0108c5290e
Accepting request 1298703 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1298703
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=369
2025-08-12 15:03:08 +00:00
4962b71520
- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
...
* 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=559
2025-08-11 02:50:27 +00:00
e3c4848fca
Accepting request 1297414 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1297414
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=368
2025-08-07 14:48:22 +00:00
575dbfe9e9
- Skip mount point in grub_find_device function (bsc#1246231)
...
* 0001-getroot-Skip-mount-points-in-grub_find_device.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=558
2025-08-04 07:44:31 +00:00
0f03cac870
Accepting request 1296922 from Base:System
...
- Fix CVE-2024-56738: side-channel attack due to not constant-time
algorithm in grub_crypto_memcmp (bsc#1234959)
* grub2-constant-time-grub_crypto_memcmp.patch
- Update the bug tag for 0001-tpm2-Add-extra-RSA-SRK-types.patch
OBS-URL: https://build.opensuse.org/request/show/1296922
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=367
2025-08-03 11:36:23 +00:00
03767e119a
Update the bug tag for 0001-tpm2-Add-extra-RSA-SRK-types.patch
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=557
2025-08-01 03:01:52 +00:00
5bb0fbd333
- Fix CVE-2024-56738: side-channel attack due to not constant-time
...
algorithm in grub_crypto_memcmp (bsc#1234959)
* grub2-constant-time-grub_crypto_memcmp.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=556
2025-08-01 02:45:33 +00:00
d5a0d02491
Accepting request 1294250 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1294250
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=366
2025-07-20 13:28:03 +00:00
cce4084b41
- Fix test -f and -s do not work properly over the network files served via
...
tftp and http (bsc#1246157) (bsc#1246237)
* 0001-test-Fix-f-test-on-files-over-network.patch
* 0002-http-Return-HTTP-status-code-in-http_establish.patch
* 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
* 0004-tftp-Fix-hang-when-file-is-a-directory.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=555
2025-07-18 04:19:54 +00:00
13af96e7d7
Accepting request 1291823 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1291823
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=365
2025-07-11 19:29:15 +00:00
51c5d518ab
- Enable loongarch64 build (bsc#1234248)
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=554
2025-07-11 05:40:08 +00:00
afe8a1f0a5
- Backport upstream disk password retry (bsc#1245545)
...
* 0001-disk-cryptodisk-Allow-user-to-retry-failed-passphras.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=553
2025-07-11 05:13:27 +00:00
4a3674e455
Accepting request 1289402 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1289402
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=364
2025-07-02 10:07:32 +00:00
f53e8a6886
- Fix bls_bumpcounter breaking FDE (bsc#1243842)
...
* grub2-blsbumpcounter-menu.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=552
2025-07-01 07:41:34 +00:00
e61685c1c9
Accepting request 1281004 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1281004
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=363
2025-05-31 17:14:27 +00:00
7c31296e04
- Use /etc/SUSE-brand to display OS label (bsc#1239169)
...
* 0001-mkconfig-Determine-GRUB_DISTRIBUTOR-from-etc-SUSE-br.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=551
2025-05-29 04:33:22 +00:00
cda3e9a045
- Add support for LoaderEntryOneshot
...
* grub2-bls-loader-entry-oneshot.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=550
2025-05-28 10:09:06 +00:00
e29bf98e29
Accepting request 1278957 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1278957
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=362
2025-05-23 12:29:07 +00:00
c463ace229
- Fix product name missing in snapshot list (bsc#1243162)
...
* grub2-snapper-plugin.sh
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=549
2025-05-21 06:19:49 +00:00
68b2283712
- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
...
* 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=548
2025-05-20 05:11:19 +00:00
fa4bf43e5e
Accepting request 1276721 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1276721
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=361
2025-05-13 18:12:05 +00:00
48391de1c2
- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
...
* 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
* 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
* 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
* 0004-commands-search-Add-the-diskfilter-support.patch
* 0005-docs-Document-available-crypto-disks-checks.patch
* 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
* 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
* 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
* 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
* 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
* 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
* 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=547
2025-05-12 06:38:05 +00:00
1661d1c96c
Accepting request 1273319 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1273319
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=360
2025-04-29 14:39:46 +00:00
3883c7dd4a
- grub2-common: use fuse3
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=546
2025-04-29 07:08:25 +00:00
b983f3a284
Correct patch file name in previous SR.
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=545
2025-04-28 03:55:36 +00:00
032390ea7d
- Add support for boot assessment, needed by health-checker
...
* grub2-bls-boot-counting.patch
* grub2-bls-boot-assessment.patch
* grub2-bls-show-snapshot.patch
* grub2-blscfg-fix-hang.patch
* grub2-blscfg-set-efivars.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=544
2025-04-28 03:48:46 +00:00
f1b1a65d52
Accepting request 1272144 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1272144
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=359
2025-04-24 15:25:03 +00:00
a06e684503
- Fix reading bls fragments in file-system dependent order that is not
...
predictable (bsc#1241046)
* 0001-blscfg-read-fragments-in-order.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=543
2025-04-23 10:30:12 +00:00
b46ca08141
- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
...
* 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=542
2025-04-23 08:57:39 +00:00
b2a0c64894
Accepting request 1269746 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1269746
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=358
2025-04-16 18:38:04 +00:00
f56f2d4310
add grub2-string-initializer.patch, part of upstream gnulib patch, to fix gcc15 compile time error (bsc#1239884)
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=541
2025-04-16 00:31:16 +00:00
c686ed8e88
Accepting request 1269414 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1269414
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=357
2025-04-15 18:47:01 +00:00
55e98eca8c
- Measure the envblk used by pre_loadenv
...
* 0001-prep_loadenv-Measure-the-environment-block-into-PCR-.patch
- Enable PowerPC 64 support for tss2 and tpm2_key_protector
* 0001-tpm2_key_protector-Add-grub-emu-support.patch
* 0001-tss2-Adjust-bit-fields-for-big-endian-targets.patch
* 0002-term-ieee1275-serial-Cast-0-to-proper-type.patch
* 0003-ieee1275-Consolidate-repeated-definitions-of-IEEE127.patch
* 0004-ieee1275-ibmvpm-Move-TPM-initialization-functions-to.patch
* 0005-ieee1275-tcg2-Refactor-grub_ieee1275_tpm_init.patch
* 0006-ieee1275-tcg2-Add-TCG2-driver-for-ieee1275-PowerPC-f.patch
* 0007-tpm2_key_protector-Enable-build-for-powerpc_ieee1275.patch
- Dump PCRs when TPM unsealing fails
* 0001-tpm2_key_protector-Dump-PCRs-on-policy-fail.patch
* 0002-tpm2_key_protector-Add-tpm2_dump_pcr-command.patch
- Add 'NV index' handle support to tpm2_key_protector
* 0003-tss2-Fix-the-missing-authCommand.patch
* 0004-tss2-Add-TPM-2.0-NV-index-commands.patch
* 0005-tpm2_key_protector-Unseal-key-from-a-buffer.patch
* 0006-tpm2_key_protector-Support-NV-index-handles.patch
* 0007-util-grub-protect-Support-NV-index-mode.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=540
2025-04-15 04:10:27 +00:00
0f7a4c5987
Accepting request 1267829 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1267829
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=356
2025-04-09 19:49:16 +00:00
4124e2a54b
We currently use simpledrm for early graphics on PCs. As you mention, we set gfxpayload in Grub to forward information about the system's framebuffer to the kernel. Simpledrm picks up the framebuffer for displaying graphics.
...
The driver is good enough for the job, we can do better on platforms with EFI or VESA graphics. There are currently two drivers under review at https://patchwork.freedesktop.org/series/146477/ . I expect them to enter upstream in v6.16. These drivers can use the EDID data provided by EFI and VESA interfaces. This allows user space, such as Gnome, to pick up information about the output device. On vesadrm, Gnome even supports gamma correction.
With EFI systems, we'll fetch the EDID during the kernel's early boot stages. On VESA systems, we need the EDID information being passed on from Grub. The gfxpayload options only forwards information about the framebuffer itself (size, colors, memory address), but not information about the display device.
To our advantage, the kernel already contains real-mode code for fetching the VESA EDID; see https://elixir.bootlin.com/linux/v6.13.7/source/arch/x86/boot/video-vesa.c#L236 . Hence there's already the edid_info field in the boot parameters. But this code only runs when booting with Grub's 'linux16' (or old LILO). Modern Grub never utilized the field or provided the EDID information at all. That's what this patch implements.
I've opened bsc#1240624 to track the progress of this project.
- Add grub2-provide-edid.patch: Grub2 already retrieves the EDID
from video adapters. Copy the raw data into the Linux kernel boot
parameters, so that Linux can use this information. The necessary
fields have been present in the boot parameters since at least
commit f8eeaaf41803 ("[PATCH] Make the bzImage format
self-terminating"), but never used. Within the kernel, the EDID
data will be propagated to graphics drivers and finally to user
space. (bsc#1240624)
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=539
2025-04-08 07:19:13 +00:00
f74c95041a
Accepting request 1265636 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1265636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=355
2025-04-02 15:05:43 +00:00
7664e19544
- Fix grub-bls has broken builtin theme for SLE (bsc#1240090)
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=538
2025-03-31 05:05:17 +00:00
b9c8a3dc9e
Accepting request 1255520 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1255520
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=354
2025-03-25 21:07:41 +00:00
ea92f2a284
Accepting request 1254935 from home:gary_lin:branches:Base:System
...
- Filter out the non-subvolume btrfs mount points when creating the
relative path (bsc#1239674)
* grub2-btrfs-filter-non-subvol-mount.patch
OBS-URL: https://build.opensuse.org/request/show/1254935
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=537
2025-03-24 08:00:24 +00:00
bc8414ccb0
Accepting request 1254015 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1254015
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=353
2025-03-18 16:37:33 +00:00
ed060904b1
Accepting request 1254013 from home:michael-chang:branches:Base:System
...
- Refresh PPC NVMEoF ofpath related patches to newer revision
* 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
* 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obseleted
* 0004-ofpath-controller-name-update.patch
* 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
(bsc#1235971) (bsc#1235958) (bsc#1239651)
* 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch
OBS-URL: https://build.opensuse.org/request/show/1254013
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=536
2025-03-18 07:53:16 +00:00
54a6981deb
Accepting request 1252944 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1252944
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=352
2025-03-15 15:15:51 +00:00
adfd7430c8
Accepting request 1252651 from home:gary_lin:branches:Base:System
...
- Update the patch to fix "SRK not matched" errors when unsealing
the key (bsc#1232411)
* 0001-tpm2-Add-extra-RSA-SRK-types.patch
OBS-URL: https://build.opensuse.org/request/show/1252651
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=535
2025-03-14 05:04:04 +00:00
178c94b511
Accepting request 1252189 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1252189
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=351
2025-03-12 14:20:23 +00:00
a613dba873
Accepting request 1252188 from home:michael-chang:branches:Base:System
...
- Update patches for Power guest secure boot with key management (jsc#PED-3520)
(jsc#PED-9892)
* 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
* 0002-ieee1275-Platform-Keystore-PKS-Support.patch
* 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
* 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
* 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
* 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
* 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
* 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
* 0009-appendedsig-documentation.patch
- Remove patches
* 0001-ieee1275-Platform-Keystore-PKS-Support.patch
* 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
* 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
* 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
* 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
* 0006-appendedsig-documentation.patch
OBS-URL: https://build.opensuse.org/request/show/1252188
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=534
2025-03-12 04:31:40 +00:00
4cd627fa80
Accepting request 1251213 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1251213
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=350
2025-03-08 16:51:52 +00:00
16138589af
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=533
2025-03-07 14:00:38 +00:00
Raymund Will
297bee93a6
- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
...
* 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch
- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
* 0001-autofs-Ignore-zfs-not-found.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=532
2025-03-07 12:31:37 +00:00
6aa795273f
Accepting request 1249587 from Base:System
...
OBS-URL: https://build.opensuse.org/request/show/1249587
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/grub2?expand=0&rev=349
2025-03-05 12:38:23 +00:00
1855ad5881
- Cherry-pick upstream XFS fixes
...
* 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
* 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
* 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=531
2025-03-03 05:07:03 +00:00