raspberrypi/rpi-eeprom
1
0
Fork 0
mirror of https://github.com/raspberrypi/rpi-eeprom.git synced 2026-01-20 21:13:36 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'pitowers/master' into pios/bookworm

Browse Source 
* pitowers/master:
  pieeprom-2025-05-16: 2711: Automatically set revoke_devkey if program_pubkey=1 (latest)
  imager: 2712: 2711: Update to the 2025-05-08 firmware
This commit is contained in:
Tim Gover
2025-05-19 11:28:40 +01:00
parent be49816e0d b08dff7e46
commit 066d4aaa55
4 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
firmware-2711/latest/pieeprom-2025-05-16.bin Normal file
View File

Binary file not shown.

BIN
firmware-2711/latest/recovery.bin
View File

Binary file not shown.

15
firmware-2711/release-notes.md
View File

@@ -1,5 +1,20 @@
# Raspberry Pi4 bootloader EEPROM release notes
## 2025-05-16: 2711: Automatically set revoke_devkey if program_pubkey=1 (latest)
* 2711: (recovery) Automatically set revoke_devkey if program_pubkey=1
Previously, on BCM2711 products it was possible to program the key
hash without revoking the development key. This can be useful for
testing but should never be used in production because it is possible
to an install an older version of the bootloader which doesn't
support secure-boot. Since the secure-boot tools are stable and
have improved usability (RPi secure-boot provisioner) this test
feature not necessary and is just a security risk so the behaviour
is changed to always revoke the development key if program_pubkey=1.
This change is not relevant on BCM2712 because secure-boot requires
that the second stage bootloader is counter-signed with the customer's
private key.
## 2025-05-13: Promote 2025-05-08 to the default release (default)
## 2025-05-08: Implement TCP window for net boot (latest)

4
imager/make-imager-release
View File

@@ -5,7 +5,7 @@ set -e
script_dir=$(cd "$(dirname "$0")" && pwd)
# Pi4, Pi400, CM4, CM4-S
${script_dir}/make-release critical 2025-02-11 000138c0 "${script_dir}/2711-config" release-2711 rpi-boot-eeprom-recovery 2711
${script_dir}/make-release critical 2025-05-08 000138c0 "${script_dir}/2711-config" release-2711 rpi-boot-eeprom-recovery 2711
# Pi5
${script_dir}/make-release critical 2025-02-12 "" "${script_dir}/2712-config" release-2712 rpi-boot-eeprom-recovery 2712
${script_dir}/make-release critical 2025-05-08 "" "${script_dir}/2712-config" release-2712 rpi-boot-eeprom-recovery 2712