DBXUpdate-20230509.aa64.metainfo.xml

<?xml version="1.0" encoding="UTF-8"?>
<!-- Copyright 2022 Richard Hughes <richard@hughsie.com> -->
<component type="firmware">
  <id>org.linuxfoundation.dbx.aa64.firmware</id>
  <name>Secure Boot dbx</name>
  <name_variant_suffix>aa64</name_variant_suffix>
  <summary>UEFI Secure Boot Forbidden Signature Database</summary>
  <description>
    <p>
      Updating the UEFI dbx prevents starting EFI binaries with known security issues.
    </p>
  </description>
  <provides>
    <!-- Microsoft Corporation KEK CA 2011 -
    UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503&ARCH_AA64 -->
    <firmware type="flashed">67d35028-ca5b-5834-834a-f97380381082</firmware>
  </provides>
  <url type="homepage">https://uefi.org/revocationlistfile</url>
  <metadata_license>CC0-1.0</metadata_license>
  <project_license>proprietary</project_license>
  <developer_name>Microsoft Corporation</developer_name>
  <releases>
    <!-- for the version use `fwupdtool firmware-parse foo.bin efi-signature-list` -->
    <release urgency="high" version="26" date="2023-05-09">
      <checksum filename="DBXUpdate-20230509.aa64.bin" target="content"/>
      <checksum type="sha256" target="device">ab311e737112e4d34abf545836bc671637663e93738cefa37405214ce8c92a58</checksum>
      <description>
        <p>
          Insecure versions of the Microsoft Windows boot manager affected by Black Lotus were
          added to the list of forbidden signatures due to a discovered security problem.
          This updates the dbx to the latest release from Microsoft.
        </p>
        <p>
          Before installing the update, fwupd will check for any affected executables
          in the ESP and will refuse to update if it finds any boot binaries signed
          with any of the forbidden signatures.
        </p>
      </description>
      <issues>
        <issue type="cve">CVE-2022-21894</issue>
      </issues>
    </release>
  </releases>
  <requires>
    <id compare="ge" version="1.8.14">org.freedesktop.fwupd</id>
  </requires>
  <custom>
    <value key="LVFS::UpdateProtocol">org.uefi.dbx</value>
    <value key="LVFS::VersionFormat">number</value>
  </custom>
  <categories>
    <category>X-Configuration</category>
  </categories>
</component>