| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ipxe-bootimgs | Distribution: openSUSE Tumbleweed |
| Version: 2.0.0+git20260710.58ee55b3c | Vendor: openSUSE |
| Release: 1.2 | Build date: Thu Jul 16 21:51:32 2026 |
| Group: Development/Tools/Other | Build host: reproducible |
| Size: 6658583 | Source RPM: ipxe-2.0.0+git20260710.58ee55b3c-1.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://ipxe.org/ | |
| Summary: Network boot loader images in bootable USB, CD, floppy and GRUB formats | |
iPXE is a network bootloader. It provides a direct replacement for proprietary PXE ROMs, with many extra features such as DNS, HTTP, iSCSI, etc. This package contains the iPXE boot images in USB, CD, floppy, and PXE UNDI formats. EFI is supported, too.
GPL-2.0-only
* Thu Jul 16 2026 Bernhard Wiedemann <bwiedemann@suse.de>
- Packaging cleanups:
- Drop unused fix-i586.patch and the no_aarch64_cc machinery
- Version the qemu-ipxe Provides/Obsoletes
- Add license files to the qemu subpackage
- Single-source the QEMU NIC list in %build
- Merge the config/general.h sed calls
- Drop obsolete %defattr
- Remove unused ipxe.efi directory creation
- _service: use mode="manual" instead of the deprecated mode="disabled"
- Add ipxe-rpmlintrc to filter the bogus no-binary error
* Tue Jul 14 2026 Dario Faggioli <dfaggioli@suse.com>
- Disable serial. We have -nographic for that, and having both
enabled causes the output to be mangled (bsc#1271154).
* Mon Jul 13 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to version 2.0.0+git20260710.58ee55b3c:
* [image] Make text-based image data usable by string functions
* [xferbuf] Provide an image-backed data transfer buffer
* [libc] Add strchrnul()
* [hermon] Check for failure from pci_ioremap()
* [tls] Retain a reference in the key schedule to the bound identity
* [tls] Reject incorrect server names before completing validation
* [tls] Guard against resuming from an empty resumption master secret
* [tls] Poison initial resumption master secret
* [tls] Poison initial key derivation function master secret
* [tls] Track and check key schedule state
* [tls] Guard against a premature server Finished
* [tls] Send closure alert only when we are initiating the closure
* [tls] Handle key exchange within key schedule
* [cloud] Use "param" command to provide Google metadata request header
* [tls] Restructure to use a single key derivation function master secret
* [tls] Treat session secret as "resumption master secret"
* [virtio] Allow for long delays in processing transmit queue submissions
* [virtio] Fix queue size calculations
* [tls] Move handshake digest within the scope of the key schedule
* [tls] Clarify TLS key schedule function names
* [crypto] Define a structure for holding hybrid MD5+SHA1 HMAC keys
* [crypto] Make maximum TLS version a configurable option
* [crypto] Re-add missing digestInfo prefix for MD5+SHA1
* [build] Use dynamic keyboard map by default in UEFI builds
* [crypto] Allow for the construction of fixed-size HMAC keys
* [s390x] Add time source based on the architectural Time-of-Day clock
* [s390x] Add support for the PRNO TRNG as an entropy source
* [s390x] Provide a mechanism for checking installed CPU facilities
* [crypto] Remove redundant DHE algorithm
* [tls] Use generic key exchange algorithm abstraction for DHE
* [crypto] Allocate FFDHE temporary space on demand
* [crypto] Allow construction of shared public key to return an error
* [crypto] Correct maximum length of FFDHE prime modulus
* [crypto] Generalise implementation of Merkle-Damgård hash algorithms
* [aqc1xx] Free outstanding receive I/O buffers on close
* [aqc1xx] Set netdev->dma for operation with an IOMMU
* [http] Remove knowledge of MD5 digest context internal structure
* [bnxt] Prevent out-of-bounds memory access
* [tls] Centralise pseudorandom data generation
* [crypto] Allow for input keying material to overlap output
* [crypto] Use private data field for public-key algorithms
* [crypto] Allow cipher_setiv() to return an error
* [crypto] Use private data field for cipher algorithms
* [crypto] Use private data field for digest algorithms
* [crypto] Generalise notion of uncompressed elliptic curve points
* [crypto] Use private data field for elliptic curve algorithms
* [crypto] Use verbs in key exchange method names
* [tls] Accept only explicitly supported FFDHE groups
* [crypto] Add TLS named groups for FFDHE key exchange algorithms
* [tls] Allow for the existence of anonymous named groups
* [tls] Prefer X25519 as a key exchange mechanism
* [crypto] Provide a mechanism to check FFDHE group parameters
* [crypto] Use private data field for key exchange algorithms
* [crypto] Add RFC 3526 FFDHE key exchange algorithms
* [crypto] Use inline assembly for bigint_grow() and bigint_shrink()
* [s390x] Use XOR-in-place to zero small fixed-length blocks
* [tls] Rename "named curve" to "named group"
* [virtio] Ignore capabilities that describe inaccessible PCI BARs
* [settings] Allow system time to be modified via builtin/unixtime
* [settings] Allow for writable built-in settings
* [scsi] Use data-transfer buffers for data-in and data-out
* [s390x] Add optimised TCP/IP checksumming
* [ci] Add s390x self-tests
* [s390x] Add support for the IBM s390x CPU architecture
* [test] Fix RFC 1071 checksum calculation for big-endian targets
* [linux] Fix console output on big-endian targets
* [efi] Fix parsing of EFI signature lists on big-endian targets
* [peerdist] Fix segment identifier constant on big-endian targets
* [build] Fix building for big-endian targets
* [crypto] Use generic implementations of slow-path big integer functions
* [iscsi] Ensure SCSI sense data is present before parsing
* [crypto] Add RFC 7919 FFDHE key exchange algorithms
* [test] Allow for large values in key exchange self-tests
* [test] Verify test vector lengths for key exchange self-tests
* [crypto] Remove redundant ECDHE algorithm
* [crypto] Remove elliptic curve abstraction for X25519
* [tls] Use generic key exchange algorithm abstraction for ECDHE
* [crypto] Provide Weierstrass curves as generic key exchange algorithms
* [crypto] Provide X25519 as a generic key exchange algorithm
* [crypto] Add a generic concept of a key exchange algorithm
* [nfs] Fix off-by-one heap overflow in nfs_uri_symlink()
* [linux] Disable implicit linking against libatomic
* [tg3] Use updated DMA APIs
* [loong64] Port the RISC-V optimised TCP/IP checksum implementation
* [riscv] Simplify TCP/IP checksum calculation
* [ci] Update action versions to silence GitHub warnings
* [ci] Include UEFI Secure Boot builds for RISC-V 64 and LoongArch64
* [loong64] Replace optimised string operations
* [build] Mark core riscv64 files as permitted for UEFI Secure Boot
* [neighbour] Discard deferred packets before discarding complete entries
* [build] Mark core loong64 headers as permitted for UEFI Secure Boot
* [doc] Add an AI contribution policy
* [virtio] Replace the virtio core and network device driver
* [lacp] Use the same system identifier for all ports
* [pci] Provide pci_bar_is_io() to determine BAR type
* [ioapi] Allow combined port accessors to be used in Secure Boot builds
* [tls] Add support for RSA-PSS signature scheme
* [tls] Split out hybrid MD5+SHA1 algorithm used in TLS version 1.1
* [crypto] Add support for RSA-PSS signature scheme
* [crypto] Allow for alternative RSA signature schemes
* [test] Use mock random data for public key self-tests
* [bnxt] Do not abort teardown on command failure
* [bnxt] Improve code readability and debug output
* [librm] Specify regparm function attribute only for i386
* [build] Remove redundant regparm function attribute for x86_64
* [w89c840] Fix build warnings with GCC 16
* [intel] Add PCI ID for I219-V and -LM existing of 18-29
* [efi] Register EFI IPv6 device path settings as netX.ndp
* [tls] Treat signature algorithm identifiers as opaque 16-bit values
* [crypto] Fail all operations for the null public-key algorithm
* [efi] Fix operator precedence in autoexec network download
* [crypto] Add support for HKDF key derivation
* [cloud] Separate snapshot deletion from image deletion for Alibaba Cloud
* [virtio] Ensure that device is closed before unmapping regions
* [virtio] Fix assertion failures when interface is closed
* [virtio] Set MTU for both modern and legacy devices
* [cloud] Mark imported images as supporting NVMe for Alibaba Cloud
* [cloud] Delete underlying snapshots when deleting Alibaba Cloud images
* [ci] Add a workflow to import images to Alibaba Cloud
* [cloud] Retry all Alibaba Cloud API calls
* [cloud] Do not rely on CopyImage to import images to Alibaba Cloud
* [cloud] Do not rely on ECS instances to import images to Alibaba Cloud
* [cloud] Do not rely on Function Compute to import images to Alibaba Cloud
* [cloud] Support creation of a censorship bypass role for Alibaba Cloud
* [cloud] Add utility to set up VPCs and security groups in Alibaba Cloud
* [cloud] Update disk log console tool descriptions
* [cloud] Fix architecture detection for partitioned disk images
* [efi] Add disk log console support
* [disklog] Generalise disk log console mechanism
* [disklog] Generalise CONSOLE_INT13 to CONSOLE_DISKLOG
* [undi] Pad transmit buffer length to work around vendor driver bugs
* [efi] Remove the Dhcp6Dxe driver veto
* [efi] Drop to external TPL when unloading vetoed images
* [efi] Add partition information protocol header and GUID definition
* [efi] Update to current EDK2 headers
* [build] Add Ubuntu/Debian syslinux mbr.bin search path
* [build] Allow binaries to request a log partition from genfsimg
* [build] Work around syslinux bugs in FAT cluster counting
* [build] Use sector count values consistently in genfsimg
* [build] Use a partition table in generated USB disk images
* [build] Ensure that generated filesystem images retain no stale content
* [cloud] Omit uploading empty blocks to EBS snapshots
* [cloud] Add utility to read INT13CON partition in Alibaba Cloud
* [bnxt] Update conditions for invoking short commands
* [cloud] Add utility for importing images to Alibaba Cloud
* [undi] Drag in PCI-specific configuration
* [efi] Add a dummy SBOM PE section
* [ci] Add a workflow to import images to Google Cloud
* [cloud] Specify Google Cloud project explicitly for storage client
* [test] Assign unique MAC addresses for test network devices
* [ci] Fix family name used for AWS image imports
* [ci] Add a workflow to import images to AWS EC2
* [cloud] Add ability to upload AMI list to an S3 bucket
* [release] Update version number after release
* [release] Release version 2.0.0
* [doc] Update change log in preparation for release
* [efi] Do not unconditionally raise back to internal TPL
* [efi] Allow creating an image device handle with no parent device
* [efi] Install protocols onto a dedicated device handle
* [efi] Allow executing images even with no open network devices
* [efi] Try all supported autoexec protocols
* [efi] Treat a URI device path as higher priority than a cached DHCP packet
* [github] Add organization to sponsorship links
* [doc] Add contribution guidelines
* [cachedhcp] Set current working URI to cached DHCP filename
* [ci] Include Secure Boot ISO and USB images in release artifacts
* [build] Use Markdown consistently within release notes
* [build] Add support for including a UEFI shim in filesystem images
* [efi] Automatically open network device matching loaded image device path
* [tftp] Use TFTP server URI only if no other working URI is set
* [tls] Transmit a closure alert when closing the connection
* [tls] Respond to received closure alerts
* [cachedhcp] Automatically open network device matching cached DHCPACK
* [dynui] Allow for duplicate shortcut keys
* [doc] Add release process documentation
* [bnxt] Update link speed definitions
* [efi] Allow for the existence of multiple shim lock protocols
* [efi] Support the EFI_PXE_BASE_CODE_TFTP_GET_FILE_SIZE operation
* [xferbuf] Silently discard data written to a void data transfer buffer
* [xferbuf] Record maximum required size
* [ci] Remove now-redundant "netboot" job
* [build] Create util/gensrvimg for building network boot server images
* [bnxt] Fix memory leak in probe()
* [bnxt] Skip unnecessary calls for VFs
* [tls] Remove current time from client random bytes
* [ipv6] Obtain MTU setting from NDP
* [bnxt] Remove access of deprecated link speed variables
* [bnxt] Fix typo in function declaration
* [bnxt] Fix coding style
* [bnxt] Correct port index usage
* [pxeprefix] Add a minimal iPXE NBP metadata header
* [build] Use little-endian word values in genfsimg
* [ci] Add a job to automatically create releases
* [ci] Remove redundant duplicate creation of version.txt
* [build] Allow for generation of all release information
* [doc] Fix header levels in Markdown files
* [doc] Update README
* [doc] Add an initial changelog
* [build] Allow for construction of a text file containing the version
* [build] Mark system logger as permitted for UEFI Secure Boot
* [ci] Create a network bootable files archive as a build artifact
* [ci] Include latest iPXE shim in build artifacts
* [ci] Use ipxe-builder-utils container for combined BIOS/UEFI images
* [ci] Include CA certificate file alongside signed binaries
* [ci] Allow for manually triggered workflow runs
* [ci] Add support for building UEFI Secure Boot signed binaries
* [ci] Schedule Coverity Scan run via GitHub Actions
* [build] Include USB drivers in the all-drivers build by default
* [build] Handle all driver list construction via parserom.pl
* [build] Mark Xen HVM files as permitted for UEFI Secure Boot
* [ci] Include Linux userspace build artifacts
* [slirp] Disable warnings for uncleanly deprecated libslirp functions
* [build] Include PCI drivers only in BIOS and UEFI builds
* [build] Include devicetree drivers in the SBI all-drivers build
* [dt] Add DT_ROM() and DT_ID() macros
* [build] Include Xen and Hyper-V drivers only in x86 BIOS and UEFI builds
* [build] Include Linux network drivers in the Linux all-drivers build
* [linux] Remove unused can_probe field from driver definition
* [build] Include ISA drivers only in 32-bit BIOS builds
* [ci] Include Secure Boot build artifacts
* [build] Filter out non-permitted drivers for UEFI Secure Boot
* [build] Drag in Xen and Hyper-V support via network device drivers
* [build] Construct driver rules for USB devices
* [build] Construct driver lists for each bus type
* [build] Allow PCI_ROM() and ISA_ROM() to span multiple lines
* [usb] Add USB_ROM() and USB_ID() macros
* [librm] Work around two errata in the 386's "popal" instruction
* [syslog] Allow port number to be specified for encrypted syslog server
* [ci] Include supported network device list in build artifacts
* [loong64] Fix error identifier generation for LoongArch64
* [ci] Include error identifier list in build artifacts
* [pci] Ignore invalid subordinate bus numbers
* [ci] Show rolling release publication URL
* [efi] Cache identified PCI root bridge I/O protocol handle
* [uri] Ensure "##params=" separator is correct
* [ci] Run tests on pull requests
* [build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot
* [build] Ensure dependencies of version.c are always rebuilt as expected
* [build] Exclude local named config headers from annotation checks
* [ci] Publish rolling release binaries via https://boot.ipxe.org
* [ci] Publish rolling release build artifacts with stable URLs
* [ci] Produce combined BIOS/UEFI ISO and USB images
* [ci] Upload a selection of build artifacts from each run
* [build] Exclude external files from annotation checks
* [build] Mark compressed image tools as permitted for UEFI Secure Boot
* [build] Mark FDT management tools as permitted for UEFI Secure Boot
* [build] Mark core arm64 files as permitted for UEFI Secure Boot
* [xen] Update to latest stable release headers
* [build] Mark dummy architecture headers as permitted for UEFI Secure Boot
* [build] Mark direct kernel loading as forbidden for UEFI Secure Boot
* [build] Mark GDB stub as forbidden for UEFI Secure Boot
* [build] Mark Realtek driver as permitted for UEFI Secure Boot
* [efi] Avoid dragging in IPv4, IPv6, and DNS support unconditionally
* [build] Mark EFI SNP/MNP driver wrappers as permitted for UEFI Secure Boot
* [prefix] Make unlzma.S compatible with 386 class CPUs
* [ci] Use prebuilt containers to build and test iPXE
* [build] Allow GITVERSION to be specified as an environment variable
* [build] Do not use "git log" to construct build timestamp
* [build] Do not use "git describe" to construct version number
* [build] Allow for per-architecture sysroots
* [ci] Update to ubuntu-24.04 GitHub actions runner
* [build] Extend default configuration for non-BIOS builds
* [usb] Drag in USB commands only when USB support is present
* [pci] Drag in PCI commands only when PCI support is present
* [build] Canonicalise console type configuration
* [build] Canonicalise USB configuration
* [build] Canonicalise settings sources configuration
* [build] Sort general configuration in order of approachability
* [build] Canonicalise remaining portions of general configuration
* [build] Canonicalise SAN boot protocol configuration
* [build] Canonicalise download protocol configuration
* [build] Canonicalise network protocol configuration
* [build] Canonicalise command list configuration
* [build] Canonicalise image type configuration
* [build] Mark more reviewed files as permitted for UEFI Secure Boot
* [build] Fail Secure Boot builds unless all files are permitted
* [build] Mark MD4 and MD5 as forbidden for UEFI Secure Boot
* [build] Mark known reviewed files as permitted for UEFI Secure Boot
* [build] Mark core files as permitted for UEFI Secure Boot
* [build] Check for standalone FILE_LICENCE() and FILE_SECBOOT() declarations
* [console] Mark generated keymaps as permitted for Secure Boot
* [build] Mark existing files as explicitly forbidden for Secure Boot
* [efi] Mark imported EDK2 headers as permitted for Secure Boot
* [efi] Update to current EDK2 headers
* [build] Define a mechanism for marking Secure Boot permissibility
* [neighbour] Treat delayed transmissions as pending operations
* [tcp] Report TCP statistics via the "ipstat" command
* [malloc] Increase heap size to 4MB
* [tcp] Discard packets that lie immediately before the receive window
* [neighbour] Add the ability to artificially delay outbound packets
* [neighbour] Split out deferred transmission from discovery completion
* [neighbour] Use discovery protocol field to identify incomplete neighbours
* [neighbour] Always use network device's own link-layer address
* [crypto] Allow for zero-length big integer literals
* [test] Update big integer tests to use okx()
* [crypto] Fix identification of non-wrapped elliptic curve identifiers
* [crypto] Add ECDSA-based TLS cipher suites
* [test] Add test cases for X.509 certificates with ECDSA signatures
* [crypto] Add OID-identified algorithms for ECDSA with SHA2 hash family
* [crypto] Allow ecPublicKey to be identified as a public-key algorithm
* [test] Ensure OID-identified algorithms are present for X.509 tests
* [x509] Correct debug message
* [crypto] Add support for ECDSA signatures
* [test] Test verification of constructed signature
* [crypto] Allow for an explicit representation of point at infinity
* [test] Test signature verification independently of signing
* [intel] Add PCI ID for I219-V and -LM 24
* [efi] Retry calls to GetRNG() as needed
* [crypto] Generalise rsa_parse_integer() to asn1_enter_unsigned()
* [crypto] Allow for addition of arbitrary Weierstrass curve points
* [crypto] Split out Weierstrass point initialisation and finalisation
* [crypto] Expose the (prime) group order as an elliptic curve property
* [crypto] Verify that weierstrass_multiply() result is not point at infinity
* [test] Allow for elliptic curve tests other than multiplication
* [crypto] Expose the base point as an explicit elliptic curve property
* [http] Abort connections after a long period of inactivity
* [http] Rename connection retry timer
* [crypto] Allow for OID-identified elliptic curve algorithms
* [test] Include key matching in existing public-key tests
* [crypto] Remove obsolete maximum output length method
* [crypto] Construct asymmetric ciphered data using ASN.1 builders
* [crypto] Construct signatures using ASN.1 builders
* [crypto] Pass signatures for verification as ASN.1 cursors
* [crypto] Restructure handling of ASN.1 bit strings
* [intel] Add PCI IDs for I225 and I226 chipsets
* [efi] Allow for creating devices with no EFI parent device
* [pci] Use runtime selectable PCI I/O API for EFI cloud builds
* [pci] Allow probing permission to vary by range
* [pci] Use linker tables for runtime selectable PCI APIs
* [pci] Allow PCI configuration space access mechanism to vary by range
* [arm] Avoid unaligned accesses for memcpy() and memset()
* [efi] Wrap a selection of runtime services calls
* [efi] Allow SAN-booted images to be traced via DEBUG=efi_wrap
* [efi] Add image security database GUID definition
* [efi] Add Microsoft vendor GUID definition
* [efi] Add storage security command protocol header and GUID definition
* [efi] Update to current EDK2 headers
* [efi] Mark Arm/ProcessorBind.h as a non-imported header
* [efi] Mark Ip4Config.h as a non-imported header
* [efi] Mark UgaDraw.h as a non-imported header
* [efi] Switch back to VA_START() etc macros for EFIAPI functions
* [efi] Skip including the EDK2 ProcessorBind.h header for 32-bit RISC-V
* [pci] Move ECAM pci_can_probe() definition to correct header file
* [spcr] Accept alternative type value for a 16550-compatible UART
* [acpi] Allow acpi_ioremap() to map a port I/O address
* [ioapi] Allow iounmap() to be called for port I/O addresses
* [spcr] Use the serial port defined by the ACPI SPCR by default
* [spcr] Add support for the ACPI Serial Port Console Redirection table
* [acpi] Add acpi_ioremap() to map an ACPI-described address
* [uart] Make baud rate a property of the UART
* [uart] Support 16550 UARTs accessed via either MMIO or port I/O
* [ioapi] Provide combined MMIO and port I/O accessors
* [pci] Disable decoding while setting a BAR value
* [cloud] Display instance type in AWS EC2
* [ena] Leave queue base address empty when creating a low latency queue
* [riscv] Correct page table stride calculation
* [librm] Correct page table stride calculation
* [cloud] Display build architecture in AWS EC2
* [cloud] Remove AWS public image access block only if not already unblocked
* [cloud] Remove AWS public image access block automatically if needed
* [ena] Limit receive queue size to work around hardware bugs
* [ena] Increase transmit queue size to match receive fill level
* [ena] Add memory barrier after writing to on-device memory
* [ena] Increase receive fill level
* [ena] Add support for low latency transmit queues
* [ena] Record supported device features
* [ena] Cancel uncompleted transmit buffers on close
* [ena] Map the on-device memory, if present
* [ena] Add descriptive messages for any admin queue command failures
* [pci] Record prefetchable memory window for PCI bridges
* [ena] Use pci_bar_set() to place device within bridge memory window
* [pci] Handle sizing of 64-bit BARs
* [tls] Disable renegotiation unless extended master secret is used
* [tls] Refuse to resume sessions with mismatched master secret methods
* [tls] Add support for the Extended Master Secret
* [tls] Generate master secret only after sending Client Key Exchange
* [gve] Rearm interrupts unconditionally on every poll
* [gve] Use raw DMA addresses in descriptors in DQO-QPL mode
* [gve] Report only packet completions for the transmit ring
* [gve] Use dummy interrupt to trigger completion writeback in DQO mode
* [gve] Add missing memory barriers
* [intelxl] Use default dummy MSI-X target address
* [pci] Map all MSI-X interrupts to a dummy target address by default
* [gve] Select preferred operating mode
* [gve] Add support for out-of-order queues
* [gve] Cancel pending transmissions when closing device
* [bnxt] Handle link related async events
* [gve] Allow for descriptor and completion lengths to vary by mode
* [gve] Rename GQI-specific data structures and constants
* [gve] Allow for out-of-order buffer consumption
* [gve] Add support for raw DMA addressing
* [gve] Add concept of a queue page list base device address
* [gve] Set descriptor and completion ring sizes when creating queues
* [gve] Add concept of operating mode
* [gve] Remove separate concept of "packet descriptor"
* [gve] Parse option list returned in device descriptor
* [bnxt] Add error recovery support
* [efi] Use current boot option as a fallback for obtaining the boot URI
* [efi] Add ability to extract device path from an EFI load option
* [libc] Add wcsnlen()
* Tue Jun 30 2026 Dario Faggioli <dfaggioli@suse.com>
- Fix QEMU live migration (bsc#1269260) issues by match the legacy
qemu-ipxe ROM sizes and structure. More specifically:
- Drop i386 and aarch64 from FAT EFI ROMs
- Compress (-ec) x86_64 EFI and inject (-b) legacy ROM
- Add PCI class code 0x02 to EfiRom arguments
- Pad all EFI ROMs to exactly 256KB via truncate
* Wed Jun 03 2026 Dario Faggioli <dfaggioli@suse.com>
- Restrict the build to x86_64 and aarch64, due to dependencies and
to the fact that these arch-es are the only ones where the ROMs
are useful.
* Mon Apr 27 2026 Dario Faggioli <dfaggioli@suse.com>
- Add ipxe-qemu subpackage to provide QEMU network ROMs. This allows
unbundling the iPXE submodule from the main QEMU package, alleviating
code duplication. We now do, here in this package:
* Build legacy and EFI drivers for QEMU specific PCI IDs
(e1000, virtio, rtl8139, ne2k_pci, pcnet, e1000e, vmxnet3).
* Handle legacy and EFI combination, paddint, etc.
* Install the generated ROMs into /usr/share/qemu/.
* Fri Aug 29 2025 Bernhard Wiedemann <bwiedemann@suse.de>
- Add fix-i586.patch to fix compilation for i586 with gcc-15
* Fri Aug 29 2025 Bernhard Wiedemann <bwiedemann@suse.de>
- Drop -Werror
* Thu Aug 28 2025 Ana Guerrero <ana.guerrero@suse.com>
- Update to version 1.21.1+git20250827.61b4585e2:
* [efi] Drag in MNP driver whenever SNP driver is present
* [bnxt] Update CQ doorbell type
* [dwgpio] Use fdt_reg() to get GPIO port numbers
* [fdt] Provide fdt_reg() for unsized single-entry regions
* [cmdline] Show commands in alphabetical order
* [digest] Treat inability to acquire an image as a fatal error
* [digest] Add "--set" option to store digest value in a setting
* [digest] Add commands for all enabled digest algorithms
* [dwgpio] Add driver for the DesignWare GPIO controller
* [gpio] Add a framework for GPIO controllers
* [fdt] Use phandle as device location
* [dwmac] Show core version in debug messages
* [bnxt] Remove unnecessary test_if macro
* [bnxt] Remove unnecessary I/O macros
* [serial] Explicitly initialise serial console UART to NULL
* [undi] Assume that legacy interrupts are broken for any PCIe device
* [pxeprefix] Display PCI vendor and device ID in PXE startup banner
* [fdt] Add ability to locate node by phandle
* [dwusb] Add driver for DesignWare USB3 host controller
* [xhci] Allow for non-PCI xHCI host controllers
* [xhci] Use root hub port number to determine slot type
* [efi] Check only the non-extended WaitForKey event
* [efi] Allow compiler to perform type checks on EFI_EVENT
* [init] Show initialisation function names in debug messages
* [efi] Assume that vendor wireless drivers are unusable via SNP
* [efi] Drop to external TPL for calls to ConnectController()
* [efi] Provide efi_tpl_name() for transcribing TPLs in debug messages
* [dwmac] Add driver for DesignWare Ethernet MAC
* [dma] Use virtual addresses for dma_map()
* [build] Handle isohybrid with xorrisofs
* [iobuf] Ensure I/O buffer data sits within unshared cachelines
* [uaccess] Allow for coherent DMA mapping of the 32-bit address space
* [bnxt] Update supported devices array
* [bnxt] Update device descriptions
* [bnxt] Remove VLAN stripping logic
* [bnxt] Increase Tx descriptors
* [build] Disable use of common symbols
* [build] Allow for the existence of small-data sections
* [legacy] Allocate legacy driver .bss-like segments at probe time
* [legacy] Rename the global legacy NIC to "legacy_nic"
* [legacy] Allocate extra padding in receive buffers
* [pxe] Use a weak symbol for isapnp_read_port
* [fdtcon] Add basic support for FDT-based system serial console
* [dwuart] Read input clock frequency from the device tree
* [uart] Wait for 16550 UART to become idle before modifying LCR
* [serial] Allow platform to specify mechanism for identifying console
* [dwuart] Add "ns16550a" compatible device ID
* [dwuart] Add a basic driver for the Synopsys DesignWare UART
* [uart] Allow for dynamically registered 16550 UARTs
* [uart] Add support for MMIO-accessible 16550 UARTs
* [uart] Allow for the existence of non-16550 UARTs
* [uart] Remove ability to use frame formats other than 8n1
* [fdt] Allow paths and aliases to be terminated with separator characters
* [bnxt] Remove TX padding
* [fdtmem] Limit relocation to 32-bit address space
* [dt] Allow for creation of standalone devices
* [ipv4] Add support for classless static routes
* [ipv4] Extend routing mechanism to handle non-default routes
* [ipv4] Add self-tests for IPv4 routing
* [test] Add infrastructure for test network devices
* [dt] Locate parent node at point of use in dt_ioremap()
* [fdt] Provide ability to locate the parent device node
* [fdt] Add tests for device tree creation
* [image] Use image name rather than pointer value in all debug messages
* [fdtmem] Ignore reservation regions with no fixed addresses
* [memmap] Allow explicit colour selection for memory map debug messages
* [memmap] Rename addr/last fields to min/max for clarity
* [lkrn] Support initrd construction for RISC-V bare-metal kernels
* [initrd] Squash and shuffle only initrds within the external heap
* [initrd] Split out initrd construction from bzimage.c
* [initrd] Allow for images straddling the top of the reshuffle region
* [initrd] Rename bzimage_align() to initrd_align()
* [initrd] Swap initrds entirely in-place via triple reversal
* [uheap] Expose external heap region directly
* [uheap] Prevent allocation of blocks with zero physical addresses
* [fdtmem] Allow iPXE to be relocated to the top of the address space
* [lkrn] Shut down devices before jumping to kernel entry point
* [lkrn] Allow a single initrd to be passed to the booted kernel
* [fdt] Allow an initrd to be specified when creating a device tree
* [initrd] Move initrd reshuffling to be architecture-independent code
* [image] Use image replacement when executing extracted images
* [lkrn] Add support for EFI zboot compressed kernel images
* [lkrn] Add basic support for the RISC-V Linux kernel image format
* [bios] Use generic external heap based on the system memory map
* [uheap] Add a generic external heap based on the system memory map
* [malloc] Allow heap to specify block and pointer alignments
* [malloc] Allow for the existence of multiple heaps
* [memmap] Remove now-obsolete get_memmap()
* [bios] Use memmap_describe() to find an external heap location
* [settings] Use memmap_describe() to construct memory map settings
* [bios] Use memmap_describe() to find a relocation address
* [comboot] Use memmap_describe() to obtain available memory
* [multiboot] Use memmap_describe() to construct Multiboot memory map
* [image] Use memmap_describe() to check loadable image segments
* [memmap] Use memmap_dump_all() to dump debug memory maps
* [bios] Describe umalloc() heap as an in-use memory area
* [bios] Update to use the generic system memory map API
* [fdtmem] Update to use the generic system memory map API
* [memmap] Define an API for managing the system memory map
* [tests] Remove prehistoric umalloc() test code
* [fdtmem] Record size of accessible physical address space
* [bios] Rename memmap.c to int15.c
* [bnxt] Use updated DMA APIs
* [bnxt] Return proper error codes in probe
* [crypto] Remove redundant null pointer check
* [fdtmem] Add ability to parse FDT memory map for a relocation address
* [fdt] Generalise access to "reg" property
* [build] Formalise mechanism for accessing absolute symbols
* [libc] Display assertion failure message before incrementing counter
* [uaccess] Generalise librm's virt_offset mechanism for RISC-V
* [build] Constrain PHYS_CODE() and REAL_CODE() to use i386 registers
* [zbin] Allow for constructing compressed dynamic relocation records
* [build] Allow for 32-bit and 64-bit versions of util/zbin
* [uaccess] Remove redundant virt_to_user() and userptr_t
* [uaccess] Reduce scope of included uaccess.h header
* [image] Make image data read-only to most consumers
* [image] Add the concept of a static image
* [image] Move embedded images from .rodata to .data
* [test] Separate read-only and writable CMS test images
* [uaccess] Remove redundant copy_from_user() and copy_to_user()
* [image] Clear recorded replacement image immediately after consuming
* [bofm] Remove userptr_t from BOFM table parsing and updating
* [bofm] Allow BOFM tests to be run without a BOFM-capable device driver
* [build] Remove some long-obsolete unused header files
* [peerdist] Remove never-used peerdist_msg_blk() macro
* [peerdist] Remove userptr_t from PeerDist content information parsing
* [xferbuf] Simplify and generalise data transfer buffers
* [prefix] Remove userptr_t from command line image construction
* [comboot] Remove userptr_t from COM32 API implementation
* [comboot] Remove userptr_t from COMBOOT API implementation
* [comboot] Remove userptr_t from COMBOOT image parsing
* [uaccess] Remove redundant UNULL definition
* [bzimage] Remove userptr_t from bzImage parsing
* [initrd] Use physical addresses for calculations on initrd locations
* [bzimage] Use image name in debug messages
* [efi] Add ability to reboot to firmware setup menu
* [reboot] Generalise warm reboot indicator to a flags bitmask
* [multiboot] Remove userptr_t from Multiboot and ELF image parsing
* [multiboot] Use image name in Multiboot and ELF debug messages
* [linux] Enable compiler warnings when building the linux_api.o object
* [linux] Add missing return statement to linux_poll()
* [build] Disable gcc unterminated-string-initializer warnings
* [build] Remove unsafe disable function wrapper from legacy NIC drivers
* [build] Prevent the use of reserved words in C23
* [build] Fix old-style function definition
* [build] Fix typo in xenver.h header guard
* [pnm] Remove userptr_t from PNM image parsing
* [png] Remove userptr_t from PNG image parsing
* [fbcon] Avoid redrawing unchanged characters when scrolling
* [fbcon] Remove userptr_t from framebuffer console drivers
* [efi] Remove userptr_t from EFI PE image parsing
* [pxe] Remove userptr_t from PXE file API implementation
* [pxe] Remove userptr_t from PXE API call dispatcher
* [cmdline] Remove userptr_t from "digest" command
* [nbi] Remove userptr_t from NBI image parsing
* [sdi] Remove userptr_t from SDI image parsing
* [pxe] Remove userptr_t from PXE NBP image parsing
* [block] Remove userptr_t from block device abstraction
* [uaccess] Remove now-obsolete memchr_user()
* [script] Remove userptr_t from script image parsing
* [ucode] Remove userptr_t from microcode image parsing
* [ucode] Remove userptr_t from microcode update mechanism
* [thunderx] Replace uses of userptr_t with direct pointer dereferences
* [exanic] Replace uses of userptr_t with direct pointer dereferences
* [uaccess] Remove trivial uses of userptr_t
* [gve] Replace uses of userptr_t with direct pointer dereferences
* [umalloc] Remove userptr_t from user memory allocations
* [smbios] Remove userptr_t from SMBIOS structure parsing
* [acpi] Remove userptr_t from ACPI table parsing
* [deflate] Remove userptr_t from decompression code
* [image] Remove userptr_t from image definition
* [crypto] Remove userptr_t from CMS verification and decryption
* [crypto] Remove userptr_t from ASN.1 parsers
* [uaccess] Remove redundant read_user()
* [uaccess] Replace real_to_user() with real_to_virt()
* [uaccess] Remove user_to_phys() and phys_to_user()
* [uaccess] Remove redundant user_to_virt()
* [uaccess] Remove redundant memcpy_user() and related string functions
* [uaccess] Remove redundant userptr_add() and userptr_diff()
* [uaccess] Change userptr_t to be a pointer type
* [uaccess] Add explicit casts to and from userptr_t where needed
* [uaccess] Rename userptr_sub() to userptr_diff()
* [time] Use currticks() to provide the null system time
* [cgem] Add a driver for the Cadence GEM NIC
* [undi] Work around broken ASUSTeK KNPA-U16 server PXE ROM
* [efi] Inhibit calls to Shutdown() for wireless SNP devices
* [netdevice] Add the concept of an insomniac network device
* [efi] Allow for custom methods for disconnecting existing drivers
* [dt] Provide dt_ioremap() to map device registers
* [fdt] Add fdt_cells() to read cell-based properties such as "reg"
* [netdevice] Add missing bus type identifier for devicetree devices
* [crypto] Allow for explicit control of external trust sources
* [dt] Add basic concept of a devicetree bus
* [fdt] Remove concept of a device tree cursor
* [fdt] Add basic tests for reading values from a flattened device tree
* [fdt] Avoid temporarily modifying path during path lookup
* [fdt] Provide fdt_strings() to read string list properties
* [fdt] Allow for trailing slashes in path lookups
* [crypto] Switch to using python-asn1crypto instead of python-asn1
* [fdt] Populate boot arguments in constructed device tree
* [fdt] Identify free space (if any) at end of parsed tree
* [x509] Ensure certificate remains valid during x509_append()
* [tls] Support fragmentation of transmitted records
* [tls] Send an empty client certificate chain if we have no certificate
* [iobuf] Limit automatic I/O buffer alignment to page size
* [tls] Encrypt data in place to reduce memory usage
* [xfer] Use xfer_alloc_iob() for transmit I/O buffers on stream sockets
* [isa] Disable legacy ISA device probing by default
* [efi] Allow for fact that SNP device may be removed by executed image
* [efi] Check correct return value from efi_pxe_find()
* [efi] Disconnect existing drivers on a per-protocol basis
* [efi] Define an attachment priority order for EFI drivers
* [efi] Show all drivers claiming support for a handle in debug messages
* [efi] Return success from Stop() if driver is already stopped
* [efi] Add various well-known GUIDs encountered in WiFi boot
* [efi] Install a device tree for the booted OS, if available
* [fdt] Provide the ability to create a device tree for a booted OS
* [efi] Create a copy of the system flattened device tree, if present
* [fdt] Allow for parsing device trees where the length is known in advance
* [fdt] Allow for the existence of multiple device trees
* [fdt] Add the "fdt" command
* [fdt] Add the concept of an FDT image
* [efi] Add support for installing EFI configuration tables
* [efi] Add flattened device tree header and GUID definitions
* [efi] Add ACPI and SMBIOS tables as well-known GUIDs
* [undi] Ensure forward progress is made even if UNDI IRQ is stuck
* [pxeprefix] Ensure that UNDI IRQ is disabled before starting iPXE
* [pxeprefix] Work around missing type values from PXENV_UNDI_GET_NIC_TYPE
* [efi] Allow use of typed pointers for efi_open() et al
* [efi] Eliminate uses of HandleProtocol()
* [efi] Use efi_open() for all ephemeral protocol opens
* [efi] Use efi_open_unsafe() for all explicitly unsafe protocol opens
* [efi] Use efi_open_by_driver() for all by-driver protocol opens
* [efi] Use efi_open_by_child() for all by-child protocol opens
* [efi] Create safe wrappers for OpenProtocol() and CloseProtocol()
* [efi] Remove the efipci_open() and efipci_close() wrappers
* [efi] Avoid function name near-collision
* [efi] Remove spurious close of SNP device parent's device path
* [efi] Use driver name only from driver binding handles in debug messages
* [efi] Get veto candidate driver name via either component name protocol
* [efi] Get veto candidate driver name from image handle
* [efi] Show image address range in veto debug messages
* [efi] Prefer driver name to device path for debug messages
* [efi] Attempt to retrieve driver name from image handle for debug messages
* [efi] Allow wrapping the global boot services table in situ
* [efi] Fix debug wrappers for CloseEvent() and CheckEvent()
* [efi] Ignore path separator characters in virtual filenames
* [efi] Prescroll the display after a failed wrapped ExitBootServices() call
* [efi] Add EFI_RNG_PROTOCOL_GUID as a well-known GUID
* [crypto] Update cmsdetach to work with python-asn1 version 3.0.0
* [rng] Restore state of IRQ 8 and PIE when disabling entropy gathering
* [pic8259] Return previous state when enabling or disabling IRQs
* [contrib] Update bochsrc.txt to work with current versions
* [efi] Accept and trust CA certificates in the TlsCaCertificates variable
* [efi] Add TLS authentication header and GUID definitions
* [efi] Add EFI_GLOBAL_VARIABLE as a well-known GUID
* [cpio] Allow for the construction of pure directories
* [cpio] Fix calculation of name lengths in CPIO headers
* [crypto] Support extracting certificates from EFI signature list images
* [crypto] Allow for parsing of DER data separate from DER images
* [efi] Allow efi_guid_ntoa() to be used in non-EFI builds
* [efi] Add EFI_SIGNATURE_LIST header and GUID definitions
* [efi] Update to current EDK2 headers
* [build] Use -fshort-wchar when building EFI host utilities
* [efi] Mark UsbHostController.h as a non-imported header
* [lkrnprefix] Support a longer version string
* [cpio] Allow for construction of parent directories as needed
* [menu] Allow a post-activity timeout to be defined
* [crypto] Start up RBG on demand if needed
* [efi] Increase download timeout for autoexec.ipxe
* [crypto] Support direct reduction only for Montgomery constant R^2 mod N
* [crypto] Expose shifted out bit from big integer shifts
* [bnxt] Allocate TX rings with firmware input
* [malloc] Ensure free memory blocks remain aligned
* [malloc] Clean up debug messages
* [crypto] Add definitions and tests for the NIST P-384 elliptic curve
* [crypto] Add definitions and tests for the NIST P-256 elliptic curve
* [crypto] Add support for Weierstrass elliptic curve point multiplication
* [crypto] Add a generic implementation of a Montgomery ladder
* [test] Add generic tests for elliptic curve point multiplication
* [tls] Allow for NIST elliptic curve point formats
* [crypto] Generalise elliptic curve key exchange to ecdhe_key()
* [crypto] Add bigint_ntoa() for transcribing big integers
* [crypto] Extract bigint_reduce_supremum() from bigint_mod_exp()
* [crypto] Allow for relaxed Montgomery reduction
* [efi] Add EFI_TCG2_PROTOCOL header and GUID definition
* [efi] Update to current EDK2 headers
* [crypto] Calculate inverse of modulus on demand in bigint_montgomery()
* [gve] Run startup process only while device is open
* [crypto] Remove obsolete bigint_mod_multiply()
* [crypto] Use Montgomery reduction for modular exponentiation
* [crypto] Add bigint_montgomery() to perform Montgomery reduction
* [crypto] Use inverse size as effective size for bigint_mod_invert()
* [crypto] Eliminate temporary working space for bigint_mod_invert()
* [crypto] Eliminate temporary working space for bigint_reduce()
* [crypto] Expose carry flag from big integer addition and subtraction
* [crypto] Add bigint_msb_is_set() to clarify code
* [efi] Ensure local drives are connected when attempting a SAN boot
* [build] Allow for per-architecture cross-compilation prefixes
* [sbi] Add support for running as a RISC-V SBI payload
* [build] Allow default platform to vary by architecture
* [pci] Provide a null PCI API for platforms with no PCI bus
* [fdt] Add ability to parse unsigned integer properties
* [pci] Drag in PCI settings mechanism only when PCI support is present
* [uaccess] Rename UACCESS_EFI to UACCESS_FLAT
* [smbios] Provide a null SMBIOS API for platforms with no concept of SMBIOS
* [crypto] Add bigint_mod_invert() to calculate inverse modulo a power of two
* [usb] Expose USB device descriptor and strings via settings
* [usb] Add "usbscan" command for iterating over USB devices
* [crypto] Separate out bigint_reduce() from bigint_mod_multiply()
* [crypto] Use architecture-independent bigint_is_set()
* [crypto] Rename bigint_rol()/bigint_ror() to bigint_shl()/bigint_shr()
* [crypto] Eliminate temporary carry space for big integer multiplication
* [arm] Support building as a Linux userspace binary for AArch32
* [arm] Check PMCCNTR availability before use for profiling
* [profile] Standardise return type of profile_timestamp()
* [crypto] Use constant-time big integer multiplication
* [gve] Allocate all possible event counters
* [efi] Remove redundant EFI_BOOT_FILE definitions
* [linux] Allow a sysroot to be specified via SYSROOT=...
* [efi] Use standard va_args macros instead of VA_START() etc
* [test] Add tests for 64-bit logical and arithmetic shifts
* [efi] Centralise definition of efi_cpu_nap()
* [libc] Centralise architecture-independent portions of setjmp.h
* [cloud] Add ability to delete old AMI images
* [cloud] Add family and architecture tags to AWS snapshots and images
* [ena] Change reported operating system type to "iPXE"
* [gdb] Allow CPU architectures to omit support for GDB
* [build] Centralise dummy architecture-specific headers
* [aqc1xx] Add support for Marvell AQtion Ethernet controller
* [etherfabric] Fix use of uninitialised variable in falcon_xaui_link_ok()
* [test] Add CMS decryption self-tests
* [crypto] Allow cms_decrypt() to be called on unregistered images
* [image] Add the "imgdecrypt" command
* [crypto] Support decryption of images via CMS envelopes
* [image] Split image_strip_suffix() out from image_extract()
* [crypto] Add cmsdetach script for detaching encrypted data from CMS messages
* [test] Update CMS self-test terminology
* [crypto] Allow for extraction of ASN.1 algorithm parameters
* [crypto] Hold CMS message as a single ASN.1 object
* [crypto] Remove the concept of a public-key algorithm reusable context
* [tls] Group client and server state in TLS connection structure
* [tls] Group transmit and receive state in TLS connection structure
* [gve] Add missing error codes in EUNIQ() list of potential errors
* [contrib] Remove obsolete rom-o-matic code
* [test] Generalise public-key algorithm tests and use okx()
* [crypto] Pass asymmetric keys as ASN.1 cursors
* [efi] Allow discovery of PCI bus:dev.fn address ranges
* [pci] Separate permission to probe buses from bus:dev.fn range discovery
* [crypto] Fix debug name for empty certificate chain validators
* [crypto] Generalise cms_signature to cms_message
* [crypto] Add OID-identified algorithms for AES ciphers
* [crypto] Pass image as parameter to CMS functions
* [crypto] Allow passing a NULL certificate store to x509_find() et al
* [crypto] Centralise mechanisms for identifying X.509 certificates
* [crypto] Extend asn1_enter() to handle partial object cursors
* [crypto] Clarify ASN.1 cursor invalidation behaviour
* [crypto] Do not return an error when skipping the final ASN.1 object
* [cpuid] Allow hypervisor CPUID leaves to be accessed as settings
* [cpuid] Allow reading hypervisor CPUID leaves
* [smbios] Allow reading an entire SMBIOS data structure as a setting
* [smbios] Avoid reading beyond end of constructed SMBIOS setting
* [cloud] Add utility to read INT13CON partition in Google Compute Engine
* [gve] Increase number of receive buffers to reduce packet loss
* [gve] Add driver for Google Virtual Ethernet NIC
* [cloud] Add utility for importing images to Google Compute Engine
* [ipv6] Expose router address for DHCPv6 leased addresses
* [ipv4] Support small subnets with no directed broadcast address
* [hci] Remove the generalised widget user interface abstraction
* [form] Reimplement the "login" user interface
* [form] Add support for dynamically created interactive forms
* [dynui] Add concept of a secret user interface item
* [dynui] Allow for multiple flags on a user interface item
* [dynui] Generalise mechanisms for looking up user interface items
* [dynui] Generalise the concept of a menu to a dynamic user interface
* [hci] Allow tab key to be used to cycle through UI elements
* [hci] Rename "item" command's first parameter from "label" to "name"
* [hci] Split out msg() and alert() from settings UI code
* [hci] Draw all widgets on the standard screen
* [libc] Add stpcpy()
* [hci] Provide a general concept of a text widget set
* [test] Add test cases for editable strings
* [hci] Fix semantics of replace_string() to match code comments
* [efi] Veto the Dhcp6Dxe driver on all platforms
* [hci] Use dynamically allocated buffers for editable strings
* [efi] Do not attempt to download autoexec.ipxe without a valid base URI
* [netdevice] Add "linktype" setting
* [efi] Restructure handling of autoexec.ipxe script
* [cachedhcp] Allow cached DHCPACK to apply to temporary network devices
* [efi] Add the ability to create a temporary MNP network device
* [efi] Allow for allocating EFI devices from arbitrary handles
* Mon Apr 01 2024 william.brown@suse.com
- Remove 1082.patch which has an alternative merged upstream
- Update to version 1.21.1+git20240329.764e34f:
* [http] Add error table entry for HTTP 404 Not Found error
* [tftp] Add error table entry for TFTP "file not found" error code
* [efi] Add error table entry for local filesystem EFI_NOT_FOUND error
* [efi] Report local file errors during download, rather than on opening
* [image] Allow opaque URI component to provide image name
* [build] Fix build failures with random versions of gcc
* [efi] Extract basic network settings from loaded image device path
* [efi] Add efi_path_mac() to parse a MAC address from an EFI device path
* [efi] Add support for driving EFI_MANAGED_NETWORK_PROTOCOL devices
* [efi] Allow for drivers to be located via child handles
* [efi] Add helper functions for service binding protocols
* [efi] Match chainloaded device by uppermost matching handle
* [efi] Set current working URI from our own device path URI, if present
* [efi] Add efi_path_uri() to parse a URI from an EFI device path
* [settings] Expose current working URI and directory URI via settings
* [efi] Pad transmit buffer length to work around vendor driver bugs
* [golan] Use ETH_HLEN for inline header size
* [build] Fix building on older versions of gcc
* [snp] Allocate additional padding for receive buffers
* [ucode] Add support for updating x86 microcode
* [bios] Provide a multiprocessor API for BIOS
* [librm] Add support for installing a startup IPI handler
* [efi] Provide a multiprocessor API for EFI
* [mp] Define an API for multiprocessor functions
* [efi] Update to current EDK2 headers
* [ci] Update action versions to silence GitHub warnings
* [efi] Do not report return status from efi_block_local()
* [block] Allow SAN boot device to be identified by filesystem label
* [block] Allow SAN boot device to be identified by an extra filename
* [block] Allow SAN boot device to be identified by UUID
* [efi] Add efi_path_guid() utility function
* [block] Allow for additional SAN boot parameters alongside filename
* [efi] Allow booting from local disks via the "sanboot" command
* [block] Allow for iteration over SAN device list in drive number order
* [efi] Generalise block device boot to support arbitrary EFI handles
* [efi] Use file system protocol to check for SAN boot filename existence
* [block] Use drive number as debug message stream ID
* [efi] Use long forms of device paths in debug messages
* [parseopt] Add parse_uuid() for parsing UUID command-line arguments
* [settings] Add parsing for UUID and GUID settings types
* [uuid] Add uuid_aton() to parse a UUID from a string
* [efi] Work around broken boot services table manipulation by UEFI shim
* [eap] Add support for the MS-CHAPv2 authentication method
* [eap] Allow MD5-Challenge authentication method to be disabled
* [eap] Add progress debug messages
* [efi] Ignore new LoongArch PC-relative relocations and relaxations
* [drivers] Sort PCI_ROM() entries numerically
* [crypto] Force inlining of trivial wrapper functions
* [crypto] Add implementation of MS-CHAPv2 authentication
* [crypto] Allow for multiple cross-signed certificate download attempts
* [crypto] Add x509_is_self_signed() helper function
* [crypto] Add x509_truncate() to truncate a certificate chain
* [list] Add list_for_each_entry_safe_continue()
* [list] Add list_is_head_entry()
* [build] Fix build failures with older versions of gcc
* [libc] Allow build_assert() failures to be ignored via NO_WERROR=1
* [bnxt] Add support for BCM957608
* [crypto] Add implementation of the DES cipher
* [test] Remove dummy initialisation vector for ECB-mode AES tests
* [crypto] Fix stray references to AES
* [tls] Tidy up error handling flow in tls_send_plaintext()
* [efi] Fix hang during ExitBootServices()
* [tls] Add ECDHE cipher suites
* [tls] Make key exchange algorithms selectable via build configuration
* [crypto] Add X25519 OID-identified algorithm and TLS named curve
* [tls] Add support for Ephemeral Elliptic Curve Diffie-Hellman key exchange
* [tls] Split out Diffie-Hellman parameter signature verification
* [tls] Generate key material after sending ClientKeyExchange
* [tls] Restructure construction of ClientHello message
* [crypto] Add an abstraction of an elliptic curve
* [crypto] Check for all-zeros result from X25519 key exchange
* [bnxt] Add support for additional chip IDs
* [crypto] Add X25519 key exchange algorithm
* [loong64] Replace broken big integer arithmetic implementations
* [crypto] Add bigint_swap() to conditionally swap big integers
* [crypto] Add bigint_copy() as a convenient wrapper macro
* [crypto] Allow multiplicand and multiplier to differ in size
* [libc] Replace linker_assert() with build_assert()
* [libc] Make static_assert() available via assert.h
* [build] Fix building with newer binutils
* [build] Remove unnecessary ".text" directives
* [eap] Add support for the MD5-Challenge authentication type
* [eap] Add support for sending an EAP identity
* [eap] Ignore any received EAP responses
* [build] Reduce scope of wildcard .gitignore rules
* [smbios] Support scanning for the 64-bit SMBIOS3 entry point
* [intel] Add PCI ID for I219-LM (23)
* [efi] Add potentially missing relocation types
* [efi] Fix Coverity warning about unintended sign extension
* [efi] Add relocation types generated by clang
* [build] Use SOURCE_DATE_EPOCH for FAT serial number if it exists
* [efi] Allow compiling elf2efi with clang
* [efi] Avoid modifying PE/COFF debug filename
* [efi] Extend PE header size to cover space up to first section
* [efi] Fix dependency list construction in EDK2 header import script
* [efi] Maximise image base address
* [efi] Do not assume canonical PE section ordering
* [efi] Treat 16-bit sections as hidden in hybrid binaries
* [efi] Place PE debug information in a hidden section
* [efi] Fix recorded overall size of headers in NT optional header
* [efi] Write out PE header only after writing sections
* [efi] Use load memory address as file offset for hybrid binaries
* [efi] Mark PE images as large address aware
* [efi] Set NXCOMPAT bit in PE header
* [efi] Treat writable sections as data sections
* [efi] Update to current EDK2 headers
* [cloud] Add utility script to read iPXE output from INT13CON partition
* [cloud] Add ability to overwrite existing AMI images
* [eapol] Limit number of EAPoL-Start packets transmitted per attempt
* [eapol] Delay EAPoL-Start while waiting for EAP to complete
* [pci] Require discovery of a PCI device when determining usable PCI APIs
* [pci] Check that ECAM configuration space is within reachable memory
* [pci] Cache ECAM mapping errors
* [pci] Handle non-zero starting bus in ECAM allocations
* [pci] Force completion of ECAM configuration space writes
* [iphone] Add missing va_start()/va_end() around reused argument list
* Mon Nov 20 2023 Bernhard Wiedemann <bwiedemann@suse.com>
- Add 1082.patch to make ipxe.sdsk build reproducible (boo#1062303)
* Mon Nov 06 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Fix build with RPM 4.19: unnumbered patches are no longer
supported.
* Wed Oct 18 2023 Michal Suchanek <msuchanek@suse.com>
- Add floppy disk image.
* use syslinux-mtools for building the image syslinux-mtools.patch
* Wed Oct 18 2023 Michal Suchanek <msuchanek@suse.com>
- Update to version 1.21.1+git20231006.ff0f8604:
* [libc] Use wall clock time as seed for the (non-cryptographic) RNG
* [eapol] Send EAPoL-Start packets to trigger EAP authentication
* [eap] Define a supplicant model for EAP and EAPoL
* [dhcp] Request NTP server option
* [ntp] Define NTP server setting
* [efi] Provide read-only access to EFI variables via settings mechanism
* [crypto] Add support for PKCS#8 private key format
* [efi] Add support for executing images via a shim
* [image] Generalise concept of selected image
* [tls] Handle fragmented handshake records (jsc#PED-5536)
* [params] Allow for arbitrary HTTP request headers to be specified
* [rng] Allow entropy source to be selected at runtime
* [efi] Support the initrd autodetection mechanism in newer Linux kernels
* [loong64] Add initial support for LoongArch64
* [efi] Enable NET_PROTO_LLDP by default
* [dhcp] Ignore DHCPNAK unless originating from the selected DHCP server
* [xen] Update to current Xen headers
* [efi] Allow autoexec script to be located alongside iPXE binary
* [efi] Accept a command line passed to an iPXE image via LoadOptions
* [efi] Update to current EDK2 headers
* [golan] Add new PCI ID for NVIDIA BlueField-3 network device
* [arm] Support building as a Linux userspace binary for AArch64
* Wed Aug 23 2023 Héctor Orón Martínez <hector.oron@gmail.com>
- enable HTTPS downloads (jsc#PED-5536)
* Mon Feb 06 2023 Egbert Eich <eich@suse.com>
- cross-aarch64-gcc7 is not available for SLE-15 (i586).
Also, there is no Leap port for i586, so let's disable aarch64
cross-compile target on i586 (bsc#1207796).
* Mon Jan 23 2023 Christian Goll <cgoll@suse.com>
- enable compressed images
* Fri Jan 20 2023 msuchanek@suse.com
- Update to version 1.21.1+git20230120.a99e435c:
* [efi] Do not rely on ProcessorBind.h when building host binaries (bsc#1207310)
* multiple [ena] [efi] [tls] [intel] [intelxl] enhancements
* [image] Do not clear current working URI when executing embedded image
* [console] Fix definition of unreachability for remapped keys
* [console] Add Swedish "se" keymap
* [efi] Support keyboard remapping via the EFI console
* [usb] Support keyboard remapping via the native USB keyboard driver
* [ecm] Use ACPI-provided system-specific MAC address if present
- Build on all architectures (jsc#PED-1148)
* Thu Jan 19 2023 Bernhard Wiedemann <bwiedemann@suse.com>
- Make bootimgs subpackage architecture-specific
/usr/share/ipxe /usr/share/ipxe/floppy.img /usr/share/ipxe/ipxe-i386.efi /usr/share/ipxe/ipxe-x86_64.efi /usr/share/ipxe/ipxe.dsk /usr/share/ipxe/ipxe.iso /usr/share/ipxe/ipxe.lkrn /usr/share/ipxe/ipxe.sdsk /usr/share/ipxe/ipxe.usb /usr/share/ipxe/snp-arm64.efi /usr/share/ipxe/snp-i386.efi /usr/share/ipxe/snp-x86_64.efi /usr/share/ipxe/undionly.kpxe /usr/share/licenses/ipxe-bootimgs /usr/share/licenses/ipxe-bootimgs/COPYING /usr/share/licenses/ipxe-bootimgs/COPYING.GPLv2 /usr/share/licenses/ipxe-bootimgs/COPYING.UBDL
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Aug 4 22:41:58 2026