arm-trusted-firmware (2.12.1+dfsg-1ubuntu1) stonking; urgency=medium

  * Disable PKCS#11 key loading with OpenSSL 4.0 (LP: #2154828)
    - d/p/fix-for-openssl4-compat.patch: guard ENGINE API usage, PEM keys
      still work, only affects cert_create tool not firmware

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Thu, 20 Aug 2026 16:26:56 -0300

arm-trusted-firmware (2.12.1+dfsg-1build1) stonking; urgency=medium

  * No-change rebuild against libssl4

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Thu, 23 Jul 2026 13:47:12 +0000

arm-trusted-firmware (2.12.1+dfsg-1) unstable; urgency=medium

  * New upstream point release.
    Fixes CVE-2024-7881 CVE-2024-5660
  * debian/copyright: Update for 2.12.1.
  * debian/copyright: Update to Standards-Version 4.7.2.
  * debian/patches: Drop patch to make warnings nonfatal.
    (Closes: #1091147)

 -- Vagrant Cascadian <vagrant@debian.org>  Sun, 02 Mar 2025 11:37:27 -0800

arm-trusted-firmware (2.12.0+dfsg-2) unstable; urgency=medium

  [ Martyn Welch ]
  * d/rules: Add k3 target

  [ Vagrant Cascadian ]
  * debian/rules: Enable building rockchip rk3568.
  * debian/rules: Enable building rockchip rk3588.
  * debian/patches: Add fixes from upstream to fix building rcar targets.
  * debian/rules: Re-enable rcar targets.
  * debian/patches: Add patch from upstream fixing warnings when building
    rk3399.
  * debian/rules: Sort platforms.
  * salsa-ci: Allow crossbuild-arm64 to fail.

  [ Andreas Henriksson ]
  * debian/rules: Enable building imx8mp (Closes: #1092909)

  [ Vagrant Cascadian ]
  * debian/rules: Sort platforms even better.

 -- Vagrant Cascadian <vagrant@debian.org>  Mon, 20 Jan 2025 16:37:31 -0800

arm-trusted-firmware (2.12.0+dfsg-1) experimental; urgency=medium

  * New upstream release. (Closes: #1074431, #1076042)
    Fixes CVE-2024-6563 CVE-2024-6564 CVE-2024-6287 CVE-2024-6285

  [ Diederik de Haas ]
  * debian/patches: Don't ignore '*.patch' files in debian/patches
  * d/watch: Switch to mode=git

  [ Vagrant Cascadian ]
  * debian/patches: Refresh use-ldflags-with-fiptool-and-cert-create.
  * Remove unlicensed binary
    plat/arm/board/common/swd_rotpk/arm_swd_rotpk_rsa_sha256.bin
  * debian/patches: Add patch working around undefined "PLAT_MSG".
  * debian/patches: Disable fatal warnings passed via ASFLAGS to
    workaround build failure.  Thanks to Marek
    Vasut. https://bugs.debian.org/1091147
  * debian/rules: Drop passing --no-warn-rwx-segments via TF_LDFLAGS. It
    is now detected in the upstream code weather this flag is supported.
  * debian/copyright: Update for 2.12.0.
  * debian/rules: Temporarily disable building of rcar target.
  * debian/control: Update to Standards Version 4.7.0.

 -- Vagrant Cascadian <vagrant@debian.org>  Tue, 07 Jan 2025 16:11:32 -0800

arm-trusted-firmware (2.10.0+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * debian/patches: Drop patches applied upstream.
  * debian/patches: Refresh patch to use ldflags.
  * debian/copyright: Update for 2.10.0.

 -- Vagrant Cascadian <vagrant@debian.org>  Sun, 03 Dec 2023 17:25:38 -0800

arm-trusted-firmware (2.9.0+dfsg-3) unstable; urgency=medium

  * Upload to unstable.

 -- Vagrant Cascadian <vagrant@debian.org>  Fri, 30 Jun 2023 18:17:00 -0700

arm-trusted-firmware (2.9.0+dfsg-2) experimental; urgency=medium

  * debian/rules: Fix variable assignment for sun50i_h6_no_pmic target.

 -- Vagrant Cascadian <vagrant@debian.org>  Sun, 18 Jun 2023 20:42:17 -0700

arm-trusted-firmware (2.9.0+dfsg-1) experimental; urgency=medium

  [ Manuel Traut ]
  * Build for i.MX8MM

  [ Vagrant Cascadian ]
  * debian/copyright: Update for 2.9.0.
  * debian/control: Update Standards-Version to 4.6.2.
  * debian/rules: Build sun50i_a64 with debugging enabled again.

  [ Detlev Casanova ]
  * debian/patches: Add mandatory fields in reserved-memory node
  * debian/rules: Add platform target specifiers
  * debian/rules: Also build bl31 for the rcar platform

  [ Vagrant Cascadian ]
  * debian/rules: Disable imx8mq, as it is not well supported upstream.

  [ harry88@gmx.ph ]
  * debian/rules: Add sun50i_h6 subplatform without PMIC regulators.
    (Closes: #1032395)

 -- Vagrant Cascadian <vagrant@debian.org>  Sun, 18 Jun 2023 20:26:00 -0700

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog arm-trusted-firmware-tools`.
