edk2-stable202008

Release Date 2020-09-04

New Features

• BootGuard TOCTOU vulnerability (CVE-2019-11098)
• Provide MACROs to disable SHA1 support
• Update openssl version to latest stable version 1.1.1g
• TPM Add capability to let PEIM extend TcgEvent
• TPM Bios to verify TPM2_ChangeEPS Support through TPM Capabilities command request and enable it if available
• Add FSP binary measurement
• CXL 1.1 Base Specification Register definitions
• BaseTools: Add support on C files to consume ASL files
• Enable BSD-2-Clause-Patent license checker for new added files in open CI
• Enable ECC (EFI Code Checker) checker in open CI
• Add UNIT_TESTING_DEBUG define to enable source level debugging of host based unit tests
• Add new instance of BaseLib that for host based unit tests called UnitTestHostBaseLib
• Add a pre-memory AP vector at 0xFF000
• IntelFsp2Pkg: Add FSP*_ARCH_UPD
• Dynamic AML: A solution to simplify runtime generation of Definition Block tables
• Add support to OVMF for AMD SEV-ES
• Add bhyve hypervisor support to EDK2
• Add LSI 53C895A SCSI controller support to OVMF

Bugzilla List

Wiki

• How to debug OVMF with QEMU using WinDbg
• Boot Guard TOCTOU Vulnerability Mitigation

Update Notes

1. Add the below library instances into [LibraryClasses.common.PEIM] section of platform dsc If this platforms depend on Intel FSP
   FspMeasurementLib|IntelFsp2WrapperPkg/Library/BaseFspMeasurementLib/BaseFspMeasurementLib.inf
   TcgEventLogRecordLib|SecurityPkg/Library/TcgEventLogRecordLib/TcgEventLogRecordLib.inf
   TpmMeasurementLib|SecurityPkg/Library/PeiTpmMeasurementLib/PeiTpmMeasurementLib.inf

2. The SEV-ES feature adds new library dependencies. If your DSC file uses the UefiCpuPkg CpuExceptionHandlerLib library or the UefiCpuPkg MpInitLib library, then you must add an entry for the UefiCpuPkg VmgExitLib library (VmgExitLib|UefiCpuPkg/Library/VmgExitLibNull/VmgExitLibNull.inf).