| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: ipxe-qemu | Distribution: openSUSE Tumbleweed |
| Version: 2.0.0+git20260710.58ee55b3c | Vendor: openSUSE |
| Release: 1.2 | Build date: Thu Jul 16 21:51:32 2026 |
| Group: System/Emulators/PC | Build host: reproducible |
| Size: 2510493 | Source RPM: ipxe-2.0.0+git20260710.58ee55b3c-1.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://ipxe.org/ | |
| Summary: PXE and EFI ROMs for QEMU network devices | |
This package contains the iPXE ROMs (legacy PXE and EFI) compiled specifically for QEMU emulated network devices.
GPL-2.0-only
* Thu Jul 16 2026 Bernhard Wiedemann <bwiedemann@suse.de>
- Packaging cleanups:
- Drop unused fix-i586.patch and the no_aarch64_cc machinery
- Version the qemu-ipxe Provides/Obsoletes
- Add license files to the qemu subpackage
- Single-source the QEMU NIC list in %build
- Merge the config/general.h sed calls
- Drop obsolete %defattr
- Remove unused ipxe.efi directory creation
- _service: use mode="manual" instead of the deprecated mode="disabled"
- Add ipxe-rpmlintrc to filter the bogus no-binary error
* Tue Jul 14 2026 Dario Faggioli <dfaggioli@suse.com>
- Disable serial. We have -nographic for that, and having both
enabled causes the output to be mangled (bsc#1271154).
* Mon Jul 13 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to version 2.0.0+git20260710.58ee55b3c:
* [image] Make text-based image data usable by string functions
* [xferbuf] Provide an image-backed data transfer buffer
* [libc] Add strchrnul()
* [hermon] Check for failure from pci_ioremap()
* [tls] Retain a reference in the key schedule to the bound identity
* [tls] Reject incorrect server names before completing validation
* [tls] Guard against resuming from an empty resumption master secret
* [tls] Poison initial resumption master secret
* [tls] Poison initial key derivation function master secret
* [tls] Track and check key schedule state
* [tls] Guard against a premature server Finished
* [tls] Send closure alert only when we are initiating the closure
* [tls] Handle key exchange within key schedule
* [cloud] Use "param" command to provide Google metadata request header
* [tls] Restructure to use a single key derivation function master secret
* [tls] Treat session secret as "resumption master secret"
* [virtio] Allow for long delays in processing transmit queue submissions
* [virtio] Fix queue size calculations
* [tls] Move handshake digest within the scope of the key schedule
* [tls] Clarify TLS key schedule function names
* [crypto] Define a structure for holding hybrid MD5+SHA1 HMAC keys
* [crypto] Make maximum TLS version a configurable option
* [crypto] Re-add missing digestInfo prefix for MD5+SHA1
* [build] Use dynamic keyboard map by default in UEFI builds
* [crypto] Allow for the construction of fixed-size HMAC keys
* [s390x] Add time source based on the architectural Time-of-Day clock
* [s390x] Add support for the PRNO TRNG as an entropy source
* [s390x] Provide a mechanism for checking installed CPU facilities
* [crypto] Remove redundant DHE algorithm
* [tls] Use generic key exchange algorithm abstraction for DHE
* [crypto] Allocate FFDHE temporary space on demand
* [crypto] Allow construction of shared public key to return an error
* [crypto] Correct maximum length of FFDHE prime modulus
* [crypto] Generalise implementation of Merkle-Damgård hash algorithms
* [aqc1xx] Free outstanding receive I/O buffers on close
* [aqc1xx] Set netdev->dma for operation with an IOMMU
* [http] Remove knowledge of MD5 digest context internal structure
* [bnxt] Prevent out-of-bounds memory access
* [tls] Centralise pseudorandom data generation
* [crypto] Allow for input keying material to overlap output
* [crypto] Use private data field for public-key algorithms
* [crypto] Allow cipher_setiv() to return an error
* [crypto] Use private data field for cipher algorithms
* [crypto] Use private data field for digest algorithms
* [crypto] Generalise notion of uncompressed elliptic curve points
* [crypto] Use private data field for elliptic curve algorithms
* [crypto] Use verbs in key exchange method names
* [tls] Accept only explicitly supported FFDHE groups
* [crypto] Add TLS named groups for FFDHE key exchange algorithms
* [tls] Allow for the existence of anonymous named groups
* [tls] Prefer X25519 as a key exchange mechanism
* [crypto] Provide a mechanism to check FFDHE group parameters
* [crypto] Use private data field for key exchange algorithms
* [crypto] Add RFC 3526 FFDHE key exchange algorithms
* [crypto] Use inline assembly for bigint_grow() and bigint_shrink()
* [s390x] Use XOR-in-place to zero small fixed-length blocks
* [tls] Rename "named curve" to "named group"
* [virtio] Ignore capabilities that describe inaccessible PCI BARs
* [settings] Allow system time to be modified via builtin/unixtime
* [settings] Allow for writable built-in settings
* [scsi] Use data-transfer buffers for data-in and data-out
* [s390x] Add optimised TCP/IP checksumming
* [ci] Add s390x self-tests
* [s390x] Add support for the IBM s390x CPU architecture
* [test] Fix RFC 1071 checksum calculation for big-endian targets
* [linux] Fix console output on big-endian targets
* [efi] Fix parsing of EFI signature lists on big-endian targets
* [peerdist] Fix segment identifier constant on big-endian targets
* [build] Fix building for big-endian targets
* [crypto] Use generic implementations of slow-path big integer functions
* [iscsi] Ensure SCSI sense data is present before parsing
* [crypto] Add RFC 7919 FFDHE key exchange algorithms
* [test] Allow for large values in key exchange self-tests
* [test] Verify test vector lengths for key exchange self-tests
* [crypto] Remove redundant ECDHE algorithm
* [crypto] Remove elliptic curve abstraction for X25519
* [tls] Use generic key exchange algorithm abstraction for ECDHE
* [crypto] Provide Weierstrass curves as generic key exchange algorithms
* [crypto] Provide X25519 as a generic key exchange algorithm
* [crypto] Add a generic concept of a key exchange algorithm
* [nfs] Fix off-by-one heap overflow in nfs_uri_symlink()
* [linux] Disable implicit linking against libatomic
* [tg3] Use updated DMA APIs
* [loong64] Port the RISC-V optimised TCP/IP checksum implementation
* [riscv] Simplify TCP/IP checksum calculation
* [ci] Update action versions to silence GitHub warnings
* [ci] Include UEFI Secure Boot builds for RISC-V 64 and LoongArch64
* [loong64] Replace optimised string operations
* [build] Mark core riscv64 files as permitted for UEFI Secure Boot
* [neighbour] Discard deferred packets before discarding complete entries
* [build] Mark core loong64 headers as permitted for UEFI Secure Boot
* [doc] Add an AI contribution policy
* [virtio] Replace the virtio core and network device driver
* [lacp] Use the same system identifier for all ports
* [pci] Provide pci_bar_is_io() to determine BAR type
* [ioapi] Allow combined port accessors to be used in Secure Boot builds
* [tls] Add support for RSA-PSS signature scheme
* [tls] Split out hybrid MD5+SHA1 algorithm used in TLS version 1.1
* [crypto] Add support for RSA-PSS signature scheme
* [crypto] Allow for alternative RSA signature schemes
* [test] Use mock random data for public key self-tests
* [bnxt] Do not abort teardown on command failure
* [bnxt] Improve code readability and debug output
* [librm] Specify regparm function attribute only for i386
* [build] Remove redundant regparm function attribute for x86_64
* [w89c840] Fix build warnings with GCC 16
* [intel] Add PCI ID for I219-V and -LM existing of 18-29
* [efi] Register EFI IPv6 device path settings as netX.ndp
* [tls] Treat signature algorithm identifiers as opaque 16-bit values
* [crypto] Fail all operations for the null public-key algorithm
* [efi] Fix operator precedence in autoexec network download
* [crypto] Add support for HKDF key derivation
* [cloud] Separate snapshot deletion from image deletion for Alibaba Cloud
* [virtio] Ensure that device is closed before unmapping regions
* [virtio] Fix assertion failures when interface is closed
* [virtio] Set MTU for both modern and legacy devices
* [cloud] Mark imported images as supporting NVMe for Alibaba Cloud
* [cloud] Delete underlying snapshots when deleting Alibaba Cloud images
* [ci] Add a workflow to import images to Alibaba Cloud
* [cloud] Retry all Alibaba Cloud API calls
* [cloud] Do not rely on CopyImage to import images to Alibaba Cloud
* [cloud] Do not rely on ECS instances to import images to Alibaba Cloud
* [cloud] Do not rely on Function Compute to import images to Alibaba Cloud
* [cloud] Support creation of a censorship bypass role for Alibaba Cloud
* [cloud] Add utility to set up VPCs and security groups in Alibaba Cloud
* [cloud] Update disk log console tool descriptions
* [cloud] Fix architecture detection for partitioned disk images
* [efi] Add disk log console support
* [disklog] Generalise disk log console mechanism
* [disklog] Generalise CONSOLE_INT13 to CONSOLE_DISKLOG
* [undi] Pad transmit buffer length to work around vendor driver bugs
* [efi] Remove the Dhcp6Dxe driver veto
* [efi] Drop to external TPL when unloading vetoed images
* [efi] Add partition information protocol header and GUID definition
* [efi] Update to current EDK2 headers
* [build] Add Ubuntu/Debian syslinux mbr.bin search path
* [build] Allow binaries to request a log partition from genfsimg
* [build] Work around syslinux bugs in FAT cluster counting
* [build] Use sector count values consistently in genfsimg
* [build] Use a partition table in generated USB disk images
* [build] Ensure that generated filesystem images retain no stale content
* [cloud] Omit uploading empty blocks to EBS snapshots
* [cloud] Add utility to read INT13CON partition in Alibaba Cloud
* [bnxt] Update conditions for invoking short commands
* [cloud] Add utility for importing images to Alibaba Cloud
* [undi] Drag in PCI-specific configuration
* [efi] Add a dummy SBOM PE section
* [ci] Add a workflow to import images to Google Cloud
* [cloud] Specify Google Cloud project explicitly for storage client
* [test] Assign unique MAC addresses for test network devices
* [ci] Fix family name used for AWS image imports
* [ci] Add a workflow to import images to AWS EC2
* [cloud] Add ability to upload AMI list to an S3 bucket
* [release] Update version number after release
* [release] Release version 2.0.0
* [doc] Update change log in preparation for release
* [efi] Do not unconditionally raise back to internal TPL
* [efi] Allow creating an image device handle with no parent device
* [efi] Install protocols onto a dedicated device handle
* [efi] Allow executing images even with no open network devices
* [efi] Try all supported autoexec protocols
* [efi] Treat a URI device path as higher priority than a cached DHCP packet
* [github] Add organization to sponsorship links
* [doc] Add contribution guidelines
* [cachedhcp] Set current working URI to cached DHCP filename
* [ci] Include Secure Boot ISO and USB images in release artifacts
* [build] Use Markdown consistently within release notes
* [build] Add support for including a UEFI shim in filesystem images
* [efi] Automatically open network device matching loaded image device path
* [tftp] Use TFTP server URI only if no other working URI is set
* [tls] Transmit a closure alert when closing the connection
* [tls] Respond to received closure alerts
* [cachedhcp] Automatically open network device matching cached DHCPACK
* [dynui] Allow for duplicate shortcut keys
* [doc] Add release process documentation
* [bnxt] Update link speed definitions
* [efi] Allow for the existence of multiple shim lock protocols
* [efi] Support the EFI_PXE_BASE_CODE_TFTP_GET_FILE_SIZE operation
* [xferbuf] Silently discard data written to a void data transfer buffer
* [xferbuf] Record maximum required size
* [ci] Remove now-redundant "netboot" job
* [build] Create util/gensrvimg for building network boot server images
* [bnxt] Fix memory leak in probe()
* [bnxt] Skip unnecessary calls for VFs
* [tls] Remove current time from client random bytes
* [ipv6] Obtain MTU setting from NDP
* [bnxt] Remove access of deprecated link speed variables
* [bnxt] Fix typo in function declaration
* [bnxt] Fix coding style
* [bnxt] Correct port index usage
* [pxeprefix] Add a minimal iPXE NBP metadata header
* [build] Use little-endian word values in genfsimg
* [ci] Add a job to automatically create releases
* [ci] Remove redundant duplicate creation of version.txt
* [build] Allow for generation of all release information
* [doc] Fix header levels in Markdown files
* [doc] Update README
* [doc] Add an initial changelog
* [build] Allow for construction of a text file containing the version
* [build] Mark system logger as permitted for UEFI Secure Boot
* [ci] Create a network bootable files archive as a build artifact
* [ci] Include latest iPXE shim in build artifacts
* [ci] Use ipxe-builder-utils container for combined BIOS/UEFI images
* [ci] Include CA certificate file alongside signed binaries
* [ci] Allow for manually triggered workflow runs
* [ci] Add support for building UEFI Secure Boot signed binaries
* [ci] Schedule Coverity Scan run via GitHub Actions
* [build] Include USB drivers in the all-drivers build by default
* [build] Handle all driver list construction via parserom.pl
* [build] Mark Xen HVM files as permitted for UEFI Secure Boot
* [ci] Include Linux userspace build artifacts
* [slirp] Disable warnings for uncleanly deprecated libslirp functions
* [build] Include PCI drivers only in BIOS and UEFI builds
* [build] Include devicetree drivers in the SBI all-drivers build
* [dt] Add DT_ROM() and DT_ID() macros
* [build] Include Xen and Hyper-V drivers only in x86 BIOS and UEFI builds
* [build] Include Linux network drivers in the Linux all-drivers build
* [linux] Remove unused can_probe field from driver definition
* [build] Include ISA drivers only in 32-bit BIOS builds
* [ci] Include Secure Boot build artifacts
* [build] Filter out non-permitted drivers for UEFI Secure Boot
* [build] Drag in Xen and Hyper-V support via network device drivers
* [build] Construct driver rules for USB devices
* [build] Construct driver lists for each bus type
* [build] Allow PCI_ROM() and ISA_ROM() to span multiple lines
* [usb] Add USB_ROM() and USB_ID() macros
* [librm] Work around two errata in the 386's "popal" instruction
* [syslog] Allow port number to be specified for encrypted syslog server
* [ci] Include supported network device list in build artifacts
* [loong64] Fix error identifier generation for LoongArch64
* [ci] Include error identifier list in build artifacts
* [pci] Ignore invalid subordinate bus numbers
* [ci] Show rolling release publication URL
* [efi] Cache identified PCI root bridge I/O protocol handle
* [uri] Ensure "##params=" separator is correct
* [ci] Run tests on pull requests
* [build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot
* [build] Ensure dependencies of version.c are always rebuilt as expected
* [build] Exclude local named config headers from annotation checks
* [ci] Publish rolling release binaries via https://boot.ipxe.org
* [ci] Publish rolling release build artifacts with stable URLs
* [ci] Produce combined BIOS/UEFI ISO and USB images
* [ci] Upload a selection of build artifacts from each run
* [build] Exclude external files from annotation checks
* [build] Mark compressed image tools as permitted for UEFI Secure Boot
* [build] Mark FDT management tools as permitted for UEFI Secure Boot
* [build] Mark core arm64 files as permitted for UEFI Secure Boot
* [xen] Update to latest stable release headers
* [build] Mark dummy architecture headers as permitted for UEFI Secure Boot
* [build] Mark direct kernel loading as forbidden for UEFI Secure Boot
* [build] Mark GDB stub as forbidden for UEFI Secure Boot
* [build] Mark Realtek driver as permitted for UEFI Secure Boot
* [efi] Avoid dragging in IPv4, IPv6, and DNS support unconditionally
* [build] Mark EFI SNP/MNP driver wrappers as permitted for UEFI Secure Boot
* [prefix] Make unlzma.S compatible with 386 class CPUs
* [ci] Use prebuilt containers to build and test iPXE
* [build] Allow GITVERSION to be specified as an environment variable
* [build] Do not use "git log" to construct build timestamp
* [build] Do not use "git describe" to construct version number
* [build] Allow for per-architecture sysroots
* [ci] Update to ubuntu-24.04 GitHub actions runner
* [build] Extend default configuration for non-BIOS builds
* [usb] Drag in USB commands only when USB support is present
* [pci] Drag in PCI commands only when PCI support is present
* [build] Canonicalise console type configuration
* [build] Canonicalise USB configuration
* [build] Canonicalise settings sources configuration
* [build] Sort general configuration in order of approachability
* [build] Canonicalise remaining portions of general configuration
* [build] Canonicalise SAN boot protocol configuration
* [build] Canonicalise download protocol configuration
* [build] Canonicalise network protocol configuration
* [build] Canonicalise command list configuration
* [build] Canonicalise image type configuration
* [build] Mark more reviewed files as permitted for UEFI Secure Boot
* [build] Fail Secure Boot builds unless all files are permitted
* [build] Mark MD4 and MD5 as forbidden for UEFI Secure Boot
* [build] Mark known reviewed files as permitted for UEFI Secure Boot
* [build] Mark core files as permitted for UEFI Secure Boot
* [build] Check for standalone FILE_LICENCE() and FILE_SECBOOT() declarations
* [console] Mark generated keymaps as permitted for Secure Boot
* [build] Mark existing files as explicitly forbidden for Secure Boot
* [efi] Mark imported EDK2 headers as permitted for Secure Boot
* [efi] Update to current EDK2 headers
* [build] Define a mechanism for marking Secure Boot permissibility
* [neighbour] Treat delayed transmissions as pending operations
* [tcp] Report TCP statistics via the "ipstat" command
* [malloc] Increase heap size to 4MB
* [tcp] Discard packets that lie immediately before the receive window
* [neighbour] Add the ability to artificially delay outbound packets
* [neighbour] Split out deferred transmission from discovery completion
* [neighbour] Use discovery protocol field to identify incomplete neighbours
* [neighbour] Always use network device's own link-layer address
* [crypto] Allow for zero-length big integer literals
* [test] Update big integer tests to use okx()
* [crypto] Fix identification of non-wrapped elliptic curve identifiers
* [crypto] Add ECDSA-based TLS cipher suites
* [test] Add test cases for X.509 certificates with ECDSA signatures
* [crypto] Add OID-identified algorithms for ECDSA with SHA2 hash family
* [crypto] Allow ecPublicKey to be identified as a public-key algorithm
* [test] Ensure OID-identified algorithms are present for X.509 tests
* [x509] Correct debug message
* [crypto] Add support for ECDSA signatures
* [test] Test verification of constructed signature
* [crypto] Allow for an explicit representation of point at infinity
* [test] Test signature verification independently of signing
* [intel] Add PCI ID for I219-V and -LM 24
* [efi] Retry calls to GetRNG() as needed
* [crypto] Generalise rsa_parse_integer() to asn1_enter_unsigned()
* [crypto] Allow for addition of arbitrary Weierstrass curve points
* [crypto] Split out Weierstrass point initialisation and finalisation
* [crypto] Expose the (prime) group order as an elliptic curve property
* [crypto] Verify that weierstrass_multiply() result is not point at infinity
* [test] Allow for elliptic curve tests other than multiplication
* [crypto] Expose the base point as an explicit elliptic curve property
* [http] Abort connections after a long period of inactivity
* [http] Rename connection retry timer
* [crypto] Allow for OID-identified elliptic curve algorithms
* [test] Include key matching in existing public-key tests
* [crypto] Remove obsolete maximum output length method
* [crypto] Construct asymmetric ciphered data using ASN.1 builders
* [crypto] Construct signatures using ASN.1 builders
* [crypto] Pass signatures for verification as ASN.1 cursors
* [crypto] Restructure handling of ASN.1 bit strings
* [intel] Add PCI IDs for I225 and I226 chipsets
* [efi] Allow for creating devices with no EFI parent device
* [pci] Use runtime selectable PCI I/O API for EFI cloud builds
* [pci] Allow probing permission to vary by range
* [pci] Use linker tables for runtime selectable PCI APIs
* [pci] Allow PCI configuration space access mechanism to vary by range
* [arm] Avoid unaligned accesses for memcpy() and memset()
* [efi] Wrap a selection of runtime services calls
* [efi] Allow SAN-booted images to be traced via DEBUG=efi_wrap
* [efi] Add image security database GUID definition
* [efi] Add Microsoft vendor GUID definition
* [efi] Add storage security command protocol header and GUID definition
* [efi] Update to current EDK2 headers
* [efi] Mark Arm/ProcessorBind.h as a non-imported header
* [efi] Mark Ip4Config.h as a non-imported header
* [efi] Mark UgaDraw.h as a non-imported header
* [efi] Switch back to VA_START() etc macros for EFIAPI functions
* [efi] Skip including the EDK2 ProcessorBind.h header for 32-bit RISC-V
* [pci] Move ECAM pci_can_probe() definition to correct header file
* [spcr] Accept alternative type value for a 16550-compatible UART
* [acpi] Allow acpi_ioremap() to map a port I/O address
* [ioapi] Allow iounmap() to be called for port I/O addresses
* [spcr] Use the serial port defined by the ACPI SPCR by default
* [spcr] Add support for the ACPI Serial Port Console Redirection table
* [acpi] Add acpi_ioremap() to map an ACPI-described address
* [uart] Make baud rate a property of the UART
* [uart] Support 16550 UARTs accessed via either MMIO or port I/O
* [ioapi] Provide combined MMIO and port I/O accessors
* [pci] Disable decoding while setting a BAR value
* [cloud] Display instance type in AWS EC2
* [ena] Leave queue base address empty when creating a low latency queue
* [riscv] Correct page table stride calculation
* [librm] Correct page table stride calculation
* [cloud] Display build architecture in AWS EC2
* [cloud] Remove AWS public image access block only if not already unblocked
* [cloud] Remove AWS public image access block automatically if needed
* [ena] Limit receive queue size to work around hardware bugs
* [ena] Increase transmit queue size to match receive fill level
* [ena] Add memory barrier after writing to on-device memory
* [ena] Increase receive fill level
* [ena] Add support for low latency transmit queues
* [ena] Record supported device features
* [ena] Cancel uncompleted transmit buffers on close
* [ena] Map the on-device memory, if present
* [ena] Add descriptive messages for any admin queue command failures
* [pci] Record prefetchable memory window for PCI bridges
* [ena] Use pci_bar_set() to place device within bridge memory window
* [pci] Handle sizing of 64-bit BARs
* [tls] Disable renegotiation unless extended master secret is used
* [tls] Refuse to resume sessions with mismatched master secret methods
* [tls] Add support for the Extended Master Secret
* [tls] Generate master secret only after sending Client Key Exchange
* [gve] Rearm interrupts unconditionally on every poll
* [gve] Use raw DMA addresses in descriptors in DQO-QPL mode
* [gve] Report only packet completions for the transmit ring
* [gve] Use dummy interrupt to trigger completion writeback in DQO mode
* [gve] Add missing memory barriers
* [intelxl] Use default dummy MSI-X target address
* [pci] Map all MSI-X interrupts to a dummy target address by default
* [gve] Select preferred operating mode
* [gve] Add support for out-of-order queues
* [gve] Cancel pending transmissions when closing device
* [bnxt] Handle link related async events
* [gve] Allow for descriptor and completion lengths to vary by mode
* [gve] Rename GQI-specific data structures and constants
* [gve] Allow for out-of-order buffer consumption
* [gve] Add support for raw DMA addressing
* [gve] Add concept of a queue page list base device address
* [gve] Set descriptor and completion ring sizes when creating queues
* [gve] Add concept of operating mode
* [gve] Remove separate concept of "packet descriptor"
* [gve] Parse option list returned in device descriptor
* [bnxt] Add error recovery support
* [efi] Use current boot option as a fallback for obtaining the boot URI
* [efi] Add ability to extract device path from an EFI load option
* [libc] Add wcsnlen()
* Tue Jun 30 2026 Dario Faggioli <dfaggioli@suse.com>
- Fix QEMU live migration (bsc#1269260) issues by match the legacy
qemu-ipxe ROM sizes and structure. More specifically:
- Drop i386 and aarch64 from FAT EFI ROMs
- Compress (-ec) x86_64 EFI and inject (-b) legacy ROM
- Add PCI class code 0x02 to EfiRom arguments
- Pad all EFI ROMs to exactly 256KB via truncate
* Wed Jun 03 2026 Dario Faggioli <dfaggioli@suse.com>
- Restrict the build to x86_64 and aarch64, due to dependencies and
to the fact that these arch-es are the only ones where the ROMs
are useful.
* Mon Apr 27 2026 Dario Faggioli <dfaggioli@suse.com>
- Add ipxe-qemu subpackage to provide QEMU network ROMs. This allows
unbundling the iPXE submodule from the main QEMU package, alleviating
code duplication. We now do, here in this package:
* Build legacy and EFI drivers for QEMU specific PCI IDs
(e1000, virtio, rtl8139, ne2k_pci, pcnet, e1000e, vmxnet3).
* Handle legacy and EFI combination, paddint, etc.
* Install the generated ROMs into /usr/share/qemu/.
* Fri Aug 29 2025 Bernhard Wiedemann <bwiedemann@suse.de>
- Add fix-i586.patch to fix compilation for i586 with gcc-15
* Fri Aug 29 2025 Bernhard Wiedemann <bwiedemann@suse.de>
- Drop -Werror
* Thu Aug 28 2025 Ana Guerrero <ana.guerrero@suse.com>
- Update to version 1.21.1+git20250827.61b4585e2:
* [efi] Drag in MNP driver whenever SNP driver is present
* [bnxt] Update CQ doorbell type
* [dwgpio] Use fdt_reg() to get GPIO port numbers
* [fdt] Provide fdt_reg() for unsized single-entry regions
* [cmdline] Show commands in alphabetical order
* [digest] Treat inability to acquire an image as a fatal error
* [digest] Add "--set" option to store digest value in a setting
* [digest] Add commands for all enabled digest algorithms
* [dwgpio] Add driver for the DesignWare GPIO controller
* [gpio] Add a framework for GPIO controllers
* [fdt] Use phandle as device location
* [dwmac] Show core version in debug messages
* [bnxt] Remove unnecessary test_if macro
* [bnxt] Remove unnecessary I/O macros
* [serial] Explicitly initialise serial console UART to NULL
* [undi] Assume that legacy interrupts are broken for any PCIe device
* [pxeprefix] Display PCI vendor and device ID in PXE startup banner
* [fdt] Add ability to locate node by phandle
* [dwusb] Add driver for DesignWare USB3 host controller
* [xhci] Allow for non-PCI xHCI host controllers
* [xhci] Use root hub port number to determine slot type
* [efi] Check only the non-extended WaitForKey event
* [efi] Allow compiler to perform type checks on EFI_EVENT
* [init] Show initialisation function names in debug messages
* [efi] Assume that vendor wireless drivers are unusable via SNP
* [efi] Drop to external TPL for calls to ConnectController()
* [efi] Provide efi_tpl_name() for transcribing TPLs in debug messages
* [dwmac] Add driver for DesignWare Ethernet MAC
* [dma] Use virtual addresses for dma_map()
* [build] Handle isohybrid with xorrisofs
* [iobuf] Ensure I/O buffer data sits within unshared cachelines
* [uaccess] Allow for coherent DMA mapping of the 32-bit address space
* [bnxt] Update supported devices array
* [bnxt] Update device descriptions
* [bnxt] Remove VLAN stripping logic
* [bnxt] Increase Tx descriptors
* [build] Disable use of common symbols
* [build] Allow for the existence of small-data sections
* [legacy] Allocate legacy driver .bss-like segments at probe time
* [legacy] Rename the global legacy NIC to "legacy_nic"
* [legacy] Allocate extra padding in receive buffers
* [pxe] Use a weak symbol for isapnp_read_port
* [fdtcon] Add basic support for FDT-based system serial console
* [dwuart] Read input clock frequency from the device tree
* [uart] Wait for 16550 UART to become idle before modifying LCR
* [serial] Allow platform to specify mechanism for identifying console
* [dwuart] Add "ns16550a" compatible device ID
* [dwuart] Add a basic driver for the Synopsys DesignWare UART
* [uart] Allow for dynamically registered 16550 UARTs
* [uart] Add support for MMIO-accessible 16550 UARTs
* [uart] Allow for the existence of non-16550 UARTs
* [uart] Remove ability to use frame formats other than 8n1
* [fdt] Allow paths and aliases to be terminated with separator characters
* [bnxt] Remove TX padding
* [fdtmem] Limit relocation to 32-bit address space
* [dt] Allow for creation of standalone devices
* [ipv4] Add support for classless static routes
* [ipv4] Extend routing mechanism to handle non-default routes
* [ipv4] Add self-tests for IPv4 routing
* [test] Add infrastructure for test network devices
* [dt] Locate parent node at point of use in dt_ioremap()
* [fdt] Provide ability to locate the parent device node
* [fdt] Add tests for device tree creation
* [image] Use image name rather than pointer value in all debug messages
* [fdtmem] Ignore reservation regions with no fixed addresses
* [memmap] Allow explicit colour selection for memory map debug messages
* [memmap] Rename addr/last fields to min/max for clarity
* [lkrn] Support initrd construction for RISC-V bare-metal kernels
* [initrd] Squash and shuffle only initrds within the external heap
* [initrd] Split out initrd construction from bzimage.c
* [initrd] Allow for images straddling the top of the reshuffle region
* [initrd] Rename bzimage_align() to initrd_align()
* [initrd] Swap initrds entirely in-place via triple reversal
* [uheap] Expose external heap region directly
* [uheap] Prevent allocation of blocks with zero physical addresses
* [fdtmem] Allow iPXE to be relocated to the top of the address space
* [lkrn] Shut down devices before jumping to kernel entry point
* [lkrn] Allow a single initrd to be passed to the booted kernel
* [fdt] Allow an initrd to be specified when creating a device tree
* [initrd] Move initrd reshuffling to be architecture-independent code
* [image] Use image replacement when executing extracted images
* [lkrn] Add support for EFI zboot compressed kernel images
* [lkrn] Add basic support for the RISC-V Linux kernel image format
* [bios] Use generic external heap based on the system memory map
* [uheap] Add a generic external heap based on the system memory map
* [malloc] Allow heap to specify block and pointer alignments
* [malloc] Allow for the existence of multiple heaps
* [memmap] Remove now-obsolete get_memmap()
* [bios] Use memmap_describe() to find an external heap location
* [settings] Use memmap_describe() to construct memory map settings
* [bios] Use memmap_describe() to find a relocation address
* [comboot] Use memmap_describe() to obtain available memory
* [multiboot] Use memmap_describe() to construct Multiboot memory map
* [image] Use memmap_describe() to check loadable image segments
* [memmap] Use memmap_dump_all() to dump debug memory maps
* [bios] Describe umalloc() heap as an in-use memory area
* [bios] Update to use the generic system memory map API
* [fdtmem] Update to use the generic system memory map API
* [memmap] Define an API for managing the system memory map
* [tests] Remove prehistoric umalloc() test code
* [fdtmem] Record size of accessible physical address space
* [bios] Rename memmap.c to int15.c
* [bnxt] Use updated DMA APIs
* [bnxt] Return proper error codes in probe
* [crypto] Remove redundant null pointer check
* [fdtmem] Add ability to parse FDT memory map for a relocation address
* [fdt] Generalise access to "reg" property
* [build] Formalise mechanism for accessing absolute symbols
* [libc] Display assertion failure message before incrementing counter
* [uaccess] Generalise librm's virt_offset mechanism for RISC-V
* [build] Constrain PHYS_CODE() and REAL_CODE() to use i386 registers
* [zbin] Allow for constructing compressed dynamic relocation records
* [build] Allow for 32-bit and 64-bit versions of util/zbin
* [uaccess] Remove redundant virt_to_user() and userptr_t
* [uaccess] Reduce scope of included uaccess.h header
* [image] Make image data read-only to most consumers
* [image] Add the concept of a static image
* [image] Move embedded images from .rodata to .data
* [test] Separate read-only and writable CMS test images
* [uaccess] Remove redundant copy_from_user() and copy_to_user()
* [image] Clear recorded replacement image immediately after consuming
* [bofm] Remove userptr_t from BOFM table parsing and updating
* [bofm] Allow BOFM tests to be run without a BOFM-capable device driver
* [build] Remove some long-obsolete unused header files
* [peerdist] Remove never-used peerdist_msg_blk() macro
* [peerdist] Remove userptr_t from PeerDist content information parsing
* [xferbuf] Simplify and generalise data transfer buffers
* [prefix] Remove userptr_t from command line image construction
* [comboot] Remove userptr_t from COM32 API implementation
* [comboot] Remove userptr_t from COMBOOT API implementation
* [comboot] Remove userptr_t from COMBOOT image parsing
* [uaccess] Remove redundant UNULL definition
* [bzimage] Remove userptr_t from bzImage parsing
* [initrd] Use physical addresses for calculations on initrd locations
* [bzimage] Use image name in debug messages
* [efi] Add ability to reboot to firmware setup menu
* [reboot] Generalise warm reboot indicator to a flags bitmask
* [multiboot] Remove userptr_t from Multiboot and ELF image parsing
* [multiboot] Use image name in Multiboot and ELF debug messages
* [linux] Enable compiler warnings when building the linux_api.o object
* [linux] Add missing return statement to linux_poll()
* [build] Disable gcc unterminated-string-initializer warnings
* [build] Remove unsafe disable function wrapper from legacy NIC drivers
* [build] Prevent the use of reserved words in C23
* [build] Fix old-style function definition
* [build] Fix typo in xenver.h header guard
* [pnm] Remove userptr_t from PNM image parsing
* [png] Remove userptr_t from PNG image parsing
* [fbcon] Avoid redrawing unchanged characters when scrolling
* [fbcon] Remove userptr_t from framebuffer console drivers
* [efi] Remove userptr_t from EFI PE image parsing
* [pxe] Remove userptr_t from PXE file API implementation
* [pxe] Remove userptr_t from PXE API call dispatcher
* [cmdline] Remove userptr_t from "digest" command
* [nbi] Remove userptr_t from NBI image parsing
* [sdi] Remove userptr_t from SDI image parsing
* [pxe] Remove userptr_t from PXE NBP image parsing
* [block] Remove userptr_t from block device abstraction
* [uaccess] Remove now-obsolete memchr_user()
* [script] Remove userptr_t from script image parsing
* [ucode] Remove userptr_t from microcode image parsing
* [ucode] Remove userptr_t from microcode update mechanism
* [thunderx] Replace uses of userptr_t with direct pointer dereferences
* [exanic] Replace uses of userptr_t with direct pointer dereferences
* [uaccess] Remove trivial uses of userptr_t
* [gve] Replace uses of userptr_t with direct pointer dereferences
* [umalloc] Remove userptr_t from user memory allocations
* [smbios] Remove userptr_t from SMBIOS structure parsing
* [acpi] Remove userptr_t from ACPI table parsing
* [deflate] Remove userptr_t from decompression code
* [image] Remove userptr_t from image definition
* [crypto] Remove userptr_t from CMS verification and decryption
* [crypto] Remove userptr_t from ASN.1 parsers
* [uaccess] Remove redundant read_user()
* [uaccess] Replace real_to_user() with real_to_virt()
* [uaccess] Remove user_to_phys() and phys_to_user()
* [uaccess] Remove redundant user_to_virt()
* [uaccess] Remove redundant memcpy_user() and related string functions
* [uaccess] Remove redundant userptr_add() and userptr_diff()
* [uaccess] Change userptr_t to be a pointer type
* [uaccess] Add explicit casts to and from userptr_t where needed
* [uaccess] Rename userptr_sub() to userptr_diff()
* [time] Use currticks() to provide the null system time
* [cgem] Add a driver for the Cadence GEM NIC
* [undi] Work around broken ASUSTeK KNPA-U16 server PXE ROM
* [efi] Inhibit calls to Shutdown() for wireless SNP devices
* [netdevice] Add the concept of an insomniac network device
* [efi] Allow for custom methods for disconnecting existing drivers
* [dt] Provide dt_ioremap() to map device registers
* [fdt] Add fdt_cells() to read cell-based properties such as "reg"
* [netdevice] Add missing bus type identifier for devicetree devices
* [crypto] Allow for explicit control of external trust sources
* [dt] Add basic concept of a devicetree bus
* [fdt] Remove concept of a device tree cursor
* [fdt] Add basic tests for reading values from a flattened device tree
* [fdt] Avoid temporarily modifying path during path lookup
* [fdt] Provide fdt_strings() to read string list properties
* [fdt] Allow for trailing slashes in path lookups
* [crypto] Switch to using python-asn1crypto instead of python-asn1
* [fdt] Populate boot arguments in constructed device tree
* [fdt] Identify free space (if any) at end of parsed tree
* [x509] Ensure certificate remains valid during x509_append()
* [tls] Support fragmentation of transmitted records
* [tls] Send an empty client certificate chain if we have no certificate
* [iobuf] Limit automatic I/O buffer alignment to page size
* [tls] Encrypt data in place to reduce memory usage
* [xfer] Use xfer_alloc_iob() for transmit I/O buffers on stream sockets
* [isa] Disable legacy ISA device probing by default
* [efi] Allow for fact that SNP device may be removed by executed image
* [efi] Check correct return value from efi_pxe_find()
* [efi] Disconnect existing drivers on a per-protocol basis
* [efi] Define an attachment priority order for EFI drivers
* [efi] Show all drivers claiming support for a handle in debug messages
* [efi] Return success from Stop() if driver is already stopped
* [efi] Add various well-known GUIDs encountered in WiFi boot
* [efi] Install a device tree for the booted OS, if available
* [fdt] Provide the ability to create a device tree for a booted OS
* [efi] Create a copy of the system flattened device tree, if present
* [fdt] Allow for parsing device trees where the length is known in advance
* [fdt] Allow for the existence of multiple device trees
* [fdt] Add the "fdt" command
* [fdt] Add the concept of an FDT image
* [efi] Add support for installing EFI configuration tables
* [efi] Add flattened device tree header and GUID definitions
* [efi] Add ACPI and SMBIOS tables as well-known GUIDs
* [undi] Ensure forward progress is made even if UNDI IRQ is stuck
* [pxeprefix] Ensure that UNDI IRQ is disabled before starting iPXE
* [pxeprefix] Work around missing type values from PXENV_UNDI_GET_NIC_TYPE
* [efi] Allow use of typed pointers for efi_open() et al
* [efi] Eliminate uses of HandleProtocol()
* [efi] Use efi_open() for all ephemeral protocol opens
* [efi] Use efi_open_unsafe() for all explicitly unsafe protocol opens
* [efi] Use efi_open_by_driver() for all by-driver protocol opens
* [efi] Use efi_open_by_child() for all by-child protocol opens
* [efi] Create safe wrappers for OpenProtocol() and CloseProtocol()
* [efi] Remove the efipci_open() and efipci_close() wrappers
* [efi] Avoid function name near-collision
* [efi] Remove spurious close of SNP device parent's device path
* [efi] Use driver name only from driver binding handles in debug messages
* [efi] Get veto candidate driver name via either component name protocol
* [efi] Get veto candidate driver name from image handle
* [efi] Show image address range in veto debug messages
* [efi] Prefer driver name to device path for debug messages
* [efi] Attempt to retrieve driver name from image handle for debug messages
* [efi] Allow wrapping the global boot services table in situ
* [efi] Fix debug wrappers for CloseEvent() and CheckEvent()
* [efi] Ignore path separator characters in virtual filenames
* [efi] Prescroll the display after a failed wrapped ExitBootServices() call
* [efi] Add EFI_RNG_PROTOCOL_GUID as a well-known GUID
* [crypto] Update cmsdetach to work with python-asn1 version 3.0.0
* [rng] Restore state of IRQ 8 and PIE when disabling entropy gathering
* [pic8259] Return previous state when enabling or disabling IRQs
* [contrib] Update bochsrc.txt to work with current versions
* [efi] Accept and trust CA certificates in the TlsCaCertificates variable
* [efi] Add TLS authentication header and GUID definitions
* [efi] Add EFI_GLOBAL_VARIABLE as a well-known GUID
* [cpio] Allow for the construction of pure directories
* [cpio] Fix calculation of name lengths in CPIO headers
* [crypto] Support extracting certificates from EFI signature list images
* [crypto] Allow for parsing of DER data separate from DER images
* [efi] Allow efi_guid_ntoa() to be used in non-EFI builds
* [efi] Add EFI_SIGNATURE_LIST header and GUID definitions
* [efi] Update to current EDK2 headers
* [build] Use -fshort-wchar when building EFI host utilities
* [efi] Mark UsbHostController.h as a non-imported header
* [lkrnprefix] Support a longer version string
* [cpio] Allow for construction of parent directories as needed
* [menu] Allow a post-activity timeout to be defined
* [crypto] Start up RBG on demand if needed
* [efi] Increase download timeout for autoexec.ipxe
* [crypto] Support direct reduction only for Montgomery constant R^2 mod N
* [crypto] Expose shifted out bit from big integer shifts
* [bnxt] Allocate TX rings with firmware input
* [malloc] Ensure free memory blocks remain aligned
* [malloc] Clean up debug messages
* [crypto] Add definitions and tests for the NIST P-384 elliptic curve
* [crypto] Add definitions and tests for the NIST P-256 elliptic curve
* [crypto] Add support for Weierstrass elliptic curve point multiplication
* [crypto] Add a generic implementation of a Montgomery ladder
* [test] Add generic tests for elliptic curve point multiplication
* [tls] Allow for NIST elliptic curve point formats
* [crypto] Generalise elliptic curve key exchange to ecdhe_key()
* [crypto] Add bigint_ntoa() for transcribing big integers
* [crypto] Extract bigint_reduce_supremum() from bigint_mod_exp()
* [crypto] Allow for relaxed Montgomery reduction
* [efi] Add EFI_TCG2_PROTOCOL header and GUID definition
* [efi] Update to current EDK2 headers
* [crypto] Calculate inverse of modulus on demand in bigint_montgomery()
* [gve] Run startup process only while device is open
* [crypto] Remove obsolete bigint_mod_multiply()
* [crypto] Use Montgomery reduction for modular exponentiation
* [crypto] Add bigint_montgomery() to perform Montgomery reduction
* [crypto] Use inverse size as effective size for bigint_mod_invert()
* [crypto] Eliminate temporary working space for bigint_mod_invert()
* [crypto] Eliminate temporary working space for bigint_reduce()
* [crypto] Expose carry flag from big integer addition and subtraction
* [crypto] Add bigint_msb_is_set() to clarify code
* [efi] Ensure local drives are connected when attempting a SAN boot
* [build] Allow for per-architecture cross-compilation prefixes
* [sbi] Add support for running as a RISC-V SBI payload
* [build] Allow default platform to vary by architecture
* [pci] Provide a null PCI API for platforms with no PCI bus
* [fdt] Add ability to parse unsigned integer properties
* [pci] Drag in PCI settings mechanism only when PCI support is present
* [uaccess] Rename UACCESS_EFI to UACCESS_FLAT
* [smbios] Provide a null SMBIOS API for platforms with no concept of SMBIOS
* [crypto] Add bigint_mod_invert() to calculate inverse modulo a power of two
* [usb] Expose USB device descriptor and strings via settings
* [usb] Add "usbscan" command for iterating over USB devices
* [crypto] Separate out bigint_reduce() from bigint_mod_multiply()
* [crypto] Use architecture-independent bigint_is_set()
* [crypto] Rename bigint_rol()/bigint_ror() to bigint_shl()/bigint_shr()
* [crypto] Eliminate temporary carry space for big integer multiplication
* [arm] Support building as a Linux userspace binary for AArch32
* [arm] Check PMCCNTR availability before use for profiling
* [profile] Standardise return type of profile_timestamp()
* [crypto] Use constant-time big integer multiplication
* [gve] Allocate all possible event counters
* [efi] Remove redundant EFI_BOOT_FILE definitions
* [linux] Allow a sysroot to be specified via SYSROOT=...
* [efi] Use standard va_args macros instead of VA_START() etc
* [test] Add tests for 64-bit logical and arithmetic shifts
* [efi] Centralise definition of efi_cpu_nap()
* [libc] Centralise architecture-independent portions of setjmp.h
* [cloud] Add ability to delete old AMI images
* [cloud] Add family and architecture tags to AWS snapshots and images
* [ena] Change reported operating system type to "iPXE"
* [gdb] Allow CPU architectures to omit support for GDB
* [build] Centralise dummy architecture-specific headers
* [aqc1xx] Add support for Marvell AQtion Ethernet controller
* [etherfabric] Fix use of uninitialised variable in falcon_xaui_link_ok()
* [test] Add CMS decryption self-tests
* [crypto] Allow cms_decrypt() to be called on unregistered images
* [image] Add the "imgdecrypt" command
* [crypto] Support decryption of images via CMS envelopes
* [image] Split image_strip_suffix() out from image_extract()
* [crypto] Add cmsdetach script for detaching encrypted data from CMS messages
* [test] Update CMS self-test terminology
* [crypto] Allow for extraction of ASN.1 algorithm parameters
* [crypto] Hold CMS message as a single ASN.1 object
* [crypto] Remove the concept of a public-key algorithm reusable context
* [tls] Group client and server state in TLS connection structure
* [tls] Group transmit and receive state in TLS connection structure
* [gve] Add missing error codes in EUNIQ() list of potential errors
* [contrib] Remove obsolete rom-o-matic code
* [test] Generalise public-key algorithm tests and use okx()
* [crypto] Pass asymmetric keys as ASN.1 cursors
* [efi] Allow discovery of PCI bus:dev.fn address ranges
* [pci] Separate permission to probe buses from bus:dev.fn range discovery
* [crypto] Fix debug name for empty certificate chain validators
* [crypto] Generalise cms_signature to cms_message
* [crypto] Add OID-identified algorithms for AES ciphers
* [crypto] Pass image as parameter to CMS functions
* [crypto] Allow passing a NULL certificate store to x509_find() et al
* [crypto] Centralise mechanisms for identifying X.509 certificates
* [crypto] Extend asn1_enter() to handle partial object cursors
* [crypto] Clarify ASN.1 cursor invalidation behaviour
* [crypto] Do not return an error when skipping the final ASN.1 object
* [cpuid] Allow hypervisor CPUID leaves to be accessed as settings
* [cpuid] Allow reading hypervisor CPUID leaves
* [smbios] Allow reading an entire SMBIOS data structure as a setting
* [smbios] Avoid reading beyond end of constructed SMBIOS setting
* [cloud] Add utility to read INT13CON partition in Google Compute Engine
* [gve] Increase number of receive buffers to reduce packet loss
* [gve] Add driver for Google Virtual Ethernet NIC
* [cloud] Add utility for importing images to Google Compute Engine
* [ipv6] Expose router address for DHCPv6 leased addresses
* [ipv4] Support small subnets with no directed broadcast address
* [hci] Remove the generalised widget user interface abstraction
* [form] Reimplement the "login" user interface
* [form] Add support for dynamically created interactive forms
* [dynui] Add concept of a secret user interface item
* [dynui] Allow for multiple flags on a user interface item
* [dynui] Generalise mechanisms for looking up user interface items
* [dynui] Generalise the concept of a menu to a dynamic user interface
* [hci] Allow tab key to be used to cycle through UI elements
* [hci] Rename "item" command's first parameter from "label" to "name"
* [hci] Split out msg() and alert() from settings UI code
* [hci] Draw all widgets on the standard screen
* [libc] Add stpcpy()
* [hci] Provide a general concept of a text widget set
* [test] Add test cases for editable strings
* [hci] Fix semantics of replace_string() to match code comments
* [efi] Veto the Dhcp6Dxe driver on all platforms
* [hci] Use dynamically allocated buffers for editable strings
* [efi] Do not attempt to download autoexec.ipxe without a valid base URI
* [netdevice] Add "linktype" setting
* [efi] Restructure handling of autoexec.ipxe script
* [cachedhcp] Allow cached DHCPACK to apply to temporary network devices
* [efi] Add the ability to create a temporary MNP network device
* [efi] Allow for allocating EFI devices from arbitrary handles
* Mon Apr 01 2024 william.brown@suse.com
- Remove 1082.patch which has an alternative merged upstream
- Update to version 1.21.1+git20240329.764e34f:
* [http] Add error table entry for HTTP 404 Not Found error
* [tftp] Add error table entry for TFTP "file not found" error code
* [efi] Add error table entry for local filesystem EFI_NOT_FOUND error
* [efi] Report local file errors during download, rather than on opening
* [image] Allow opaque URI component to provide image name
* [build] Fix build failures with random versions of gcc
* [efi] Extract basic network settings from loaded image device path
* [efi] Add efi_path_mac() to parse a MAC address from an EFI device path
* [efi] Add support for driving EFI_MANAGED_NETWORK_PROTOCOL devices
* [efi] Allow for drivers to be located via child handles
* [efi] Add helper functions for service binding protocols
* [efi] Match chainloaded device by uppermost matching handle
* [efi] Set current working URI from our own device path URI, if present
* [efi] Add efi_path_uri() to parse a URI from an EFI device path
* [settings] Expose current working URI and directory URI via settings
* [efi] Pad transmit buffer length to work around vendor driver bugs
* [golan] Use ETH_HLEN for inline header size
* [build] Fix building on older versions of gcc
* [snp] Allocate additional padding for receive buffers
* [ucode] Add support for updating x86 microcode
* [bios] Provide a multiprocessor API for BIOS
* [librm] Add support for installing a startup IPI handler
* [efi] Provide a multiprocessor API for EFI
* [mp] Define an API for multiprocessor functions
* [efi] Update to current EDK2 headers
* [ci] Update action versions to silence GitHub warnings
* [efi] Do not report return status from efi_block_local()
* [block] Allow SAN boot device to be identified by filesystem label
* [block] Allow SAN boot device to be identified by an extra filename
* [block] Allow SAN boot device to be identified by UUID
* [efi] Add efi_path_guid() utility function
* [block] Allow for additional SAN boot parameters alongside filename
* [efi] Allow booting from local disks via the "sanboot" command
* [block] Allow for iteration over SAN device list in drive number order
* [efi] Generalise block device boot to support arbitrary EFI handles
* [efi] Use file system protocol to check for SAN boot filename existence
* [block] Use drive number as debug message stream ID
* [efi] Use long forms of device paths in debug messages
* [parseopt] Add parse_uuid() for parsing UUID command-line arguments
* [settings] Add parsing for UUID and GUID settings types
* [uuid] Add uuid_aton() to parse a UUID from a string
* [efi] Work around broken boot services table manipulation by UEFI shim
* [eap] Add support for the MS-CHAPv2 authentication method
* [eap] Allow MD5-Challenge authentication method to be disabled
* [eap] Add progress debug messages
* [efi] Ignore new LoongArch PC-relative relocations and relaxations
* [drivers] Sort PCI_ROM() entries numerically
* [crypto] Force inlining of trivial wrapper functions
* [crypto] Add implementation of MS-CHAPv2 authentication
* [crypto] Allow for multiple cross-signed certificate download attempts
* [crypto] Add x509_is_self_signed() helper function
* [crypto] Add x509_truncate() to truncate a certificate chain
* [list] Add list_for_each_entry_safe_continue()
* [list] Add list_is_head_entry()
* [build] Fix build failures with older versions of gcc
* [libc] Allow build_assert() failures to be ignored via NO_WERROR=1
* [bnxt] Add support for BCM957608
* [crypto] Add implementation of the DES cipher
* [test] Remove dummy initialisation vector for ECB-mode AES tests
* [crypto] Fix stray references to AES
* [tls] Tidy up error handling flow in tls_send_plaintext()
* [efi] Fix hang during ExitBootServices()
* [tls] Add ECDHE cipher suites
* [tls] Make key exchange algorithms selectable via build configuration
* [crypto] Add X25519 OID-identified algorithm and TLS named curve
* [tls] Add support for Ephemeral Elliptic Curve Diffie-Hellman key exchange
* [tls] Split out Diffie-Hellman parameter signature verification
* [tls] Generate key material after sending ClientKeyExchange
* [tls] Restructure construction of ClientHello message
* [crypto] Add an abstraction of an elliptic curve
* [crypto] Check for all-zeros result from X25519 key exchange
* [bnxt] Add support for additional chip IDs
* [crypto] Add X25519 key exchange algorithm
* [loong64] Replace broken big integer arithmetic implementations
* [crypto] Add bigint_swap() to conditionally swap big integers
* [crypto] Add bigint_copy() as a convenient wrapper macro
* [crypto] Allow multiplicand and multiplier to differ in size
* [libc] Replace linker_assert() with build_assert()
* [libc] Make static_assert() available via assert.h
* [build] Fix building with newer binutils
* [build] Remove unnecessary ".text" directives
* [eap] Add support for the MD5-Challenge authentication type
* [eap] Add support for sending an EAP identity
* [eap] Ignore any received EAP responses
* [build] Reduce scope of wildcard .gitignore rules
* [smbios] Support scanning for the 64-bit SMBIOS3 entry point
* [intel] Add PCI ID for I219-LM (23)
* [efi] Add potentially missing relocation types
* [efi] Fix Coverity warning about unintended sign extension
* [efi] Add relocation types generated by clang
* [build] Use SOURCE_DATE_EPOCH for FAT serial number if it exists
* [efi] Allow compiling elf2efi with clang
* [efi] Avoid modifying PE/COFF debug filename
* [efi] Extend PE header size to cover space up to first section
* [efi] Fix dependency list construction in EDK2 header import script
* [efi] Maximise image base address
* [efi] Do not assume canonical PE section ordering
* [efi] Treat 16-bit sections as hidden in hybrid binaries
* [efi] Place PE debug information in a hidden section
* [efi] Fix recorded overall size of headers in NT optional header
* [efi] Write out PE header only after writing sections
* [efi] Use load memory address as file offset for hybrid binaries
* [efi] Mark PE images as large address aware
* [efi] Set NXCOMPAT bit in PE header
* [efi] Treat writable sections as data sections
* [efi] Update to current EDK2 headers
* [cloud] Add utility script to read iPXE output from INT13CON partition
* [cloud] Add ability to overwrite existing AMI images
* [eapol] Limit number of EAPoL-Start packets transmitted per attempt
* [eapol] Delay EAPoL-Start while waiting for EAP to complete
* [pci] Require discovery of a PCI device when determining usable PCI APIs
* [pci] Check that ECAM configuration space is within reachable memory
* [pci] Cache ECAM mapping errors
* [pci] Handle non-zero starting bus in ECAM allocations
* [pci] Force completion of ECAM configuration space writes
* [iphone] Add missing va_start()/va_end() around reused argument list
* Mon Nov 20 2023 Bernhard Wiedemann <bwiedemann@suse.com>
- Add 1082.patch to make ipxe.sdsk build reproducible (boo#1062303)
* Mon Nov 06 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Fix build with RPM 4.19: unnumbered patches are no longer
supported.
* Wed Oct 18 2023 Michal Suchanek <msuchanek@suse.com>
- Add floppy disk image.
* use syslinux-mtools for building the image syslinux-mtools.patch
* Wed Oct 18 2023 Michal Suchanek <msuchanek@suse.com>
- Update to version 1.21.1+git20231006.ff0f8604:
* [libc] Use wall clock time as seed for the (non-cryptographic) RNG
* [eapol] Send EAPoL-Start packets to trigger EAP authentication
* [eap] Define a supplicant model for EAP and EAPoL
* [dhcp] Request NTP server option
* [ntp] Define NTP server setting
* [efi] Provide read-only access to EFI variables via settings mechanism
* [crypto] Add support for PKCS#8 private key format
* [efi] Add support for executing images via a shim
* [image] Generalise concept of selected image
* [tls] Handle fragmented handshake records (jsc#PED-5536)
* [params] Allow for arbitrary HTTP request headers to be specified
* [rng] Allow entropy source to be selected at runtime
* [efi] Support the initrd autodetection mechanism in newer Linux kernels
* [loong64] Add initial support for LoongArch64
* [efi] Enable NET_PROTO_LLDP by default
* [dhcp] Ignore DHCPNAK unless originating from the selected DHCP server
* [xen] Update to current Xen headers
* [efi] Allow autoexec script to be located alongside iPXE binary
* [efi] Accept a command line passed to an iPXE image via LoadOptions
* [efi] Update to current EDK2 headers
* [golan] Add new PCI ID for NVIDIA BlueField-3 network device
* [arm] Support building as a Linux userspace binary for AArch64
* Wed Aug 23 2023 Héctor Orón Martínez <hector.oron@gmail.com>
- enable HTTPS downloads (jsc#PED-5536)
* Mon Feb 06 2023 Egbert Eich <eich@suse.com>
- cross-aarch64-gcc7 is not available for SLE-15 (i586).
Also, there is no Leap port for i586, so let's disable aarch64
cross-compile target on i586 (bsc#1207796).
* Mon Jan 23 2023 Christian Goll <cgoll@suse.com>
- enable compressed images
* Fri Jan 20 2023 msuchanek@suse.com
- Update to version 1.21.1+git20230120.a99e435c:
* [efi] Do not rely on ProcessorBind.h when building host binaries (bsc#1207310)
* multiple [ena] [efi] [tls] [intel] [intelxl] enhancements
* [image] Do not clear current working URI when executing embedded image
* [console] Fix definition of unreachability for remapped keys
* [console] Add Swedish "se" keymap
* [efi] Support keyboard remapping via the EFI console
* [usb] Support keyboard remapping via the native USB keyboard driver
* [ecm] Use ACPI-provided system-specific MAC address if present
- Build on all architectures (jsc#PED-1148)
* Thu Jan 19 2023 Bernhard Wiedemann <bwiedemann@suse.com>
- Make bootimgs subpackage architecture-specific
/usr/share/licenses/ipxe-qemu /usr/share/licenses/ipxe-qemu/COPYING /usr/share/licenses/ipxe-qemu/COPYING.GPLv2 /usr/share/licenses/ipxe-qemu/COPYING.UBDL /usr/share/qemu /usr/share/qemu/efi-e1000.rom /usr/share/qemu/efi-e1000e.rom /usr/share/qemu/efi-eepro100.rom /usr/share/qemu/efi-ne2k_pci.rom /usr/share/qemu/efi-pcnet.rom /usr/share/qemu/efi-rtl8139.rom /usr/share/qemu/efi-virtio.rom /usr/share/qemu/efi-vmxnet3.rom /usr/share/qemu/pxe-e1000.rom /usr/share/qemu/pxe-eepro100.rom /usr/share/qemu/pxe-ne2k_pci.rom /usr/share/qemu/pxe-pcnet.rom /usr/share/qemu/pxe-rtl8139.rom /usr/share/qemu/pxe-virtio.rom
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Aug 15 22:34:55 2026