Release Date 2021-08-27

New Features

• OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc
• Add CLANGDWARF toolchain for generating ELF+DWARF
• NetworkPkg/IScsiDxe: remotely exploitable buffer overflows
• NetworkPkg/IScsiDxe: add sha256 support to CHAP
• Create header files and multiple Hobs for Universal Payload
• Add search feature in config editor
• Add additional build option to treat Dynamic Pcd as DynamicEx Pcd
• Add a new MicrocodeLib for microcode loading
• Implement key enrolment from default key variables
• StandaloneMm support for 32bit Arm machines
• Add firmware support for Cloud Hypervisor on arm64
• Support architecture-specific openssl acceleration
• Support measured AMD SEV boot with kernel/initrd/cmdline
• Add ACPI 6.4 header
• Add new BootDiscoveryPolicyUiLib

Bugzilla List

Update Notes

• UefiCpuPkg Library CpuCacheInfoLib depends on SortLib. So, SortLib library instance is required to be specified in PlatformPkg.dsc SortLib|MdeModulePkg/Library/BaseSortLib/BaseSortLib.inf
• Smbios definition is updated.

MemoryArrayLocationCXLFlexbus10AddonCard ==> MemoryArrayLocationCXLAddonCard
MemoryTechnologyIntelPersistentMemory ==> MemoryTechnologyIntelOptanePersistentMemory

Release Date 2021-05-28

New Features

• OVMF RFE: VCPU hot-unplug with SMI
• Add non-MMRAM memory protection for Standalone MM environment
• OpenSSL Update OpenSSL version to version 1.1.1j to include CVE fix
• Add a new library class RegisterFilterLib
• Add a new MicrocodeLib for microcode loading
• EDKII Redfish Config Handler Protocol
• Implementation of UEFI spec 31.1 Redfish Discover Protocol
• Add RedfishLib (from libredfish)
• Add the ArmPlatformPkg to the azurepipeline
• Add the ArmPkg to the azurepipeline
• Support Tcg2Smm under Standalone MM environment
• UefiCpuPkg/SmmCpuFeaturesLib: Add Standalone MM support
• Add support for AARCH64 to RngDxe and BaseRngLib
• Add support for RSASSA-PSS signature scheme in Crypto package

Bugzilla List

Update Notes

• MdeModulePkg VariableSmmRuntimeDxe.inf depends on library class MmUnblockMemoryLib. Platforms supporting variable service through SMM should configure platform DSC in [LibraryClasses] MmUnblockMemoryLib|MdePkg/Library/MmUnblockMemoryLib/MmUnblockMemoryLibNull.inf
• SecurityPkg Tcg2Smm is split into 2 drivers: Tcg2Smm and Tcg2Acpi. Platforms supporting TCG2 Physical Presence and Memory Clear through ACPI method should add a new entry in [Components] section of platform DSC as well as the corresponding FV section in platform FDF SecurityPkg/Tcg/Tcg2Acpi/Tcg2Acpi.inf
• Platform DSC needs to include MdePkg/MdeLibs.dsc.inc for the required library instance.

Release Date 2021-03-05

New Features

• ArmVirtPkg: support extra pci root bridges (pxb)
• SEV Encrypted Boot for Ovmf (remote attestation)
• virtio-fs driver for OvmfPkg and ArmVirtPkg
• Apply SEV-ES mitigations for encryption bit position and MMIO
• Add Core CI support for StandaloneMmPkg
• Update LZMA module to LZMA SDK latest version 19.00
• IntelFsp2Pkg: Support FSP private temporary memory
• Port open source JSON library (jansson)
• add file buffering to the UEFI shell's COMP command
• Shell: pathname / filename sorting
• Extend support of peripheral x64 MM_STANDALONE drivers
• BaseTools: Convert the Split tool from C language to Python
• ArmPkg: Add Universal/Smbios
• Move to Pip based Basetools python
• Add support for use of FF-A calls

Bugzilla List

Update Notes

• If the user has the windows bat script that calls Split in it，it needs to change to "call Split" because Split will be a bat script but not an executable file.
• Shell depends on library class OrderedCollectionLib. Platform DSC needs to configure it in [LibraryClasses] OrderedCollectionLib|MdePkg/Library/BaseOrderedCollectionRedBlackTreeLib/BaseOrderedCollectionRedBlackTreeLib.inf
• Some struct fields in SmBios.h have typos and get fixed in these code change 0db8, bd9d, e157. Details are listed below. In struct SMBIOS_TABLE_TYPE17:  FirwareVersion ==> FirmwareVersion In struct SMBIOS_TABLE_TYPE4:  ProcessorManufacture ==> ProcessorManufacturer In struct PROCESSOR_CHARACTERISTIC_FLAGS:  Processor64BitCapble ==> Processor64BitCapable  ProcessorEnhancedVirtulization ==> ProcessorEnhancedVirtualization  Processor128bitCapble ==> Processor128BitCapable Platform code that uses those fields need modifications.

Release Date 2020-11-27

New Features

• ShellPkg: add HttpDynamicCommand
• OvmfPkg, ArmVirtPkg: enable HttpDynamicCommand
• CryptoPkg/BaseCryptLib: fix NULL dereference (CVE-2019-14584)
• Security fix: possible heap corruption with LzmaUefiDecompressGetInfo
• Security fix: unlimited FV recursion, round 2 (DXE Core)
• Remove DEPRECATED code wrapped by new macro DISABLE_NEW_DEPRECATED_INTERFACES
• MdePkg: Add definitions for HTTP Chunked Transfer
• Add SMBIOS 3.4.0 DDR5 Support
• UefiCpuPkg: MpServices2Ppi and MpServicesPpi compatibility support.
• Add RngLib instead of TimerLib for OpensslLib
• SecurityPkg/DxeImageVerificationLib: Disable SHA1 base on MACRO
• Remove the deprecated MD5 and SHA1 support of Hash2DxeCrypto
• Adopt VariablePolicy, Deprecate VarLock and VarCheckPolicy.
• BaseCryptLib: Add Host and Shell based unit tests
• Implementation of UEFI EFI_REST_JSON_STRUCTURE_PROTOCOL
• Implementation of UEFI Redfish Host Interface Dxe
• Add SATA port error recovery when operating in AHCI mode
• Restart failed ATA packets when operating in AHCI mode
• Extend usage of LastAttemptStatus in FmpDxe
• Add firmware support for Kvmtool
• EmulatorPkg: Add CI build for SECURE_BOOT_ENABLE
• BaseTools: Add EDKII_DSC_PLATFORM_GUID MACRO
• BaseTools: Enable Module Scope Structure Pcd
• BaseTools: Incremental build enhancement

Bugzilla List

Wiki

• VariablePolicy Protocol Enhanced Method for Managing Variables
• TianoCore: Who we are

Update Notes

1. DEPRECATED functions are removed. New secure version functions are required to be used.
2. RngLib library instance is required to be specified in [LibraryClasses] section of Platform.dsc file.
3. VariablePolicyLib and VariablePolicyHelperLib library instances are requried to be specified in [LibraryClasses] section of Platform.dsc file. The detail changes can refer to platform porting wiki.

Release Date 2020-09-04

New Features

• BootGuard TOCTOU vulnerability (CVE-2019-11098)
• Provide MACROs to disable SHA1 support
• Update openssl version to latest stable version 1.1.1g
• TPM Add capability to let PEIM extend TcgEvent
• TPM Bios to verify TPM2_ChangeEPS Support through TPM Capabilities command request and enable it if available
• Add FSP binary measurement
• CXL 1.1 Base Specification Register definitions
• BaseTools: Add support on C files to consume ASL files
• Enable BSD-2-Clause-Patent license checker for new added files in open CI
• Enable ECC (EFI Code Checker) checker in open CI
• Add UNIT_TESTING_DEBUG define to enable source level debugging of host based unit tests
• Add new instance of BaseLib that for host based unit tests called UnitTestHostBaseLib
• Add a pre-memory AP vector at 0xFF000
• IntelFsp2Pkg: Add FSP*_ARCH_UPD
• Dynamic AML: A solution to simplify runtime generation of Definition Block tables
• Add support to OVMF for AMD SEV-ES
• Add bhyve hypervisor support to EDK2
• Add LSI 53C895A SCSI controller support to OVMF

Bugzilla List

Wiki

• How to debug OVMF with QEMU using WinDbg
• Boot Guard TOCTOU Vulnerability Mitigation

Update Notes

1. Add the below library instances into [LibraryClasses.common.PEIM] section of platform dsc If this platforms depend on Intel FSP FspMeasurementLib|IntelFsp2WrapperPkg/Library/BaseFspMeasurementLib/BaseFspMeasurementLib.inf TcgEventLogRecordLib|SecurityPkg/Library/TcgEventLogRecordLib/TcgEventLogRecordLib.inf TpmMeasurementLib|SecurityPkg/Library/PeiTpmMeasurementLib/PeiTpmMeasurementLib.inf

2. The SEV-ES feature adds new library dependencies. If your DSC file uses the UefiCpuPkg CpuExceptionHandlerLib library or the UefiCpuPkg MpInitLib library, then you must add an entry for the UefiCpuPkg VmgExitLib library (VmgExitLib|UefiCpuPkg/Library/VmgExitLibNull/VmgExitLibNull.inf).

Release Date 2020-06-03

New Features

• RegularExpressionDxe: Use submodule way to access third party Oniguruma
• BrotliCustomDecompressLib: Use submodule way to access third party brotli
• BaseTools: Use submodule way to access third party brotli
• RISC-V architecture on EDK2
• Disabling safe string constraint assertions
• ArmVirtPkg Implement support for TPM2 measured boot
• OVMF Implement support for Linux v5.7+ initrd and mixed mode loading
• OVMF Use loadimage/startimage for loading the kernel passed via the QEMU command line
• OVMF Support booting from Fusion-MPT SCSI controllers
• OVMF Support booting from VMware PVSCSI controllers
• OVMF RFE: VCPU hotplug with SMM
• OVMF PEI phase variable driver / MemoryTypeInfo tracking
• ArmVirtPkg, OvmfPkg: Pass parameter from QEMU to control PXE IPv4/v6 boot
• FmpDxe: Implement Fmp Capsule Dependency feature in library
• Remove deprecate APIs in BaseCryptLib
• IntelFsp2Pkg: Support Multi-Phase silicon initialization and debug handlers
• Enable Host Unit Tests for Linux in Core CI
• Add Open CI build test for Ovmf and Emulator
• Add UEFI 2.8/2.8a definition in MdePkg
• Add PI1.7/PI1.7a definition into MdePkg

Bugzilla List

Update Notes

1. The brotli source code is accessed through submodule way. So anybody updates to the latest edk2 should type ‘git submodule update –init’ to checkout submodule brotli.
2. BaseCryptoLib MD4, ARC4, TDES, AES ECB MODE, HMAC MD5, HMAC SHA1 API have been deprecated. The consumer that use above functions should remove the related code and return unsupported status.
3. SecurityPkg Tcg2PhysicalPresenceLib library class removes two macros TCG2_BIOS_TPM_MANAGEMENT_FLAG_DEFAULT and TCG2_BIOS_STORAGE_MANAGEMENT_FLAG_DEFAULT. The consumer code should use gEfiSecurityPkgTokenSpaceGuid.PcdTcg2PhysicalPresenceFlags to get the default flags.

Release Date 2020-03-04

New Features

• Basetool: Reuse compiler show-include feature for the incremental build quality and performance
• BaseTools GenerateCapsule: Support capsule dependency
• FmpDxe: Support capsule dependency
• New BaseCryptLib instances to compile independently from callers
• Add TCG PFP revision 105 support and NIST SP800-155 event
• MpInitLib: Build information for loaded and detected microcode patches
• Add platform microcode shadow PPI to UefiCpuPkg
• BaseCryptLib: Remove HmacXxxGetContextSize and replace HmacXxxInit with HmacXxxSetKey
• Enable Unified API for UEFI drivers utilizing HASH/RSA Authentication Mechanism
• Add Unit Test Framework to edk2 repository

Bugzilla List

Wiki

• Fmp Capsule Dependency

Release Date 2019-12-02

New Features

• Add new tool chain for LLVM/CLANG9.0
• BaseTools: Enable --genfds-multi-thread by default build
• Add STATIC_ASSERT macro
• Add VS2019 Toolchain def
• Upgrade Openssl to 1.1.1d due to CVEs in v1.1.1b
• UEFI Variable SMI Reduction
• ScsiDiskDxe Support the Storage Security Command Protocol
• Add support SMBIOS spec 3.3.0
• Allow PCDs to be used in conditional statements if not referenced in an INF
• Add Support Laml and Lasa for TPM2 ACPI
• Add PCI Device Security Support
• Invalid server certificate accepted in HTTPS Boot (CVE-2019-14553)
• MdeModulePkg: Enable/Disable S3BootScript dynamically
• Enable Phase 1 of Continuous Integration (CI) on the edk2 repository

Bugzilla List

Wiki

• LLVM/CLANGPDB Tool Chain
• UEFI Variable Runtime Cache
• EDKII Continuous Integration

Release Date 2019-08-30 (UTC - 8 00:00)

New Features

• Remove IntelFrameworkPkg
• Remove IntelFrameworkModulePkg
• Standardize EDK II PI root-of-trust verification implementation
• Remove IntelFsp[Wrapper]Pkg
• Move IntelSiliconPkg from edk2 repo to edk2-platforms repo
• Remove framework modules within PcAtChipsetPkg
• [NvmExpressPei] Update the driver to produce NVM Express PassThru PPI
• Enable new MM MP Protocol
• Change PiSmmCpu driver to enable 5-level paging when CPU supports it
• Support Capsule On Disk
• BaseTools Enable multiple-thread autogen
• Enable 5-level paging in DXE long mode
• Update FmpDxe to support service drivers that manage more than one device at a time
• RegularExpressionDxe: Update Oniguruma to the latest Release 6.9.3 (security fix release)
• Add EDKII_UFS_HC_PLATFORM_PROTOCOL to support platform specific programming of UFS host controllers
• Enable SM3 digest algorithm for measured boot and TCG2 EVENT protocol
• Add a new MODULE_TYPE HOST_APPLICATION in BaseTool
• Add support for KDF function
• [SD/MMC] Allow platform to tweak device working parameters during SD card/eMMC initialization
• port TLS_ENABLE from OvmfPkg to ArmVirtPkg
• IntelFsp2Pkg: add TempRamExitPpi.h per FSP 2.1 spec
• IntelFsp2Pkg: Add support for FSP 1.x binaries to SplitFspBin.py
• New OvmfXen platform with Xen PVH support
• Tool to generate a Windows Firmware Update Drivers
• BaseTools/Scripts: Add GetUtcDateTime script
• Adding a new TSC library by using CPUID(0x15) TSC leaf
• Build Cache very easily miss because of monolithic platform hash

Bugzilla List

Wiki

• UEFI Capsule on Disk Introducation
• OBB Verification

Update Notes

1. Update code to use CPU_FEATURE_THREE_STRIKE_COUNTER instead of CPU_FEATURE_THREE_STRICK_COUNTER from RegisterCpuFeaturesLib.h as BZ1642 fixed the typo.

2. Removed IntelFrameworkPkg and IntelFrameworkModulePkg. If platforms still use the components in those packages please use the below substitutions:

IntelFrameworkModulePkg/Library/BaseUefiTianoCustomDecompressLib/BaseUefiTianoCustomDecompressLib.inf
==>
MdePkg/Library/BaseUefiDecompressLib/BaseUefiTianoCustomDecompressLib.inf

IntelFrameworkModulePkg/Library/LzmaCustomDecompressLib/LzmaCustomDecompressLib.inf
==>
MdeModulePkg/Library/LzmaCustomDecompressLib/LzmaCustomDecompressLib.inf

IntelFrameworkModulePkg/Library/PeiDxeDebugLibReportStatusCode/PeiDxeDebugLibReportStatusCode.inf
==>
MdeModulePkg/Library/PeiDxeDebugLibReportStatusCode/PeiDxeDebugLibReportStatusCode.inf

IntelFrameworkModulePkg/Library/GenericBdsLib/GenericBdsLib.inf
==>
Switch to the MdeModulePkg BDS MdeModulePkg/Universal/BdsDxe/BdsDxe.inf and drop the above library

3. Removed several legacy framework modules in PcAtChipsetPkg. Platforms can use the below substitutions:

PcAtChipsetPkg/8259InterruptControllerDxe/8259.inf
PcAtChipsetPkg/8254TimerDxe/8254Timer.inf
==>
PcAtChipsetPkg/HpetTimerDxe/HpetTimerDxe.inf
(Please note that platform/silicon codes may still need to mask 8259 interrupts to avoid unexpected interrupts being triggered.)

PcAtChipsetPkg/IsaAcpiDxe/IsaAcpi.inf
==>
Platform specific Super IO bus driver
(An example for OVMF platform can be referred at OvmfPkg/SioBusDxe/SioBusDxe.inf)

4. Removed --nt32 option for edksetup.bat since Nt32Pkg has been removed. Added VS2017 VS2015 VS2013 VS2012 tool chain options for edksetup.bat to set up different VS environment. For example: when your dev machine has installed VS2017 and VS2015, call edksetup.bat VS2015 can set VS2015 build env. Call edksetup.bat without any tool chain option, the highest version of VS tool env will be set.

5. PiSmmCpuDxeSmm was updated to create 5-level page table for SMM environment when CPU is capable. If the platform uses platform-specific SmmCpuFeatureLib and the library provides custom SMI handler, the SMI handler assembly code needs to be updated to set BIT12 in CR4 before entering to 64bit mode.