)]}'
{
  "commit": "d2cbaefc082294eadaa30a3d5f0fa8ba264a574a",
  "tree": "31ed7dba6dfcfbc737e6fc9174392546436c8812",
  "parents": [
    "ba8296810c6c0f411f158955574c8ae8ffe283f0"
  ],
  "author": {
    "name": "Gerd Hoffmann",
    "email": "kraxel@redhat.com",
    "time": "Wed Dec 10 11:16:08 2025 +0100"
  },
  "committer": {
    "name": "mergify[bot]",
    "email": "37929162+mergify[bot]@users.noreply.github.com",
    "time": "Thu Dec 11 09:39:51 2025 +0000"
  },
  "message": "OvmfPkg/X86QemuLoadImageLib: flip default for EnableLegacyLoader to false\n\nWhat happened since commit 1549bf11cc94 (\"OvmfPkg/X86QemuLoadImageLib:\nmake legacy loader configurable.\") ?\n\nFirst, qemu 10.0 has been released, which brings support for the -shim\ncommand line option so direct kernel boot with secure boot works.\n\nSecond, support has been added to libvirt (version v11.2.0 and newer).\n\nThird, we got a bunch of linux distro releases.  Latest debian, ubuntu\nand fedora releases all have new enough edk2+qemu+libvirt packages to\nsupport direct kernel boot with shim.efi loading and proper secure boot\nverification.\n\nLastly, the edk2 security advisory GHSA-6pp6-cm5h-86g5 and CVE-2025-2296\nhave been published.\n\nTime for the next step in tightening the screws:  Flip the default for\nthe EnableLegacyLoader config option from true to false.  Also update\nthe documentation accordingly.\n\nThe documentation for the config option is here:\nhttps://github.com/tianocore/edk2/blob/master/OvmfPkg/RUNTIME_CONFIG.md#user-content-security-optorgtianocoreenablelegacyloader\n\nUpcoming final step, in a year or two: remove the legacy loader from the\ncode base (drop X86QemuLoadImageLib, migrade all users to use\nGenericQemuLoadImageLib instead).\n\nSigned-off-by: Gerd Hoffmann \u003ckraxel@redhat.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b16bdeb47f8c3d835d1d02d741d3da211a1546a2",
      "old_mode": 33188,
      "old_path": "OvmfPkg/Library/X86QemuLoadImageLib/X86QemuLoadImageLib.c",
      "new_id": "f98f8ab885b4726b5b268bf73ebcc8d611c36ba2",
      "new_mode": 33188,
      "new_path": "OvmfPkg/Library/X86QemuLoadImageLib/X86QemuLoadImageLib.c"
    },
    {
      "type": "modify",
      "old_id": "b75a5dacadf5b10b129d101f932b729fac53340f",
      "old_mode": 33188,
      "old_path": "OvmfPkg/RUNTIME_CONFIG.md",
      "new_id": "57d0dd96111ac9a3c0486188178c27406b8852a4",
      "new_mode": 33188,
      "new_path": "OvmfPkg/RUNTIME_CONFIG.md"
    }
  ]
}