edk2-stable202405

Release Date 2024-05-24

New Features & Bug Fixes

• SecurityPkg:Add EFI Device Authentication Signature Database and SPDM
• CryptoPkg:add additional RSAES-OAEP crypto functions
• OvmfPkg:Add 5-level paging support
• OvmfPkg:SEV-SNP Support for running under an SVSM
• OvmfPkg:RBP register shall be cleared in TDVMCALL
• OvmfPkg:Harden #VC instruction emulation (CVE-2024-25742)
• Add SPI bus driver stack
• NetworkPkg: Predictable TCP ISNs
• NetworkPkg: Use of a Weak PseudoRandom Number Generator
• UefiCpuPkg: Add new SmmRelocationLib library

Bugzilla List

Update Notes

• NetworkPkg SECURITY PATCH CVE-2023-45237 requires the platform to provide the right implementation of the EFI_RNG_PROTOCOL
  (i.e., using a GUID that appears in the allowlist) and EFI_HASH2_PROTOCOL. If it is not implemented, the platform will lose the ability to do network boot.

edk2-stable202402

Release Date 2024-02-23

New Features & Bug Fixes

• NetworkPkg: Packet->Length is not updated before being used by Dhcp6AppendIaAddrOption to safely know it can append.
• NetworkPkg: Out-of-bounds read when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
• Heap Buffer Overflow in Tcg2MeasureGptTable()
• Add LoongArch help functions and defines in MdePkg and move some ArmVirtPkg libraries and PCDs to OvmfPkg
• Add NVMe Sanitize command support to Nvme.h
• Remove CSM support from OvmfPkg
• MAT Logic Incorrectly Reports Runtime Images

Bugzilla List

edk2-stable202311

Release Date 2023-11-24

New Features & Bug Fixes

• UefiPayloadPkg:Enhance the build processing for Universalpayload
• SplitFspBin.py cannot support FSP binary with child FV included
• Cache Disable should not be set by default in CR0 after ResetVector in x64 build
• SMM perf record is copied multiple times to FPDT table if multiple ReadyToBoot events are signaled
• In some cases, LocateHandleBuffer() may allocate a callee freed buffer when an error occurs
• OvmfPkg/IoMmuDxe: don't rely on TPLs to manage concurrency
• Recent OVMF build.sh change breaks useful functionality
• UEFI cryptography agile solution - separate crypto algorithm (phase I)
• Use MpService2Ppi to wakeup CPU in Smm CpuS3
• Move RngLibTimer from MdePkg to MdeModulePkg
• EFI_RNG_PROTOCOL Describe the DRBG algorithm used in the Arm RNDR instruction
• Faulty Rng algo selection for Arm
• RngDxe assert
• Add New Intel Processor family for SMBIOS Type 4 from SMBIOS 3.7.0
• NetworkPkg: HTTP protocol throughput too small
• MailBoxVersion should be 0 according to the ACPI spec 6.5
• Pyrite support - Secure erase is only available if encryption is supported
• Remove assembly/tool logic that creates AP waking vector in 4G-20h
• MdeModulePkg/Bus/Ata/AtaBusDxe: Coverity scan flags SIGN_EXTENSION issue
• MdeModulePkg/Bus/Pci/NvmExpressPei: Coverity scan flags DEADCODE issue
• MdeModulePkg/Bus/Pci/UhciDxe: fix Coverity issues
• DynamicTablesPkg: Add support for generating ACPI ThermalZones
• DynamicTablesPkg: Add support for PCI IO using Qword resources
• MdeModulePkg/XhciDxe: Use Performance Timer for XHCI Timeouts
• MdeModulePkg/Bus/Pci/XhciDxe: Need to abort the command for command timeout
• BaseTools: Add support for LOONGARCH64 R_LARCH_RELAX relocation
• UefiPayloadPkg: Add FIT support
• SMBIOS BCD revision is not match SMBIOS version
• Xhci: Skip size round up for TRB when getting PCI device/host memory address
• MdePkg: various fixes to ARM/AArch64 SetJump/LongJump
• TlsLib should not have a list of Ciphers which may or may not agree with what is available
• MtrrLib modules and Unit test Enhancement
• Use the base SortLib for Redfish modules only
• evaluate the feasibility of using mbedtls as crypto library
• bogus RealTimeClockLib class interface: LibRtcVirtualNotifyEvent
• OvmfPkg/VirtioFsDxe: tolerate opening an absolute pathname relative to a regular file
• UefiDevicePathLib DevPathToTextAcpiEx overflows the device path node when searching for optional strings
• DynamicTablesPkg/TableHelperLib updates
• Update Edk2-pytools to latest versions
• duplicate installation of EFI_REAL_TIME_CLOCK_ARCH_PROTOCOL in RealTimeClockLib instances
• UefiCpuPkg/BaseXApicX2ApicLib: fix CPUID_V2_EXTENDED_TOPOLOGY detection
• OvmfPkg/AcpiPlatformDxe: Coverity scan flags FORWARD_NULL and UNUSED_VALUE issues
• RedfishPkg/RedfishLib: Return HTTP headers to caller
• ArmVirtPkg: support two PL011 UARTs
• Update MADT for ACPI 6.5, and add TRBE & ETE support
• Add Variable Policy Audit App and Shell Command
• Use CodeQL CLI
• TDVF: TdVmCall needs handle the retry results for MapGPA
• Update GetMaintainer to handle case where a package has only reviewers and no maintainers
• Add 0x0B/Platform Runtime Mechanism (PRM) in Address Space ID of Generic Address Structure (GAS)
• Fix build error when remove "-Wno-sometimes-uninitialized" option

Bugzilla List

edk2-stable202308

Release Date 2023-08-25

New Features

• CryptoPkg: consume OpenSSL 3.0
• Replace the OVMF-specific SataControllerDxe with the generic one in MdeModulePkg
• Remove the duplicated definitions from BaseTools
• Arm GIC Library and Driver improvements
• Use restricted memory mappings in PEI
• Add SmmCpuFeaturesLib implementation for AMD Processor family
• Add USB Network RNDIS Drivers
• Support Standalone MM based variable services in PEI on ARM systems
• Add RISC-V MMU support
• Add RISC-V support to CLANGDWARF toolchain

Bugzilla List

edk2-stable202305

Release Date 2023-05-26

New Features

• Expose IBT/BTI compatible runtime DXE drivers via memory attributes table
• Update toolchain support
• MdePkg: Support FDT library
• Add google mocks support to UnitTestFrameworkPkg GoogleTestLib
• Platform Redfish Host Interface library for USBNIC
• [OpenSSL] Update OpenSSL version to version 1.1.1t to include CVE fix
• Replace pre-standard FUNCTION with C99 func throughout edk2
• Implement EFI memory attributes protocol for ARM platforms
• Add TraceHubLib Support

Bugzilla List

edk2-stable202302

Release Date 2023-03-03

New Features

• Add support for RISC-V qemu virt machine
• Add RPMB related commands and DCB definition for NVMe
• SecurityBoot - remove self-signed PK requirement in SetupMode
• SecurityBoot - support Authenticated SetVariable with ContentInfo
• TDVF Optimization - Enable Separate-Fv in OvmfPkg/IntelTdx
• TDVF Optimization - Pre-alloc shared memory for TDVF DMA
• TDVF Optimization - Enable Multi-core based lazy-accept
• TDVF - Fix Instruction Pointer Incrementation by TD #VE MMIO Handler
• TDVF - Incorrect implementation in the TDX RTMR implementation
• TDVF - Incorrect protocol and structure version in the TDX CC measurement
• TDVF - TdTcg2Dxe lives in the Ovmfpkg instead of the SecurityPkg
• TDVF - need measurement VMM input ACPI table before register
• TDVF - need integrate feature in config-B to config-A

Bugzilla List

edk2-stable202211

Release Date 2022-11-26

New Features

• CryptoPkg remove EC PCD and merge optimized openssl libs
• Add GoogleTest unit test support to UnitTestFrameworkPkg
• Add Raw algorithm support using Arm FW-TRNG interface
• TDVF Lazy Accept in OvmfPkg
• Debug code to audit BIOS TPM extend operations
• Add a new feature to enable LoongArch prot for EDKII
• CryptoPkg: Need to add additional cipher algos and TLS API to meet WPA3
• IntelFsp2(Wrapper)Pkg: Support FSP 2.4 MultiPhaseInit
• CryptoPkg: Need to support EC and BN API due to WPA3 feature
• Add PCI_DEVICE_PPI support for NvmExpressPei

Bugzilla List

edk2-stable202208

Release Date 2022-08-29

New Features

• Add CRC16 and CRC32C to MdePkg
• IntelFsp2Pkg/ConfigEditor: Support FSP 2.3 header
• Extend SecureBootVariableLib interfaces
• UEFI HTTPS Boot Support for HTTP Client Authentication (Basic or Digest)
• Support 64bit FspResetType for X64 build
• IntelFsp2Pkg/FspSecCore: Add FSP-I entry for SMM support
• Add PCI_DEVICE_PPI definition to EDK2
• Support to assign the subject name to sign the capsule file

Bugzilla List

edk2-stable202205

Release Date 2022-05-27

New Features

• Support PEI 64bit in IntelFsp2Pkg and IntelFsp2WrapperPkg
• IntelFsp2Pkg: BaseFspCommonLib Support for X64 Build
• Add PrmPkg
• BaseTools Enhance GenFw to support PRM GCC build
• Enable Intel TDX in OvmfPkg
• Generate CloudHv target as PVH ELF binary
• Add parallel hash feature into BaseCryptLib
• Configure/Enable elliptic curve ciphers in OpenSSL
• Add FMMT tool into edk2 BaseTools
• Dynamic variable flash information cannot be passed in Standalone MM

Bugzilla List

edk2-stable202202

Release Date 2022-02-25

New Features

• OvmfPkg Add new target for Cloud Hypervisor
• Add TDVF to OvmfPkg
• Add new APIs to UefiCpuPkg/UefiCpuLib
• Add AMD Secure Nested Paging Support
• Add SSDT PCI generator in DynamicTablesPkg
• Support ACPI 6.4 PPTT changes
• Add FdtHwInfoParser library
• Add DynamicPlatRepo library
• Make package and platform builds reproducible across source format changes
• Add Uncrustify CI Plugin
• Apply uncrustify changes to all package C and H files

Bugzilla List