to "call Split" because Split will be a bat script but not an executable file. * Shell depends on library class OrderedCollectionLib. Platform DSC needs to configure it in [LibraryClasses] OrderedCollectionLib|MdePkg/Library/BaseOrderedCollectionRedBlackTreeLib/BaseOrderedCollectionRedBlackTreeLib.inf * Some struct fields in SmBios.h have typos and get fixed in these code change [0db8](https://github.com/tianocore/edk2/commit/0db89a661f38b10012ff4f62e1853bfc48efd462), [bd9d](https://github.com/tianocore/edk2/commit/bd9da7b1da2639fcea8a156fa92a32bbc4209367), [e157](https://github.com/tianocore/edk2/commit/e157c8f9ed173a390d2c9d29069a46e9662e0d04). Details are listed below. In struct ```SMBIOS_TABLE_TYPE17```: &nbsp;```FirwareVersion ==> FirmwareVersion``` In struct ```SMBIOS_TABLE_TYPE4```: &nbsp;```ProcessorManufacture ==> ProcessorManufacturer``` In struct ```PROCESSOR_CHARACTERISTIC_FLAGS```: &nbsp;```Processor64BitCapble ==> Processor64BitCapable``` &nbsp;```ProcessorEnhancedVirtulization ==> ProcessorEnhancedVirtualization``` &nbsp;```Processor128bitCapble ==> Processor128BitCapable``` Platform code that uses those fields need modifications. 2021-03-05T08:22:36+00:00 edk2 edk2-stable202105 edk2 edk2-stable202105 2021-05-28T06:44:30+00:00 # Release Date 2021-05-28 ## New Features * [OVMF RFE: VCPU hot-unplug with SMI](https://bugzilla.tianocore.org/show_bug.cgi?id=3132) * [Add non-MMRAM memory protection for Standalone MM environment](https://bugzilla.tianocore.org/show_bug.cgi?id=3168) * [OpenSSL Update OpenSSL version to version 1.1.1j to include CVE fix](https://bugzilla.tianocore.org/show_bug.cgi?id=3266) * [Add a new library class RegisterFilterLib](https://bugzilla.tianocore.org/show_bug.cgi?id=3246) * [Add a new MicrocodeLib for microcode loading](https://bugzilla.tianocore.org/show_bug.cgi?id=3303) * [EDKII Redfish Config Handler Protocol](https://bugzilla.tianocore.org/show_bug.cgi?id=2911) * [Implementation of UEFI spec 31.1 Redfish Discover Protocol](https://bugzilla.tianocore.org/show_bug.cgi?id=2906) * [Add RedfishLib (from libredfish)](https://bugzilla.tianocore.org/show_bug.cgi?id=3304) * [Add the ArmPlatformPkg to the azurepipeline](https://bugzilla.tianocore.org/show_bug.cgi?id=3349) * [Add the ArmPkg to the azurepipeline](https://bugzilla.tianocore.org/show_bug.cgi?id=3348) * [Support Tcg2Smm under Standalone MM environment](https://bugzilla.tianocore.org/show_bug.cgi?id=3169) * [UefiCpuPkg/SmmCpuFeaturesLib: Add Standalone MM support](https://bugzilla.tianocore.org/show_bug.cgi?id=3218) * [Add support for AARCH64 to RngDxe and BaseRngLib](https://bugzilla.tianocore.org/show_bug.cgi?id=3368) * [Add support for RSASSA-PSS signature scheme in Crypto package](https://bugzilla.tianocore.org/show_bug.cgi?id=3314) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2021-03-05&chfieldto=2021-05-28&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) ## Update Notes * MdeModulePkg VariableSmmRuntimeDxe.inf depends on library class MmUnblockMemoryLib. Platforms supporting variable service through SMM should configure platform DSC in [LibraryClasses] ```MmUnblockMemoryLib|MdePkg/Library/MmUnblockMemoryLib/MmUnblockMemoryLibNull.inf``` * SecurityPkg Tcg2Smm is split into 2 drivers: Tcg2Smm and Tcg2Acpi. Platforms supporting TCG2 Physical Presence and Memory Clear through ACPI method should add a new entry in [Components] section of platform DSC as well as the corresponding FV section in platform FDF ```SecurityPkg/Tcg/Tcg2Acpi/Tcg2Acpi.inf``` * Platform DSC needs to include ```MdePkg/MdeLibs.dsc.inc``` for the required library instance. 2021-05-28T06:44:30+00:00 edk2 edk2-stable202108 edk2 edk2-stable202108 2021-08-27T07:03:54+00:00 # Release Date 2021-08-27 ## New Features * [OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc](https://bugzilla.tianocore.org/show_bug.cgi?id=2122) * [Add CLANGDWARF toolchain for generating ELF+DWARF](https://bugzilla.tianocore.org/show_bug.cgi?id=3431) * [NetworkPkg/IScsiDxe: remotely exploitable buffer overflows](https://bugzilla.tianocore.org/show_bug.cgi?id=3356) * [NetworkPkg/IScsiDxe: add sha256 support to CHAP](https://bugzilla.tianocore.org/show_bug.cgi?id=3355) * [Create header files and multiple Hobs for Universal Payload](https://bugzilla.tianocore.org/show_bug.cgi?id=3447) * [Add search feature in config editor](https://bugzilla.tianocore.org/show_bug.cgi?id=3482) * [Add additional build option to treat Dynamic Pcd as DynamicEx Pcd](https://bugzilla.tianocore.org/show_bug.cgi?id=1688) * [Add a new MicrocodeLib for microcode loading](https://bugzilla.tianocore.org/show_bug.cgi?id=3303) * [Implement key enrolment from default key variables](https://bugzilla.tianocore.org/show_bug.cgi?id=3481) * [StandaloneMm support for 32bit Arm machines](https://bugzilla.tianocore.org/show_bug.cgi?id=3381) * [Add firmware support for Cloud Hypervisor on arm64](https://bugzilla.tianocore.org/show_bug.cgi?id=3393) * [Support architecture-specific openssl acceleration](https://bugzilla.tianocore.org/show_bug.cgi?id=2507) * [Support measured AMD SEV boot with kernel/initrd/cmdline](https://bugzilla.tianocore.org/show_bug.cgi?id=3457) * [Add ACPI 6.4 header](https://bugzilla.tianocore.org/show_bug.cgi?id=3516) * [Add new BootDiscoveryPolicyUiLib](https://bugzilla.tianocore.org/show_bug.cgi?id=3551) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2021-05-28&chfieldto=2021-08-27&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2021-08-27T07:03:54+00:00 edk2 edk2-stable202111 edk2 edk2-stable202111 2021-11-26T14:41:40+00:00 # Release Date 2021-11-26 ## New Features * [Add SSDT CPU topology generator](https://bugzilla.tianocore.org/show_bug.cgi?id=3681) * [Support ACPI 6.4 in GTDT parser and generator](https://bugzilla.tianocore.org/show_bug.cgi?id=3565) * [Support ACPI 6.4 in DynamicTables FADT parser](https://bugzilla.tianocore.org/show_bug.cgi?id=3568) * [Support ACPI 6.4 in Acpiview PCCT parser](https://bugzilla.tianocore.org/show_bug.cgi?id=3563) * [Support ACPI 6.4 in Acpiview HMAT parser](https://bugzilla.tianocore.org/show_bug.cgi?id=3570) * [Add support for the microvm machine type (qemu)](https://bugzilla.tianocore.org/show_bug.cgi?id=3599) * [OVMF/ArmVirt: add support for virtio-mmio 1.0](https://bugzilla.tianocore.org/show_bug.cgi?id=3597) * [IntelFsp2Pkg: adopt FSP 2.3 specification](https://bugzilla.tianocore.org/show_bug.cgi?id=3674) * [UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page](https://bugzilla.tianocore.org/show_bug.cgi?id=3473) * [Enable wildcard host name matching in HTTPS/TLS implementation](https://bugzilla.tianocore.org/show_bug.cgi?id=3691) * [Add QuickSort function into BaseLib](https://bugzilla.tianocore.org/show_bug.cgi?id=3675) * [Add SMM NV variable support in universal UEFI payload](https://bugzilla.tianocore.org/show_bug.cgi?id=3528) * [Add TDVF to OvmfPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3429) * [Make package and platform builds reproducible across source format changes](https://bugzilla.tianocore.org/show_bug.cgi?id=3688) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2021-08-27&chfieldto=2021-11-26&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2021-11-26T14:41:40+00:00 edk2 edk2-stable202202 edk2 edk2-stable202202 2022-02-25T15:09:22+00:00 # Release Date 2022-02-25 ## New Features * [OvmfPkg Add new target for Cloud Hypervisor](https://bugzilla.tianocore.org/show_bug.cgi?id=3823) * [Add TDVF to OvmfPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3429) * [Add new APIs to UefiCpuPkg/UefiCpuLib](https://bugzilla.tianocore.org/show_bug.cgi?id=3698) * [Add AMD Secure Nested Paging Support](https://bugzilla.tianocore.org/show_bug.cgi?id=3275) * [Add SSDT PCI generator in DynamicTablesPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3682) * [Support ACPI 6.4 PPTT changes](https://bugzilla.tianocore.org/show_bug.cgi?id=3697) * [Add FdtHwInfoParser library](https://bugzilla.tianocore.org/show_bug.cgi?id=3741) * [Add DynamicPlatRepo library](https://bugzilla.tianocore.org/show_bug.cgi?id=3743) * [Make package and platform builds reproducible across source format changes](https://bugzilla.tianocore.org/show_bug.cgi?id=3688) * [Add Uncrustify CI Plugin](https://bugzilla.tianocore.org/show_bug.cgi?id=3748) * [Apply uncrustify changes to all package C and H files](https://bugzilla.tianocore.org/show_bug.cgi?id=3737) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2021-11-27&chfieldto=2022-02-25&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2022-02-25T15:09:22+00:00 edk2 edk2-stable202205 edk2 edk2-stable202205 2022-05-27T13:22:59+00:00 # Release Date 2022-05-27 ## New Features * [Support PEI 64bit in IntelFsp2Pkg and IntelFsp2WrapperPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3893) * [IntelFsp2Pkg: BaseFspCommonLib Support for X64 Build](https://bugzilla.tianocore.org/show_bug.cgi?id=3867) * [Add PrmPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3812) * [BaseTools Enhance GenFw to support PRM GCC build](https://bugzilla.tianocore.org/show_bug.cgi?id=3802) * [Enable Intel TDX in OvmfPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3429) * [Generate CloudHv target as PVH ELF binary](https://bugzilla.tianocore.org/show_bug.cgi?id=3848) * [Add parallel hash feature into BaseCryptLib](https://bugzilla.tianocore.org/show_bug.cgi?id=3596) * [Configure/Enable elliptic curve ciphers in OpenSSL](https://bugzilla.tianocore.org/show_bug.cgi?id=3679) * [Add FMMT tool into edk2 BaseTools](https://bugzilla.tianocore.org/show_bug.cgi?id=1847) * [Dynamic variable flash information cannot be passed in Standalone MM](https://bugzilla.tianocore.org/show_bug.cgi?id=3479) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2022-02-27&chfieldto=2022-05-27&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2022-05-27T13:22:59+00:00 edk2 edk2-stable202208 edk2 edk2-stable202208 2022-08-29T08:58:03+00:00 # Release Date 2022-08-29 ## New Features * [Add CRC16 and CRC32C to MdePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3871) * [IntelFsp2Pkg/ConfigEditor: Support FSP 2.3 header](https://bugzilla.tianocore.org/show_bug.cgi?id=3921) * [Extend SecureBootVariableLib interfaces](https://bugzilla.tianocore.org/show_bug.cgi?id=3911) * [UEFI HTTPS Boot Support for HTTP Client Authentication (Basic or Digest)](https://bugzilla.tianocore.org/show_bug.cgi?id=2504) * [Support 64bit FspResetType for X64 build](https://bugzilla.tianocore.org/show_bug.cgi?id=3999) * [IntelFsp2Pkg/FspSecCore: Add FSP-I entry for SMM support](https://bugzilla.tianocore.org/show_bug.cgi?id=3993) * [Add PCI_DEVICE_PPI definition to EDK2](https://bugzilla.tianocore.org/show_bug.cgi?id=3907) * [Support to assign the subject name to sign the capsule file](https://bugzilla.tianocore.org/show_bug.cgi?id=3928) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2022-05-28&chfieldto=2022-08-29&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2022-08-29T08:58:03+00:00 edk2 edk2-stable202211 edk2 edk2-stable202211 2022-11-26T02:37:25+00:00 # Release Date 2022-11-26 ## New Features * [CryptoPkg remove EC PCD and merge optimized openssl libs](https://bugzilla.tianocore.org/show_bug.cgi?id=4149) * [Add GoogleTest unit test support to UnitTestFrameworkPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=4134) * [Add Raw algorithm support using Arm FW-TRNG interface](https://bugzilla.tianocore.org/show_bug.cgi?id=3668) * [TDVF Lazy Accept in OvmfPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=3937) * [Debug code to audit BIOS TPM extend operations](https://bugzilla.tianocore.org/show_bug.cgi?id=2858) * [Add a new feature to enable LoongArch prot for EDKII](https://bugzilla.tianocore.org/show_bug.cgi?id=4053) * [CryptoPkg: Need to add additional cipher algos and TLS API to meet WPA3](https://bugzilla.tianocore.org/show_bug.cgi?id=3892) * [IntelFsp2(Wrapper)Pkg: Support FSP 2.4 MultiPhaseInit](https://bugzilla.tianocore.org/show_bug.cgi?id=3916) * [CryptoPkg: Need to support EC and BN API due to WPA3 feature](https://bugzilla.tianocore.org/show_bug.cgi?id=3828) * [Add PCI_DEVICE_PPI support for NvmExpressPei](https://bugzilla.tianocore.org/show_bug.cgi?id=4017) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2022-08-29&chfieldto=2022-11-26&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2022-11-26T02:37:25+00:00 edk2 edk2-stable202302 edk2 edk2-stable202302 2023-03-04T04:24:33+00:00 # Release Date 2023-03-03 ## New Features * [Add support for RISC-V qemu virt machine](https://bugzilla.tianocore.org/show_bug.cgi?id=4076) * [Add RPMB related commands and DCB definition for NVMe](https://bugzilla.tianocore.org/show_bug.cgi?id=4303) * [SecurityBoot - remove self-signed PK requirement in SetupMode](https://bugzilla.tianocore.org/show_bug.cgi?id=2506) * [SecurityBoot - support Authenticated SetVariable with ContentInfo](https://bugzilla.tianocore.org/show_bug.cgi?id=4305) * [TDVF Optimization - Enable Separate-Fv in OvmfPkg/IntelTdx](https://bugzilla.tianocore.org/show_bug.cgi?id=4152) * [TDVF Optimization - Pre-alloc shared memory for TDVF DMA](https://bugzilla.tianocore.org/show_bug.cgi?id=4171) * [TDVF Optimization - Enable Multi-core based lazy-accept](https://bugzilla.tianocore.org/show_bug.cgi?id=4172) * [TDVF - Fix Instruction Pointer Incrementation by TD #VE MMIO Handler](https://bugzilla.tianocore.org/show_bug.cgi?id=4169) * [TDVF - Incorrect implementation in the TDX RTMR implementation](https://bugzilla.tianocore.org/show_bug.cgi?id=4179) * [TDVF - Incorrect protocol and structure version in the TDX CC measurement](https://bugzilla.tianocore.org/show_bug.cgi?id=4184) * [TDVF - TdTcg2Dxe lives in the Ovmfpkg instead of the SecurityPkg](https://bugzilla.tianocore.org/show_bug.cgi?id=4194) * [TDVF - need measurement VMM input ACPI table before register](https://bugzilla.tianocore.org/show_bug.cgi?id=4245) * [TDVF - need integrate feature in config-B to config-A](https://bugzilla.tianocore.org/show_bug.cgi?id=4243) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2022-11-26&chfieldto=2023-03-03&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2023-03-04T04:24:33+00:00 edk2 edk2-stable202305 edk2 edk2-stable202305 2023-05-29T01:13:32+00:00 # Release Date 2023-05-26 ## New Features * [Expose IBT/BTI compatible runtime DXE drivers via memory attributes table](https://bugzilla.tianocore.org/show_bug.cgi?id=4405) * [Update toolchain support](https://bugzilla.tianocore.org/show_bug.cgi?id=4384) * [MdePkg: Support FDT library](https://bugzilla.tianocore.org/show_bug.cgi?id=4392) * [Add google mocks support to UnitTestFrameworkPkg GoogleTestLib](https://bugzilla.tianocore.org/show_bug.cgi?id=4389) * [Platform Redfish Host Interface library for USBNIC](https://bugzilla.tianocore.org/show_bug.cgi?id=4282) * [[OpenSSL] Update OpenSSL version to version 1.1.1t to include CVE fix](https://bugzilla.tianocore.org/show_bug.cgi?id=4342) * [Replace pre-standard __FUNCTION__ with C99 __func__ throughout edk2](https://bugzilla.tianocore.org/show_bug.cgi?id=4450) * [Implement EFI memory attributes protocol for ARM platforms](https://bugzilla.tianocore.org/show_bug.cgi?id=4452) * [Add TraceHubLib Support](https://bugzilla.tianocore.org/show_bug.cgi?id=4144) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2023-03-03&chfieldto=2023-05-28&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2023-05-29T01:13:32+00:00 edk2 edk2-stable202308 edk2 edk2-stable202308 2023-08-26T04:42:22+00:00 # Release Date 2023-08-25 ## New Features * [CryptoPkg: consume OpenSSL 3.0](https://bugzilla.tianocore.org/show_bug.cgi?id=3466) * [Replace the OVMF-specific SataControllerDxe with the generic one in MdeModulePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=4526) * [Remove the duplicated definitions from BaseTools](https://bugzilla.tianocore.org/show_bug.cgi?id=4525) * [Arm GIC Library and Driver improvements](https://bugzilla.tianocore.org/show_bug.cgi?id=3399) * [Use restricted memory mappings in PEI](https://bugzilla.tianocore.org/show_bug.cgi?id=4468) * [Add SmmCpuFeaturesLib implementation for AMD Processor family](https://bugzilla.tianocore.org/show_bug.cgi?id=4182) * [Add USB Network RNDIS Drivers](https://bugzilla.tianocore.org/show_bug.cgi?id=4524) * [Support Standalone MM based variable services in PEI on ARM systems](https://bugzilla.tianocore.org/show_bug.cgi?id=4464) * [Add RISC-V MMU support](https://bugzilla.tianocore.org/show_bug.cgi?id=4523) * [Add RISC-V support to CLANGDWARF toolchain](https://bugzilla.tianocore.org/show_bug.cgi?id=4478) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2023-05-28&chfieldto=2023-08-25&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2023-08-26T04:42:22+00:00 edk2 edk2-stable202311 edk2 edk2-stable202311 2023-11-24T14:18:56+00:00 # Release Date 2023-11-24 ## New Features & Bug Fixes * [UefiPayloadPkg:Enhance the build processing for Universalpayload](https://bugzilla.tianocore.org/show_bug.cgi?id=4532) * [SplitFspBin.py cannot support FSP binary with child FV included](https://bugzilla.tianocore.org/show_bug.cgi?id=4502) * [Cache Disable should not be set by default in CR0 after ResetVector in x64 build](https://bugzilla.tianocore.org/show_bug.cgi?id=4511) * [SMM perf record is copied multiple times to FPDT table if multiple ReadyToBoot events are signaled](https://bugzilla.tianocore.org/show_bug.cgi?id=4470) * [In some cases, LocateHandleBuffer() may allocate a callee freed buffer when an error occurs](https://bugzilla.tianocore.org/show_bug.cgi?id=4543) * [OvmfPkg/IoMmuDxe: don't rely on TPLs to manage concurrency](https://bugzilla.redhat.com/show_bug.cgi?id=2211060) * [Recent OVMF build.sh change breaks useful functionality](https://bugzilla.tianocore.org/show_bug.cgi?id=4528) * [UEFI cryptography agile solution - separate crypto algorithm (phase I)](https://bugzilla.tianocore.org/show_bug.cgi?id=3413) * [Use MpService2Ppi to wakeup CPU in Smm CpuS3](https://edk2.groups.io/g/devel/message/108115) * [Move RngLibTimer from MdePkg to MdeModulePkg](https://bugzilla.tianocore.org/show_bug.cgi?id=4504) * [EFI_RNG_PROTOCOL Describe the DRBG algorithm used in the Arm RNDR instruction](https://bugzilla.tianocore.org/show_bug.cgi?id=4441) * [Faulty Rng algo selection for Arm](https://bugzilla.tianocore.org/show_bug.cgi?id=4151) * [RngDxe assert](https://bugzilla.tianocore.org/show_bug.cgi?id=4491) * [Add New Intel Processor family for SMBIOS Type 4 from SMBIOS 3.7.0](https://bugzilla.tianocore.org/show_bug.cgi?id=4547) * [NetworkPkg: HTTP protocol throughput too small](https://bugzilla.tianocore.org/show_bug.cgi?id=4505) * [MailBoxVersion should be 0 according to the ACPI spec 6.5](https://bugzilla.tianocore.org/show_bug.cgi?id=4527) * [Pyrite support - Secure erase is only available if encryption is supported](https://bugzilla.tianocore.org/show_bug.cgi?id=3004) * [Remove assembly/tool logic that creates AP waking vector in 4G-20h](https://bugzilla.tianocore.org/show_bug.cgi?id=4494) * [MdeModulePkg/Bus/Ata/AtaBusDxe: Coverity scan flags SIGN_EXTENSION issue](https://bugzilla.tianocore.org/show_bug.cgi?id=4209) * [MdeModulePkg/Bus/Pci/NvmExpressPei: Coverity scan flags DEADCODE issue](https://bugzilla.tianocore.org/show_bug.cgi?id=4220) * [MdeModulePkg/Bus/Pci/UhciDxe: fix Coverity issues](https://bugzilla.tianocore.org/show_bug.cgi?id=4211) * [DynamicTablesPkg: Add support for generating ACPI ThermalZones](https://edk2.groups.io/g/devel/message/108800) * [DynamicTablesPkg: Add support for PCI IO using Qword resources](https://edk2.groups.io/g/devel/message/108969) * [MdeModulePkg/XhciDxe: Use Performance Timer for XHCI Timeouts](https://bugzilla.tianocore.org/show_bug.cgi?id=2948) * [MdeModulePkg/Bus/Pci/XhciDxe: Need to abort the command for command timeout](https://bugzilla.tianocore.org/show_bug.cgi?id=4552) * [BaseTools: Add support for LOONGARCH64 R_LARCH_RELAX relocation](https://bugzilla.tianocore.org/show_bug.cgi?id=4559) * [UefiPayloadPkg: Add FIT support](https://edk2.groups.io/g/devel/message/109043) * [SMBIOS BCD revision is not match SMBIOS version](https://bugzilla.tianocore.org/show_bug.cgi?id=4544) * [Xhci: Skip size round up for TRB when getting PCI device/host memory address](https://bugzilla.tianocore.org/show_bug.cgi?id=4560) * [MdePkg: various fixes to ARM/AArch64 SetJump/LongJump](https://edk2.groups.io/g/devel/message/109074) * [TlsLib should not have a list of Ciphers which may or may not agree with what is available](https://bugzilla.tianocore.org/show_bug.cgi?id=2541) * [MtrrLib modules and Unit test Enhancement](https://edk2.groups.io/g/devel/message/108556) * [Use the base SortLib for Redfish modules only](https://bugzilla.tianocore.org/show_bug.cgi?id=4566) * [evaluate the feasibility of using mbedtls as crypto library](https://bugzilla.tianocore.org/show_bug.cgi?id=4177) * [bogus RealTimeClockLib class interface: LibRtcVirtualNotifyEvent](https://bugzilla.tianocore.org/show_bug.cgi?id=4564) * [OvmfPkg/VirtioFsDxe: tolerate opening an absolute pathname relative to a regular file](https://github.com/rhboot/shim/issues/382#issuecomment-1781922322) * [UefiDevicePathLib DevPathToTextAcpiEx overflows the device path node when searching for optional strings](https://bugzilla.tianocore.org/show_bug.cgi?id=4555) * [DynamicTablesPkg/TableHelperLib updates](https://edk2.groups.io/g/devel/message/109363) * [Update Edk2-pytools to latest versions](https://edk2.groups.io/g/devel/message/109935) * [duplicate installation of EFI_REAL_TIME_CLOCK_ARCH_PROTOCOL in RealTimeClockLib instances](https://bugzilla.tianocore.org/show_bug.cgi?id=4565) * [UefiCpuPkg/BaseXApicX2ApicLib: fix CPUID_V2_EXTENDED_TOPOLOGY detection](https://bugzilla.redhat.com/show_bug.cgi?id=2241388) * [OvmfPkg/AcpiPlatformDxe: Coverity scan flags FORWARD_NULL and UNUSED_VALUE issues](https://bugzilla.tianocore.org/show_bug.cgi?id=4568) * [RedfishPkg/RedfishLib: Return HTTP headers to caller](https://edk2.groups.io/g/devel/message/109990) * [ArmVirtPkg: support two PL011 UARTs](https://bugzilla.tianocore.org/show_bug.cgi?id=4577) * [Update MADT for ACPI 6.5, and add TRBE & ETE support](https://edk2.groups.io/g/devel/message/108996) * [Add Variable Policy Audit App and Shell Command](https://edk2.groups.io/g/devel/message/110339) * [Use CodeQL CLI](https://edk2.groups.io/g/devel/message/110565) * [TDVF: TdVmCall needs handle the retry results for MapGPA](https://bugzilla.tianocore.org/show_bug.cgi?id=4572) * [Update GetMaintainer to handle case where a package has only reviewers and no maintainers](https://bugzilla.tianocore.org/show_bug.cgi?id=4593) * [Add 0x0B/Platform Runtime Mechanism (PRM) in Address Space ID of Generic Address Structure (GAS)](https://bugzilla.tianocore.org/show_bug.cgi?id=4567) * [Fix build error when remove "-Wno-sometimes-uninitialized" option](https://bugzilla.tianocore.org/show_bug.cgi?id=4595) ## [Bugzilla List](https://bugzilla.tianocore.org/buglist.cgi?bug_status=RESOLVED&chfield=bug_status&chfieldfrom=2023-08-26&chfieldto=2023-11-24&chfieldvalue=RESOLVED&component=Code&component=Security%20Issue&component=Tools&list_id=16128&product=EDK2&product=Tianocore%20Feature%20Requests&product=Tianocore%20Security%20Issues&query_format=advanced&resolution=---&resolution=FIXED&resolution=INVALID&resolution=WONTFIX&resolution=DUPLICATE&resolution=WORKSFORME) 2023-11-24T14:18:56+00:00