Bug 13438 - OVMF needs upgrading
Summary: OVMF needs upgrading
Status: RESOLVED FIXED
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: kernel (show other bugs)
Version: 0.0.0
Hardware: x86 Multiple
: Medium+ normal
Target Milestone: 2.8 M3
Assignee: Ricardo Neri
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2019-07-11 15:08 UTC by Ross Burton
Modified: 2019-08-12 23:13 UTC (History)
3 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Ross Burton 2019-07-11 15:08:39 UTC 
The current ovmf srcrev is some point before edk2-stable201808.  That's old and there are several good reasons to upgrade:
1) new openssl with less security issues
2) ability to build with Python 3

Regarding (2) any tag from edk2-stable201903 onwards can be built with Python 3.
Comment 1 Ross Burton 2019-07-11 23:49:51 UTC 
There's a *very rough* work in progress upgrade in poky-contrib:ross/nopy2.
Comment 2 Ricardo Neri 2019-07-29 21:11:39 UTC 
Completed recipe updates. Now testing OVMF with and without secure boot.
Comment 3 Ricardo Neri 2019-08-06 11:27:24 UTC 
Completed testing. Getting ready for review.
Comment 4 Ricardo Neri 2019-08-07 01:54:33 UTC 
Patches submitted here: http://lists.openembedded.org/pipermail/openembedded-core/2019-August/285473.html
Comment 5 Ricardo Neri 2019-08-12 23:13:35 UTC 
Patches have been merged into the master branch of openembedded-core:

https://git.openembedded.org/openembedded-core/commit/?id=5e47316ae62f7632fb62bc3b8093ac42f9e3541c