fwupd (1.5.7-5) [PTS] [DDPO]

NEW: VCS has unreleased changes: 1.7.0-1 > 1.5.7-5

Git: https://salsa.debian.org/efi-team/fwupd.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian
Path: debian/changelog
Browser: https://salsa.debian.org/efi-team/fwupd
Last scan: 2021-10-25 18:36:40+00
Next scan: 2021-11-03 11:58:00+00
Merge requests: 1

Debian changelog in Git:

fwupd (1.7.0-1) UNRELEASED; urgency=medium

  * New upstream version (1.7.0)
  * Update debian/control and debian/copyright for changes upstream
  * Drop all patches, upstream

 -- Mario Limonciello <superm1@gmail.com>  Mon, 25 Oct 2021 10:58:15 -0500

This branch is 6 commits ahead of tag 1.7.0

Git log:

commit 2504b21d191657641e9ecc93d12eb6a93c72fe6e
Author: Mario Limonciello <mario.limonciello@amd.com>
Date:   Mon Oct 25 13:12:30 2021 -0500

    trivial: drop debian/grab_version

commit 6427e0a52f0f612269a21d0816b56243abc43385
Merge: b0940fc3 a74cee2d
Author: Mario Limonciello <superm1@gmail.com>
Date:   Mon Oct 25 16:40:28 2021 +0000

    Merge branch 'merge_1_7_0' into 'debian'
    
    Update 1.7.0 release
    
    See merge request efi-team/fwupd!7

commit a74cee2d86fc6cfe8afbdfd2323e94d636129cdb
Author: Mario Limonciello <mario.limonciello@amd.com>
Date:   Thu Aug 19 12:08:54 2021 -0500

    Refresh debian/ based on 1.7.0

commit 63f7d1c07cbf22c6b2e70b4af387481a04c47819
Merge: b0940fc3 0afe353e
Author: Mario Limonciello <mario.limonciello@amd.com>
Date:   Mon Oct 25 10:57:17 2021 -0500

    Merge tag '1.7.0' into merge_1_7_0
    
    Release fwupd 1.7.0

commit b0940fc3d930836891fdf72d7a5214f978da03a0
Author: Steve McIntyre <steve@einval.com>
Date:   Wed Sep 22 00:31:56 2021 +0100

    Fix versioning around signed packages
    
    * Change dependency versioning strategy for the signed fwupd
      packages to make them binNMU friendly. Closes: #973715
    
    * Similarly change versioning used for Built-Using. Closes: #992910

commit f70f03b4fac27759e58f53ad23c96ff9966ceef5
Author: Steve McIntyre <steve@einval.com>
Date:   Sat May 15 00:44:32 2021 +0100

    Take more SBAT patches from upstream, and reorder patches to match

commit 496fc23b6ce8d0abac176e1a7455f778d79d81cd
Author: Steve McIntyre <steve@einval.com>
Date:   Fri Mar 26 00:34:31 2021 +0000

    Fix generation of the vendor SBAT string

commit bbe9bf1537738cd0af5d00cd451bd1da35699858
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Mar 11 16:22:19 2021 -0600

    releasing package fwupd version 1.5.7-3

commit 256712f36fbb5026bab1a60d6fbdddfccba3962e
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Mar 11 16:20:28 2021 -0600

    backport a patch to fix activatable devices getting stuck in an update loop

commit ee187d8433a8489d2583c741fc409150d57088d4
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Mar 11 16:19:13 2021 -0600

    backport a patch to fix regression in fwupdtool activate

commit 386c8993a832a44b352ac1b5b3641ec9c3cacc4f
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 23 17:26:02 2021 -0600

    releasing package fwupd version 1.5.7-2

commit 8a4a408ed945ce953f992e60c375a5109f84f448
Merge: b21c8653 ea7818cd
Author: Steve McIntyre <93sam@debian.org>
Date:   Tue Feb 23 23:09:29 2021 +0000

    Merge branch 'debian-armhf-ftbfs' into 'debian'
    
    Backport a patch to fix FTBFS on armhf for SBAT
    
    See merge request efi-team/fwupd!5

commit ea7818cdb92fd7f4a20b2fa0f108a244fa046fcd
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 23 16:43:57 2021 -0600

    Backport a patch to fix FTBFS on armhf for SBAT

commit b21c8653f44dae738f01f736ee79013d11d30403
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 23 10:22:07 2021 -0600

    releasing package fwupd version 1.5.7-1

commit dc4afec436d6207f78e0f5aa98a995d8bf15aedc
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 23 09:09:32 2021 -0600

    Update debian/* to 1.5.7

commit 51f916e77505b842aa7c3b03b9d7c325225d61f6
Merge: 06dc789b 674fccdd
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 23 09:03:56 2021 -0600

    Merge tag '1.5.7' into debian
    
    Release fwupd 1.5.7

commit 674fccdd0d20f45632490df3075be884b94f8726
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 23 14:53:23 2021 +0000

    Release fwupd 1.5.7
    
    Signed-off-by: Richard Hughes <richard@hughsie.com>

commit 53de7e25a4cd3d5caae6befca041b7cb6515c7ba
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 23 14:28:28 2021 +0000

    trivial: Only allow verify-update for plugins that support _CAN_VERIFY
    
    If the user explicitly specifies the device-id then we do not do the front-end
    filtering. If the device detaches without being able to attach then the hardware
    could be left in the bootloader state.
    
    See https://github.com/fwupd/fwupd/issues/2926#issuecomment-784234180

commit 01e87896f59fa7ffa5d288c7e224fcb07f91d587
Author: Ricardo Cañuelo <ricardo.canuelo@collabora.com>
Date:   Tue Feb 23 14:48:17 2021 +0100

    Fix GVariant declarations in fu_bluez_device_write
    
    References to opt_variant and val_variant are sunk in a subsequent
    variant creation and consumed by g_dbus_proxy_call_sync. They don't need
    to be freed in this context.

commit 7b2621c3de970b9b7e5378a3937933e9d92a07be
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 20:22:22 2021 +0000

    trivial: Incorporate by merging the device flags
    
    If any flags are set in the baseclass (e.g. FuDevice) then incorporating with
    a FuUdevDevice or FuUefiDevice is not going to merge the flags.

commit ed4ca92eb3db8fdfb8f34711ddf0233d108fb0f9
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 23 10:38:24 2021 +0000

    synaptics-rmi: Read the PDT by calling the correct setup function

commit 61e4ff76840d67e79b006be0cdaf587547c3374b
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 23 09:59:51 2021 +0000

    trivial: Fix up two gtk-doc typos

commit 20d4356d399390dc93b8228766892968fb6ee8e8
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 23 09:57:59 2021 +0000

    trivial: Enable bluez by default for Fedora

commit edac3d7d3f7d6b49fa6eb93cd440fd4fe3de7328
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 23 09:57:35 2021 +0000

    trivial: Fix spelling of BlueZ in various places

commit 7dc9592ce0c2a9e441eda7508bd7acdcdbefeef0
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 23 09:57:18 2021 +0000

    trivial: Disable bluez by default
    
    We can enable this once we have a real plugin that actually depends on it.

commit 44ee5def43b708d6dbd267140d0a1ef445244d0e
Author: Ricky Wu <spring1527@gmail.com>
Date:   Tue Feb 23 16:34:09 2021 +0800

    Test rts54hub rtd21xx (#2927)
    
    * rts54hub: Optimized rtd21xx ISP flow

commit f722b30205a69007c80275df9fc81ba4583e201b
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 21:42:08 2021 +0000

    libfwupd: Fix adding multiple flags to devices
    
    Ignore the request if _all_ the new flags are already set, not just any of them.

commit ed0af24406041006752ac83c357d728a1566a945
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 21:27:16 2021 +0000

    trivial: Use fwupd_device_remove_flag() to remove a single flag

commit 3f94eabe69d01290bdc33d562ce3c0d7b2f99107
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 21:26:35 2021 +0000

    trivial: Use fwupd_device_add_flags() to set a single flag

commit d0ba469305f17ba8156b4c1839af3dd1394ff856
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 20:57:21 2021 +0000

    Drop unused heap pages after startup has completed
    
    Although glibc calls this when memory gets low automatically, we can invoke it
    manually when we've loaded all plugins and coldplugged all devices.
    
    This has no effect when using proper heap benchmarks like massif, but random
    Reddit users just looking at the RSS column in an 'easy-to-use memory profiler'
    will see a much lower numbers.
    
    Where this feature might actually be useful is after a libxmlb metadata rebuild
    where we dirtied a lot of heap just parsing XML.

commit 1bf5d32e697d9f3801c216405297fde78d779c4e
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 15:52:33 2021 +0000

    trivial: Use SBAT for aarch64 on Fedora

commit cfd1f2f42aad4d62860d3e8af3fc1edf0b134629
Author: Chris Coulson <chris.coulson@canonical.com>
Date:   Sat Feb 20 14:27:17 2021 +0000

    uefi-capsule: Ensure SBAT metadata is added correctly
    
    The current approach of adding SBAT metadata after linking is creating
    an image that is badly formed in 2 ways:
    
     * The SBAT section's file offset and size are not a multiple of the
       file alignment.
    
     * The SBAT section has a virtual address of zero. EDK2 loads the header
       here, and so it gets rejected.
    
    This changes the approach to match shim, where an object file is
    created with a .sbat section and then the linker takes care of placing
    the section at a more appropriate virtual address.
    
    See https://github.com/vathpela/gnu-efi/pull/14 for the section addition.

commit a647ae05d1a85fc2bcd1b5a6ef09fb5cfdc667fa
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 15:11:15 2021 +0000

    synaptics-mst: Do not allow updating a device with no customer ID
    
    This is typically when the OEM is using the reference hardware design.
    
    Prevent updates, as there might be a new bug introduced in the reference
    firmware that only manifests on one OEM's product. It's up to the OEM to do the
    testing and validation.
    
    We need something to tie it back to a physical device model if it's using a
    reference firmware and we want to update it.

commit a76de3279b5d08773791dce0250b8f8160728006
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 16:52:15 2021 +0000

    Add a test BLE plugin for a demo

commit 536fb85e21d4a2da7898eeb27fb49258c2fe79cb
Author: Ricardo Cañuelo <ricardo.canuelo@collabora.com>
Date:   Fri Feb 12 12:48:58 2021 +0100

    Add initial support for Bluez bluetooth devices
    
    Bare skeleton for what will be the Bluez backend and the base bluetooth
    device class.

commit 2264a2efca95ee8fb67e0fa62df393d346d19aba
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Mon Feb 22 08:31:55 2021 -0600

    trivial: ci: add a workaround for arch container generation issue
    
    This should be dropped at some point hopefully when the new
    docker release has landed.
    See: https://github.com/actions/virtual-environments/issues/2658
    Fixes: #2894

commit 5f9e4730f14efe7b5ddd416dc7a3b5c867d635a1
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 12:04:46 2021 +0000

    synaptics-mst: Read the customer ID (board ID) in a more safe way
    
    Also split out the firmware parsing to an object so we can check the firmware
    using firmware-parse and also fuzz it.
    
    See also: https://github.com/fwupd/fwupd/issues/1665

commit ad3cfc0fea1e0bd21a74131fe9f2789b83e1d73c
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 22 10:02:54 2021 +0000

    Convert MBR types to GPT GUIDs to help find the ESP
    
    Fixes https://github.com/fwupd/fwupd/issues/2916

commit 86d3c58e3b49fa7abfb4f485ed668c7036e0344a
Author: Chang Po-Hung <allen_chang@chicony.com>
Date:   Sat Feb 20 15:01:56 2021 +0800

    Add cheetos quirk in pixart-rf

commit c52079f3ebba07a446f181a2d02b9b8153110ade
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Fri Feb 19 13:16:44 2021 -0600

    trivial: don't hardcode expected plugins list for CI
    
    Let these get turned on no matter what we change in daemon.conf

commit 707b0f367f15cf604f481a4af7375f54edd6f988
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Feb 18 17:29:56 2021 -0600

    trivial: install any missing dependencies in containers
    
    some of these might not be present if the containers got out of
    sync.  it will be a no-op at worst.

commit f3c3adb7f0f48b96b984e3f71f34956162a941e8
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 18:50:28 2021 +0000

    trivial: Add some more verbose debugging to help with plugin development

commit 69346569594fdf1eafd2a7993574beb0ef03bd6c
Author: JimmyYu <jimmy_yu@pixart.com>
Date:   Fri Feb 19 16:29:23 2021 +0800

    pixart: Fix more supported PID

commit b4b6f8910de5b65e24421d6a2cc68ca53bfd95ac
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Feb 18 14:24:50 2021 -0600

    trivial: allow 1_4_X to trigger CI builds from Github workflows

commit 9df6764d93d0bf75987fe1a4af8e2bd146042ea9
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 19:03:28 2021 +0000

    uefi-capsule: Set the component generation to 1
    
    See https://github.com/rhboot/shim/blob/main/SBAT.md

commit ec52942bc5ad9e80c8bf905e6d0a0ccf218acc1f
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 18:53:59 2021 +0000

    uefi-capsule: Include all the sections when using objcopy
    
    Fixes the regression introduced in fde4b1676a2c64e70bebd88f7720307c62635654

commit b4496cae81ce0087e4130addcac90c2900ad8bdf
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 16:52:38 2021 +0000

    tpm-eventlog: Fix a possible crash if not using _new()

commit 2e1245728f47c4342cce53ef39388f027ed4dea6
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 11:19:58 2021 +0000

    Call the superclass directly from subclassed devices
    
    This allows a device subclass to call the parent method after doing an initial
    action, or even deliberately not call the *generic* parent method at all.
    
    It also simplifies the plugins; you no longer have to remember what the plugin
    is deriving from and accidentally clobber the wrong superclass method.

commit a22c13c6376d3b2a625a60fef4e93c48de7e3389
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 09:54:09 2021 +0000

    Move the plugin build logic to the plugins themselves

commit 90254a51523dca02b74c4493a9f2b093c9e95132
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 18 10:04:17 2021 +0000

    csr: Rename plugin to dfu-csr as it depends on the prefixed plugin

commit d2130f73a3bad191283800b03fef160841e1581f
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Feb 18 09:38:03 2021 +0000

    trivial: Rename meson option tpm->plugin_tpm

commit d6cf6118619809af8ba92c5eca9214280da6939a
Author: JimmyYu <jimmy_yu@pixart.com>
Date:   Thu Feb 18 13:57:12 2021 +0800

    pixart: Modify the README content

commit 8e10abf3082273e4fb5992b58c80b6bef66f794b
Author: JimmyYu <jimmy_yu@pixart.com>
Date:   Thu Feb 18 13:55:44 2021 +0800

    pixart: Add more supported pixart devices

commit 06dc789bc6ce3ef820d2e402e313dddf77c46233
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 16 10:53:48 2021 -0600

    releasing package fwupd version 1.5.6-1

commit 4e0e3c087b46b79213071ce21e36aa2baf5b19e1
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 16 10:44:22 2021 -0600

    Update debian/* for 1.5.6

commit f18ed24c2b1e610499fd058a8689c37eb30a211e
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 16 10:17:44 2021 -0600

    drop all upstream patches

commit f1bea5428020d54659723933d8c238410bd61b97
Merge: e53235bb 260a2444
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Feb 16 10:17:35 2021 -0600

    merge 1.5.6

commit 260a24449d40c3a94891eac146c5b3ed54bb7345
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 16 12:14:12 2021 +0000

    Release fwupd 1.5.6

commit 41ad677d8ca74e873cad6c437f3ba1e81338c3bb
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 16 10:42:02 2021 +0000

    trivial: Disable clang scan-build
    
    It is causing CI to fail, and signal-to-noise ratio is now basically zero.

commit 6d656a940d5a24aa0234c03bada4a35b4281641a
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 16 10:14:36 2021 +0000

    Allow building without SBAT metadata
    
    Two reasons:
    
     * It seems a bit antisocial to hard-require all this data without fair warning
     * The aarch64 pesign crashes when trying to sign the binary with SBAT metadata

commit 5eca890f93bd12b67a935af853ed5778a4cdbac1
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 16 09:19:44 2021 +0000

    trivial: Do not assume the running system has LVFS enabled for the tests
    
    This is not true for RHEL, and so 'ninja dist' fails on any RHEL workstation.

commit f572a012f6f58ac94655ad8fa78b3cdd9392b9f9
Author: Richard Hughes <richard@hughsie.com>
Date:   Tue Feb 16 08:25:21 2021 +0000

    synaprom: Set a sane limit on the number of images that can be added
    
    This fixes a timeout found by oss-fuzz.

commit 9840c54021db9fb79df6b2159d6fc38934fcae5a
Author: Sean Rhodes <sean@starlabs.systems>
Date:   Mon Feb 15 21:57:29 2021 +0000

    Adjusted superio L4 quirk

commit 4822b3317bd273aafcfd04d64d19c424f8ed79d5
Author: Richard Hughes <richard@hughsie.com>
Date:   Mon Feb 15 15:43:30 2021 +0000

    ccgx: Check for FPE when parsing the metadata section

commit a92026476b93caccd1ad5e8807ebaa04eacaef0f
Author: Ricardo Cañuelo <ricardo.canuelo@collabora.com>
Date:   Mon Feb 15 15:27:20 2021 +0100

    Fix ioctl error checking
    
    fu_udev_device_ioctl() interprets the return value of ioctl() as the
    error cause and generates a misleading error message (permission
    denied).
    Fix it to use errno for error checking and reporting.

commit 27df5cf06e822b77a11ca5f996337d2ff967b0cf
Author: bubbleguuum <bubbleguuum@free.fr>
Date:   Mon Feb 15 14:05:43 2021 +0100

    fix broken progressbar display on urxvt due to improper calculation of to_erase
    
    added space before bracket

commit 665c5feacabb71d0eeef927f9c3f44b3156e1be2
Author: Richard Hughes <richard@hughsie.com>
Date:   Sun Feb 14 20:49:02 2021 +0000

    ihex: Never add more than 1 Intel hex signature
    
    If you can create a 1Mb file with hundreds of thousands of zero-byte signatures
    it takes a *long* time to parse the image.

commit ffbb1175d0e9eac9b320d72216d71211fdf9f06b
Author: Richard Hughes <richard@hughsie.com>
Date:   Sun Feb 14 20:34:31 2021 +0000

    trivial: Do not consider all whitespace a valid strsafe string

commit a4e0de462c70efb2a04ebba5bfb2d16d3ea8835e
Author: Richard Hughes <richard@hughsie.com>
Date:   Sun Feb 14 20:33:47 2021 +0000

    trivial: Fix AddressSanitizer heap-buffer-overflow

commit 60a4b5680279bc3375e5cf6609f9b6789e561c42
Author: Richard Hughes <richard@hughsie.com>
Date:   Fri Feb 12 20:16:56 2021 +0000

    srec: Fix an overflow causing an infinite loop when parsing

commit 124f2295eeecf724d68412a8fbd65f848f3af44b
Author: Richard Hughes <richard@hughsie.com>
Date:   Fri Feb 12 09:15:36 2021 +0000

    trivial: Untie efi_os_dir from the SBAT distro ID
    
    We happily fallback with an unset -Defi_os_dir and it gets confusing explaining
    why the EFI dir needs to be set on a non-supported system.
    
    In practice they'll probably have the same eventual value on most supported
    distributions.
    
    Fixes https://github.com/fwupd/fwupd/issues/2873

commit 6a33d2d99e4d9e4e8ae9be7fc404c1ee1799813d
Author: Richard Hughes <richard@hughsie.com>
Date:   Fri Feb 12 13:27:31 2021 +0000

    ccgx: Fix division by zero for invalid firmware

commit 17c0a6c239518d371b38fdc05944612dd6cbdfad
Author: Javier Martinez Canillas <javierm@redhat.com>
Date:   Fri Feb 12 12:48:20 2021 +0100

    uefi-capsule: Fix objcopy failing to add a .sbat section on aarch64
    
    The objcopy tool only has support for pei-x86_64 and pei-i386 targets, and
    so trying to add a .sbat section for fwupdaa64.efi fails with this error:
    
    objcopy: plugins/uefi-capsule/efi/fwupdaa64.efi: file format not recognized
    
    To fix this issue, add the .sbat section to the ELF fwup.so shared object
    and keep that section when generating the resulting fwupdaa64.efi binary.
    
    Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>

commit 293ccbf1065940edc12df546b92b8a11fb0a089e
Author: Richard Hughes <richard@hughsie.com>
Date:   Fri Feb 12 10:10:37 2021 +0000

    fmap: Fix self test failure on PPC64

commit c3ecec575bc98571a464519d69c6fa0e5b78d656
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 12:03:24 2021 +0000

    fmap: Use memmem to find the FMAP signature
    
    Trust glibc to optimize for the binary search, removing a oss-fuzz detected
    crash with our bad pointer maths.

commit 3ffc5baaad89b9d05284fe2795ed2e6afd024fbc
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 09:39:43 2021 +0000

    trivial: Also fuzz the CRC checking routines
    
    At the moment these sections are all red in the coverage report.

commit 220ec716caf406ab7e327e33c561362edc471728
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 09:29:53 2021 +0000

    trivial: Include firmware writing when fuzzing

commit 54bc51238855067d0cc0bceeef731ef0af1728b1
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 09:29:03 2021 +0000

    Add firmware flags for presence of CRC and VID/PID

commit b242fe487086062a2d4d5f9839e48f63ab283e62
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 11:37:13 2021 +0000

    ccgx: Implement FuFirmware->build() to add fuzzing support

commit fa840c1c9a61a7991d1a449b686f23f460584284
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 09:43:41 2021 +0000

    trivial: Do not reuse 'build' for the oss-fuzz build
    
    This fixes a compile failure if ldflags are different between runs.

commit 87a8091beda7e1f268f3e092ed5bdc9167c467bc
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 12:54:15 2021 +0000

    trivial: Fix a crash using fu_firmware_image_get_chunks()
    
    Add a GError as it can return NULL for invalid circumstances. It's okay to
    change the API as this symbol has not yet been in a tarball release.

commit 9bb5d279db7598e81297ab1ca9364f3a801459b8
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 12:52:47 2021 +0000

    dfuse: Never add a DfuSe image with no defined chunks

commit 7a23330158764ba8f88b31705dc781fa049610ab
Author: Richard Hughes <richard@hughsie.com>
Date:   Thu Feb 11 08:11:40 2021 +0000

    dfu: Do not allow DfuSe chunk data to include the DFU footer area
    
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30813

commit be220a4f562c7dd1ee9e15abeccb6f8277b16616
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Wed Feb 10 10:39:58 2021 -0600

    trivial: fu-common: fix fallback for esp-path if udisks missing
    
    Fixes: #2803

commit 378b00018b42bdaefe50e70fa546065a41ee0e42
Author: Javier Martinez Canillas <javierm@redhat.com>
Date:   Thu Feb 4 14:53:25 2021 +0000

    uefi-capsule: Add SBAT metadata to the fwupd EFI binary
    
    The Secure Boot Advanced Targeting (SBAT) [0] is a Generation Number Based
    Revocation mechanism that is meant to replace the DBX revocation file list.
    
    Binaries must contain a .sbat data section that has a set entries, each of
    them consisting of UTF-8 strings as comma separated values. Allow to embed
    this information into the fwupd EFI binary at build time.
    
    The SBAT metadata must contain at least two entries. One that defines the
    SBAT version used and another one that defines the component generation.
    
    Downstream users can add additional entries if have changes that make them
    diverge from the upstream code and potentially add other vulnerabilities.
    
    [0]: https://github.com/rhboot/shim/blob/sbat/SBAT.md

commit 6188be1dd4dbd43a50001df3b93a75ab241c1309
Author: Richard Hughes <richard@hughsie.com>
Date:   Wed Feb 10 10:08:16 2021 +0000

    elantp: Read from the device in a more safe way

commit b1e4a23597e2f2f82659cad4f2138b2b217292d8
Author: Richard Hughes <richard@hughsie.com>
Date:   Wed Feb 10 10:07:22 2021 +0000

    synaptics-rmi: Read from the device in a more safe way

commit 2849116b33b29eb3faca42ade2c43523217450c3
Author: Richard Hughes <richard@hughsie.com>
Date:   Wed Feb 10 10:05:52 2021 +0000

    uefi-capsule: Read the BMP in a more safe way

commit fb3b3e1841fb689660b2ef1bf7164e50b8a70d89
Author: Richard Hughes <richard@hughsie.com>
Date:   Wed Feb 10 10:05:02 2021 +0000

    vli: Read from the device in a more safe way

commit 4a315856fae7d80845dcee43574b1a25ad49a1de
Author: Richard Hughes <richard@hughsie.com>
Date:   Wed Feb 10 09:58:19 2021 +0000

    solokey: Read from the device in a more safe way

commit e53235bb7af0175f8226f8a93bcab225df64f59c
Author: Steve McIntyre <steve@einval.com>
Date:   Tue Jan 26 00:26:49 2021 +0000

    Fix up Uploaders for the -signed packages - remove Jared, add Matthias

commit 3ef1755f570dd2a31b4ef0f5487c90667f7b51e7
Merge: e023af13 014099a4
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Jan 21 15:54:56 2021 +0000

    Merge branch 'bug980691' into 'debian'
    
    Fix missing -dev dependencies
    
    See merge request efi-team/fwupd!3

commit 014099a4f21d0c681855d5fe14ae62f92f6a08db
Author: Simon McVittie <smcv@debian.org>
Date:   Thu Jan 21 09:44:03 2021 +0000

    Add trivial compile/link/run test for libfwupd-dev
    
    Tests like these are a surprisingly effective way to detect packaging
    mistakes.
    
    Reproduces: #980691, #980684

commit 867c57b4c644de01b787487adf602137b7bc01ed
Author: Simon McVittie <smcv@debian.org>
Date:   Thu Jan 21 10:33:23 2021 +0000

    d/control.in, d/control: Add missing -dev dependencies
    
    Each -dev package needs to depend on all dependencies' -dev packages
    that are required when linking against the included library with
    pkg-config.
    
    Closes: #980691, #980684

commit e023af137f615dc660a698517807c7012a6d6263
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Wed Jan 20 14:16:47 2021 -0600

    trivial: debian: remove ata.conf on upgrade (Closes: #980570)

commit 41a5bd53d6c5811068e72ebb26f77b41916fb13b
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Jan 19 15:49:19 2021 -0600

    update changelog

commit 4b62a01e4b3d01b2678971c65a695800c6da0b8d
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Jan 19 15:47:06 2021 -0600

    trivial: debian: fwupd.postinst: Adjust to read /etc/os-release instead
    `/etc/lsb-release` isn't in modern debian installations

commit fcf24027db929ff753db63ae27aa8bc08f636ae9
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Jan 19 12:50:12 2021 -0600

    releasing package fwupd version 1.5.5-1

commit a72fd53689c60d3d7c7f3c2aedf8eacf4eefb9cc
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Tue Jan 19 12:48:40 2021 -0600

    update debian/ from ./contrib/ci/generate_debian.py

commit 818976feed24b8207dc77a6f0b5d6e777e8d6f84
Author: Mario Limonciello <mario.limonciello@dell.com>
Date:   Thu Jan 14 20:11:42 2021 -0600

    trivial: debian: read /etc/lsb-release instead of dpkg-dev (Closes: #977860, #977861, #970783)