1
0
forked from pool/grub2

1035 Commits

Author SHA256 Message Date
e61685c1c9 Accepting request 1281004 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1281004
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=363
2025-05-31 17:14:27 +00:00
7c31296e04 - Use /etc/SUSE-brand to display OS label (bsc#1239169)
* 0001-mkconfig-Determine-GRUB_DISTRIBUTOR-from-etc-SUSE-br.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=551
2025-05-29 04:33:22 +00:00
cda3e9a045 - Add support for LoaderEntryOneshot
* grub2-bls-loader-entry-oneshot.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=550
2025-05-28 10:09:06 +00:00
e29bf98e29 Accepting request 1278957 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1278957
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=362
2025-05-23 12:29:07 +00:00
c463ace229 - Fix product name missing in snapshot list (bsc#1243162)
* grub2-snapper-plugin.sh

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=549
2025-05-21 06:19:49 +00:00
68b2283712 - Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
* 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=548
2025-05-20 05:11:19 +00:00
fa4bf43e5e Accepting request 1276721 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1276721
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=361
2025-05-13 18:12:05 +00:00
48391de1c2 - Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
* 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=547
2025-05-12 06:38:05 +00:00
1661d1c96c Accepting request 1273319 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1273319
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=360
2025-04-29 14:39:46 +00:00
3883c7dd4a - grub2-common: use fuse3
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=546
2025-04-29 07:08:25 +00:00
b983f3a284 Correct patch file name in previous SR.
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=545
2025-04-28 03:55:36 +00:00
032390ea7d - Add support for boot assessment, needed by health-checker
* grub2-bls-boot-counting.patch
  * grub2-bls-boot-assessment.patch
  * grub2-bls-show-snapshot.patch
  * grub2-blscfg-fix-hang.patch
  * grub2-blscfg-set-efivars.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=544
2025-04-28 03:48:46 +00:00
f1b1a65d52 Accepting request 1272144 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1272144
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=359
2025-04-24 15:25:03 +00:00
a06e684503 - Fix reading bls fragments in file-system dependent order that is not
predictable (bsc#1241046)
  * 0001-blscfg-read-fragments-in-order.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=543
2025-04-23 10:30:12 +00:00
b46ca08141 - Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
* 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=542
2025-04-23 08:57:39 +00:00
b2a0c64894 Accepting request 1269746 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1269746
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=358
2025-04-16 18:38:04 +00:00
f56f2d4310 add grub2-string-initializer.patch, part of upstream gnulib patch, to fix gcc15 compile time error (bsc#1239884)
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=541
2025-04-16 00:31:16 +00:00
c686ed8e88 Accepting request 1269414 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1269414
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=357
2025-04-15 18:47:01 +00:00
55e98eca8c - Measure the envblk used by pre_loadenv
* 0001-prep_loadenv-Measure-the-environment-block-into-PCR-.patch
- Enable PowerPC 64 support for tss2 and tpm2_key_protector
  * 0001-tpm2_key_protector-Add-grub-emu-support.patch
  * 0001-tss2-Adjust-bit-fields-for-big-endian-targets.patch
  * 0002-term-ieee1275-serial-Cast-0-to-proper-type.patch
  * 0003-ieee1275-Consolidate-repeated-definitions-of-IEEE127.patch
  * 0004-ieee1275-ibmvpm-Move-TPM-initialization-functions-to.patch
  * 0005-ieee1275-tcg2-Refactor-grub_ieee1275_tpm_init.patch
  * 0006-ieee1275-tcg2-Add-TCG2-driver-for-ieee1275-PowerPC-f.patch
  * 0007-tpm2_key_protector-Enable-build-for-powerpc_ieee1275.patch
- Dump PCRs when TPM unsealing fails
  * 0001-tpm2_key_protector-Dump-PCRs-on-policy-fail.patch
  * 0002-tpm2_key_protector-Add-tpm2_dump_pcr-command.patch
- Add 'NV index' handle support to tpm2_key_protector
  * 0003-tss2-Fix-the-missing-authCommand.patch
  * 0004-tss2-Add-TPM-2.0-NV-index-commands.patch
  * 0005-tpm2_key_protector-Unseal-key-from-a-buffer.patch
  * 0006-tpm2_key_protector-Support-NV-index-handles.patch
  * 0007-util-grub-protect-Support-NV-index-mode.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=540
2025-04-15 04:10:27 +00:00
0f7a4c5987 Accepting request 1267829 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1267829
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=356
2025-04-09 19:49:16 +00:00
4124e2a54b We currently use simpledrm for early graphics on PCs. As you mention, we set gfxpayload in Grub to forward information about the system's framebuffer to the kernel. Simpledrm picks up the framebuffer for displaying graphics.
The driver is good enough for the job, we can do better on platforms with EFI or VESA graphics. There are currently two drivers under review at https://patchwork.freedesktop.org/series/146477/. I expect them to enter upstream in v6.16. These drivers can use the EDID data provided by EFI and VESA interfaces. This allows user space, such as Gnome, to pick up information about the output device. On vesadrm, Gnome even supports gamma correction.

With EFI systems, we'll fetch the EDID during the kernel's early boot stages. On VESA systems, we need the EDID information being passed on from Grub. The gfxpayload options only forwards information about the framebuffer itself (size, colors, memory address), but not information about the display device.

To our advantage, the kernel already contains real-mode code for fetching the VESA EDID; see https://elixir.bootlin.com/linux/v6.13.7/source/arch/x86/boot/video-vesa.c#L236. Hence there's already the edid_info field in the boot parameters. But this code only runs when booting with Grub's 'linux16' (or old LILO). Modern Grub never utilized the field or provided the EDID information at all. That's what this patch implements.

I've opened bsc#1240624 to track the progress of this project.

- Add grub2-provide-edid.patch: Grub2 already retrieves the EDID
  from video adapters. Copy the raw data into the Linux kernel boot
  parameters, so that Linux can use this information. The necessary
  fields have been present in the boot parameters since at least
  commit f8eeaaf41803 ("[PATCH] Make the bzImage format
  self-terminating"), but never used. Within the kernel, the EDID
  data will be propagated to graphics drivers and finally to user
  space. (bsc#1240624)

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=539
2025-04-08 07:19:13 +00:00
f74c95041a Accepting request 1265636 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1265636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=355
2025-04-02 15:05:43 +00:00
7664e19544 - Fix grub-bls has broken builtin theme for SLE (bsc#1240090)
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=538
2025-03-31 05:05:17 +00:00
b9c8a3dc9e Accepting request 1255520 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1255520
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=354
2025-03-25 21:07:41 +00:00
ea92f2a284 Accepting request 1254935 from home:gary_lin:branches:Base:System
- Filter out the non-subvolume btrfs mount points when creating the
  relative path (bsc#1239674)
  * grub2-btrfs-filter-non-subvol-mount.patch

OBS-URL: https://build.opensuse.org/request/show/1254935
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=537
2025-03-24 08:00:24 +00:00
bc8414ccb0 Accepting request 1254015 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1254015
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=353
2025-03-18 16:37:33 +00:00
ed060904b1 Accepting request 1254013 from home:michael-chang:branches:Base:System
- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obseleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch

OBS-URL: https://build.opensuse.org/request/show/1254013
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=536
2025-03-18 07:53:16 +00:00
54a6981deb Accepting request 1252944 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1252944
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=352
2025-03-15 15:15:51 +00:00
adfd7430c8 Accepting request 1252651 from home:gary_lin:branches:Base:System
- Update the patch to fix "SRK not matched" errors when unsealing
  the key (bsc#1232411)
  * 0001-tpm2-Add-extra-RSA-SRK-types.patch

OBS-URL: https://build.opensuse.org/request/show/1252651
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=535
2025-03-14 05:04:04 +00:00
178c94b511 Accepting request 1252189 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1252189
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=351
2025-03-12 14:20:23 +00:00
a613dba873 Accepting request 1252188 from home:michael-chang:branches:Base:System
- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch

OBS-URL: https://build.opensuse.org/request/show/1252188
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=534
2025-03-12 04:31:40 +00:00
4cd627fa80 Accepting request 1251213 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1251213
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=350
2025-03-08 16:51:52 +00:00
16138589af OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=533 2025-03-07 14:00:38 +00:00
Raymund Will
297bee93a6 - Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
* 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch

- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=532
2025-03-07 12:31:37 +00:00
6aa795273f Accepting request 1249587 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1249587
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=349
2025-03-05 12:38:23 +00:00
1855ad5881 - Cherry-pick upstream XFS fixes
* 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=531
2025-03-03 05:07:03 +00:00
981f57c80b Accepting request 1248263 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1248263
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=348
2025-02-25 15:41:07 +00:00
4738d190a1 - Make SLFO/SLE-16 and openSUSE have identical package structures
- Provide grub2-<CPUARCH>-efi-bls for SLFO/SLE-16

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=530
2025-02-25 03:51:07 +00:00
428d3cc775 Accepting request 1247577 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1247577
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=347
2025-02-21 20:35:23 +00:00
1d2906f958 - Fix grub-bls does not rollback via setting new default (bsc#1237198)
* 0001-bls-Accept-.conf-suffix-in-setting-default-entry.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=529
2025-02-21 08:55:11 +00:00
0da320177f Accepting request 1246820 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1246820
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=346
2025-02-19 14:58:21 +00:00
8e2eae8e3f Accepting request 1246819 from home:michael-chang:branches:Base:System
- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)

OBS-URL: https://build.opensuse.org/request/show/1246819
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=528
2025-02-19 01:23:28 +00:00
d38d67959e Accepting request 1245775 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1245775
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=345
2025-02-16 21:37:06 +00:00
690c7c825e Accepting request 1245717 from home:michael-chang:branches:Base:System
- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch

OBS-URL: https://build.opensuse.org/request/show/1245717
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=527
2025-02-14 03:29:15 +00:00
301279becb Accepting request 1229183 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1229183
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=344
2024-12-10 22:42:57 +00:00
9b87c1a6f8 - Update PowerPC SBAT patches to upstream (bsc#1233730)
* 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch

- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=526
2024-12-09 03:05:05 +00:00
5f9867f98c Accepting request 1228130 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1228130
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=343
2024-12-05 16:05:11 +00:00
42591852c5 - Update the TPM2 patches to the upstream final version
* Update 0001-key_protector-Add-key-protectors-framework.patch
  * Replace 0002-tpm2-Add-TPM-Software-Stack-TSS.patch with
    grub2-add-tss2-support.patch
  * Replace 0003-key_protector-Add-TPM2-Key-Protector.patch with
    0001-key_protector-Add-TPM2-Key-Protector.patch
  * Replace 0005-util-grub-protect-Add-new-tool.patch with
    0001-util-grub-protect-Add-new-tool.patch
  * Replace 0001-tpm2-Implement-NV-index.patch with
    0001-tpm2_key_protector-Implement-NV-index.patch
  * Replace 0001-tpm2-Support-authorized-policy.patch with
    0001-tpm2_key_protector-Support-authorized-policy.patch
- Refresh the TPM2 related patches
  * grub-read-pcr.patch
  * 0001-tpm2-Add-extra-RSA-SRK-types.patch
  * grub2-bsc1220338-key_protector-implement-the-blocklist.patch
  * safe_tpm_pcr_snapshot.patch
  * tpm-record-pcrs.patch

OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=525
2024-12-04 03:59:01 +00:00
efba483ac7 Accepting request 1227284 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1227284
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=342
2024-11-30 12:27:24 +00:00
012e0e85e4 Accepting request 1227248 from home:gary_lin:branches:Base:System
- Support s390x Secure Execution (jsc#PED-9531)
  * grub2-s390x-secure-execution-support.patch
- Update grub2-s390x-set-hostonly.patch to add the patch header
  and the description

OBS-URL: https://build.opensuse.org/request/show/1227248
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=524
2024-11-29 08:48:07 +00:00