2f6334d199
- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
...
Reboot (bsc#1254299)
* 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=575
2026-02-11 07:36:10 +00:00
c992f7f4df
Accepting request 1331962 from home:michael-chang:branches:Base:System
...
- Fix screen flickering in BLS due to rendering graphical and text terminals at
the same time (bsc#1256480)
- Add automatic fwsetup menu entry in BLS
* 0001-bls-Allow-configuration-of-active-console-type.patch
* 0002-grubbls-Add-automatic-fwsetup-menu-entry.patch
- Add efifwsetup module to EFI BLS image
OBS-URL: https://build.opensuse.org/request/show/1331962
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=574
2026-02-10 05:04:54 +00:00
c81c5f0818
Accepting request 1330389 from home:michael-chang:branches:Base:System
...
- Fix sporadic boot failure in 2.14 BLS (bsc#1257547)
* 0001-blsuki-Fix-linux_cmd-size-calcution-in-bls_get_linux.patch
OBS-URL: https://build.opensuse.org/request/show/1330389
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=573
2026-02-02 11:14:30 +00:00
f24b6f8a62
Accepting request 1329811 from home:michael-chang:branches:Base:System
...
- New in 2.14
* libgcrypt 1.11.
* LVM LV integrity and cachevol support.
* EROFS support.
* GRUB environment block inside the Btrfs header support.
* NX support for EFI platforms.
* shim loader protocol support.
* BLS and UKI support.
* Argon2 KDF support.
* TPM2 key protector support.
* Appended Signature Secure Boot Support for PowerPC.
* New option to block command line interface.
* Support dates outside of 1901..2038 range.
* zstdio decompression support.
* EFI code improvements and fixes.
* TPM driver fixes.
* Filesystems fixes.
* CVE and Coverity fixes.
* Tests improvements.
* Documentation improvements.
- New tarball
- Use -Wno-error=discarded-qualifiers as temporary workaround for build failure
with new glibc 2.43
OBS-URL: https://build.opensuse.org/request/show/1329811
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=572
2026-01-30 01:22:13 +00:00
2d9d7f2c68
Accepting request 1329670 from home:michael-chang:grub:2.14
...
- Update to 2.14
* grub-2.14.tar.xz
- Removed tarball
* grub-2.12.tar.xz
- Patch rediff
* use-grub2-as-a-package-name.patch
* grub2-secureboot-add-linuxefi.patch
* grub2-secureboot-no-insmod-on-sb.patch
* grub2-secureboot-chainloader.patch
* grub2-linguas.sh-no-rsync.patch
* grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
* grub2-s390x-03-output-7-bit-ascii.patch
* grub2-s390x-04-grub2-install.patch
* grub2-efi-chainload-harder.patch
* grub2-emu-4-all.patch
* grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
* grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
* grub2-btrfs-03-follow_default.patch
* grub2-btrfs-05-grub2-mkconfig.patch
* grub2-btrfs-06-subvol-mount.patch
* grub2-btrfs-10-config-directory.patch
* grub2-efi-xen-cmdline.patch
* grub2-Add-hidden-menu-entries.patch
* grub2-suse-remove-linux-root-param.patch
* 0003-bootp-New-net_bootp6-command.patch
* 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
* 0001-add-support-for-UEFI-network-protocols.patch
* 0001-kern-mm.c-Make-grub_calloc-inline.patch
* 0002-cmdline-Provide-cmdline-functions-as-module.patch
* 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch
OBS-URL: https://build.opensuse.org/request/show/1329670
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=571
2026-01-29 02:43:06 +00:00
1cd98a1006
Accepting request 1318889 from home:tdz:branches:Base:System
...
Fixes an issue with some of the graphics output during boot. See bsc#1253721.
- Rename sysfb patch file to match purpose
* grub2-simplefb.patch
* grub2-sysfb.patch
- Set 'gfxpayload=keep' for DRM sysfb drivers (bsc#1253721)
* grub2-sysfb.patch
OBS-URL: https://build.opensuse.org/request/show/1318889
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=570
2025-11-24 09:17:26 +00:00
6288d095f5
Accepting request 1318543 from home:michael-chang:branches:Base:System
...
- Fix CVE-2025-54771 (bsc#1252931)
* 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
* 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
* 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
* 0004-normal-main-Unregister-commands-on-module-unload.patch
* 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
* 0006-commands-usbtest-Use-correct-string-length-field.patch
* 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6
OBS-URL: https://build.opensuse.org/request/show/1318543
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=569
2025-11-19 07:32:41 +00:00
eb77b17540
Accepting request 1312316 from home:michael-chang:branches:Base:System
...
- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
* grub2-grubenv-in-btrfs-header.patch
- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
* 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch
OBS-URL: https://build.opensuse.org/request/show/1312316
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=568
2025-10-27 04:52:16 +00:00
ae06d3bc01
Accepting request 1309003 from home:radolin:branches:Base:System
...
- make grub plugin compatible with snapper's plugin API (bsc#1246172)
- clean up some unused code
OBS-URL: https://build.opensuse.org/request/show/1309003
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=567
2025-10-07 05:06:55 +00:00
a7979baaf6
- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
...
* grub2-i386-pc-no-pageflipping.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=566
2025-09-23 12:32:51 +00:00
c51553e8a2
Accepting request 1306644 from home:michael-chang:branches:Base:System
...
- Fix boot hangs in setting up serial console when ACPI SPCR table is present
and redirection is disabled (bsc#1249088)
* 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch
OBS-URL: https://build.opensuse.org/request/show/1306644
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=565
2025-09-23 12:29:27 +00:00
5c528b80aa
osc copypac from project:Base:System package:grub2 revision:562
...
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=564
2025-09-23 12:29:12 +00:00
1ab3fed97c
- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)
...
* grub2-i386-pc-no-pageflipping.patch
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=563
2025-09-23 09:32:53 +00:00
12194be209
Accepting request 1303443 from home:dspinella:branches:Base:System
...
- Add support for `LoaderEntryDefault` EFI variable
* grub2-bls-loader-entry-default.patch
OBS-URL: https://build.opensuse.org/request/show/1303443
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=562
2025-09-12 04:09:11 +00:00
f2219f19f4
Accepting request 1302541 from home:gary_lin:branches:Base:System
...
- Optimize PBKDF2 to reduce the decryption time
* 0001-lib-crypto-Introduce-new-HMAC-functions-to-reuse-buf.patch
* 0002-lib-pbkdf2-Optimize-PBKDF2-by-reusing-HMAC-handle.patch
* 0001-kern-misc-Implement-faster-grub_memcpy-for-aligned-b.patch
OBS-URL: https://build.opensuse.org/request/show/1302541
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=561
2025-09-08 04:52:47 +00:00
3a43c0c43b
Accepting request 1299206 from home:michael-chang:branches:Base:System
...
- UEFI NX support and NX Linux loader using shim loader protocol (bsc#1205588)
(jsc#PED-13361)
* 0001-modules-Make-.module_license-read-only.patch
* 0002-modules-Strip-.llvm_addrsig-sections-and-similar.patch
* 0003-modules-Don-t-allocate-space-for-non-allocable-secti.patch
* 0004-modules-Load-module-sections-at-page-aligned-address.patch
* 0005-nx-Add-memory-attribute-get-set-API.patch
* 0006-nx-Set-page-permissions-for-loaded-modules.patch
* 0007-nx-Set-the-NX-compatible-flag-for-the-GRUB-EFI-image.patch
* 0008-efi-Provide-wrappers-for-load_image-start_image-and-.patch
* 0009-efi-sb-Add-support-for-the-shim-loader-protocol.patch
* 0010-efi-sb-Add-API-for-retrieving-shim-loader-image-hand.patch
* 0011-loader-efi-chainloader-Use-shim-loader-image-handle-.patch
* 0012-loader-efi-linux-Use-shim-loader-image-handle-where-.patch
* 0013-nx-Rename-GRUB_DL_ALIGN-to-DL_ALIGN.patch
- Fallback for legacy shim lock protocol while secure boot is enabled
* 0001-linux-fallback-to-EFI-handover-on-x86_64.patch
* 0002-linux-fallback-to-direct-PE-entry-boot-on-arm64.patch
* 0003-efi-chainloader-fallback-to-direct-image-execution.patch
* 0004-efi-chainloader-fix-missing-file_path-in-loaded_imag.patch
- Removed patch
* 0001-xen_boot-add-missing-grub_arch_efi_linux_load_image_.patch
OBS-URL: https://build.opensuse.org/request/show/1299206
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=560
2025-08-14 02:40:02 +00:00
ad68f27eb5
Accepting request 1298071 from home:michael-chang:branches:Base:System
...
- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
* 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch
OBS-URL: https://build.opensuse.org/request/show/1298071
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=559
2025-08-11 02:50:27 +00:00
dbc5215bb8
Accepting request 1297400 from home:michael-chang:branches:Base:System
...
- Skip mount point in grub_find_device function (bsc#1246231)
* 0001-getroot-Skip-mount-points-in-grub_find_device.patch
OBS-URL: https://build.opensuse.org/request/show/1297400
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=558
2025-08-04 07:44:31 +00:00
5fcfe3d5a0
Accepting request 1296921 from home:gary_lin:branches:Base:System
...
Update the bug tag for 0001-tpm2-Add-extra-RSA-SRK-types.patch
OBS-URL: https://build.opensuse.org/request/show/1296921
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=557
2025-08-01 03:01:52 +00:00
6787d9a2ce
Accepting request 1296401 from home:gary_lin:branches:Base:System
...
- Fix CVE-2024-56738: side-channel attack due to not constant-time
algorithm in grub_crypto_memcmp (bsc#1234959)
* grub2-constant-time-grub_crypto_memcmp.patch
OBS-URL: https://build.opensuse.org/request/show/1296401
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=556
2025-08-01 02:45:33 +00:00
9ea5361d9a
Accepting request 1294246 from home:michael-chang:branches:Base:System
...
- Fix test -f and -s do not work properly over the network files served via
tftp and http (bsc#1246157) (bsc#1246237)
* 0001-test-Fix-f-test-on-files-over-network.patch
* 0002-http-Return-HTTP-status-code-in-http_establish.patch
* 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
* 0004-tftp-Fix-hang-when-file-is-a-directory.patch
OBS-URL: https://build.opensuse.org/request/show/1294246
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=555
2025-07-18 04:19:54 +00:00
62aa15acb5
Accepting request 1291822 from home:michael-chang:bsc:1234248
...
- Enable loongarch64 build (bsc#1234248)
OBS-URL: https://build.opensuse.org/request/show/1291822
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=554
2025-07-11 05:40:08 +00:00
7010c625c0
Accepting request 1291388 from home:gary_lin:branches:Base:System
...
- Backport upstream disk password retry (bsc#1245545)
* 0001-disk-cryptodisk-Allow-user-to-retry-failed-passphras.patch
OBS-URL: https://build.opensuse.org/request/show/1291388
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=553
2025-07-11 05:13:27 +00:00
9a18d808ec
Accepting request 1288260 from home:dspinella:branches:Base:System
...
- Fix bls_bumpcounter breaking FDE (bsc#1243842)
* grub2-blsbumpcounter-menu.patch
OBS-URL: https://build.opensuse.org/request/show/1288260
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=552
2025-07-01 07:41:34 +00:00
e732311efa
Accepting request 1281003 from home:michael-chang:branches:Base:System
...
- Use /etc/SUSE-brand to display OS label (bsc#1239169)
* 0001-mkconfig-Determine-GRUB_DISTRIBUTOR-from-etc-SUSE-br.patch
OBS-URL: https://build.opensuse.org/request/show/1281003
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=551
2025-05-29 04:33:22 +00:00
8542b0edcd
Accepting request 1280777 from home:dspinella:branches:Base:System
...
- Add support for LoaderEntryOneshot
* grub2-bls-loader-entry-oneshot.patch
OBS-URL: https://build.opensuse.org/request/show/1280777
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=550
2025-05-28 10:09:06 +00:00
59475f31b3
Accepting request 1278956 from home:michael-chang:branches:Base:System
...
- Fix product name missing in snapshot list (bsc#1243162)
* grub2-snapper-plugin.sh
OBS-URL: https://build.opensuse.org/request/show/1278956
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=549
2025-05-21 06:19:49 +00:00
c144848e41
Accepting request 1278487 from home:michael-chang:branches:Base:System
...
- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
* 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
OBS-URL: https://build.opensuse.org/request/show/1278487
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=548
2025-05-20 05:11:19 +00:00
d97f1795ea
Accepting request 1276708 from home:michael-chang:branches:Base:System
...
- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
* 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
* 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
* 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
* 0004-commands-search-Add-the-diskfilter-support.patch
* 0005-docs-Document-available-crypto-disks-checks.patch
* 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
* 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
* 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
* 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
* 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
* 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
* 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
OBS-URL: https://build.opensuse.org/request/show/1276708
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=547
2025-05-12 06:38:05 +00:00
844fd48945
Accepting request 1272772 from home:AndreasStieger:branches:Base:System
...
- grub2-common: use fuse3
OBS-URL: https://build.opensuse.org/request/show/1272772
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=546
2025-04-29 07:08:25 +00:00
b6ad40fd79
Accepting request 1272997 from home:michael-chang:branches:Base:System
...
Correct patch file name in previous SR.
OBS-URL: https://build.opensuse.org/request/show/1272997
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=545
2025-04-28 03:55:36 +00:00
d435d95545
Accepting request 1272172 from home:dspinella:branches:Base:System
...
- Add support for boot assessment, needed by health-checker
* grub2-bls-boot-counting.patch
* grub2-bls-boot-assessment.patch
* grub2-bls-show-snapshot.patch
* grub2-blscfg-fix-hang.patch
* grub2-blscfg-set-efivars.patch
OBS-URL: https://build.opensuse.org/request/show/1272172
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=544
2025-04-28 03:48:46 +00:00
493b3fb100
Accepting request 1272113 from home:michael-chang:branches:Base:System
...
- Fix reading bls fragments in file-system dependent order that is not
predictable (bsc#1241046)
* 0001-blscfg-read-fragments-in-order.patch
OBS-URL: https://build.opensuse.org/request/show/1272113
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=543
2025-04-23 10:30:12 +00:00
c1e21ed05f
Accepting request 1272092 from home:michael-chang:branches:Base:System
...
- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
* 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
OBS-URL: https://build.opensuse.org/request/show/1272092
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=542
2025-04-23 08:57:39 +00:00
8bdddbd533
Accepting request 1269483 from home:hsk17:branches:Base:System
...
add grub2-string-initializer.patch, part of upstream gnulib patch, to fix gcc15 compile time error (bsc#1239884)
OBS-URL: https://build.opensuse.org/request/show/1269483
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=541
2025-04-16 00:31:16 +00:00
2166c363e3
Accepting request 1268566 from home:gary_lin:branches:Base:System
...
- Measure the envblk used by pre_loadenv
* 0001-prep_loadenv-Measure-the-environment-block-into-PCR-.patch
- Enable PowerPC 64 support for tss2 and tpm2_key_protector
* 0001-tpm2_key_protector-Add-grub-emu-support.patch
* 0001-tss2-Adjust-bit-fields-for-big-endian-targets.patch
* 0002-term-ieee1275-serial-Cast-0-to-proper-type.patch
* 0003-ieee1275-Consolidate-repeated-definitions-of-IEEE127.patch
* 0004-ieee1275-ibmvpm-Move-TPM-initialization-functions-to.patch
* 0005-ieee1275-tcg2-Refactor-grub_ieee1275_tpm_init.patch
* 0006-ieee1275-tcg2-Add-TCG2-driver-for-ieee1275-PowerPC-f.patch
* 0007-tpm2_key_protector-Enable-build-for-powerpc_ieee1275.patch
- Dump PCRs when TPM unsealing fails
* 0001-tpm2_key_protector-Dump-PCRs-on-policy-fail.patch
* 0002-tpm2_key_protector-Add-tpm2_dump_pcr-command.patch
- Add 'NV index' handle support to tpm2_key_protector
* 0003-tss2-Fix-the-missing-authCommand.patch
* 0004-tss2-Add-TPM-2.0-NV-index-commands.patch
* 0005-tpm2_key_protector-Unseal-key-from-a-buffer.patch
* 0006-tpm2_key_protector-Support-NV-index-handles.patch
* 0007-util-grub-protect-Support-NV-index-mode.patch
OBS-URL: https://build.opensuse.org/request/show/1268566
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=540
2025-04-15 04:10:27 +00:00
b964fe2b84
Accepting request 1267167 from home:tdz:branches:Base:System
...
We currently use simpledrm for early graphics on PCs. As you mention, we set gfxpayload in Grub to forward information about the system's framebuffer to the kernel. Simpledrm picks up the framebuffer for displaying graphics.
The driver is good enough for the job, we can do better on platforms with EFI or VESA graphics. There are currently two drivers under review at https://patchwork.freedesktop.org/series/146477/ . I expect them to enter upstream in v6.16. These drivers can use the EDID data provided by EFI and VESA interfaces. This allows user space, such as Gnome, to pick up information about the output device. On vesadrm, Gnome even supports gamma correction.
With EFI systems, we'll fetch the EDID during the kernel's early boot stages. On VESA systems, we need the EDID information being passed on from Grub. The gfxpayload options only forwards information about the framebuffer itself (size, colors, memory address), but not information about the display device.
To our advantage, the kernel already contains real-mode code for fetching the VESA EDID; see https://elixir.bootlin.com/linux/v6.13.7/source/arch/x86/boot/video-vesa.c#L236 . Hence there's already the edid_info field in the boot parameters. But this code only runs when booting with Grub's 'linux16' (or old LILO). Modern Grub never utilized the field or provided the EDID information at all. That's what this patch implements.
I've opened bsc#1240624 to track the progress of this project.
- Add grub2-provide-edid.patch: Grub2 already retrieves the EDID
from video adapters. Copy the raw data into the Linux kernel boot
parameters, so that Linux can use this information. The necessary
fields have been present in the boot parameters since at least
commit f8eeaaf41803 ("[PATCH] Make the bzImage format
self-terminating"), but never used. Within the kernel, the EDID
data will be propagated to graphics drivers and finally to user
space. (bsc#1240624)
OBS-URL: https://build.opensuse.org/request/show/1267167
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=539
2025-04-08 07:19:13 +00:00
daa4a74e29
Accepting request 1256390 from home:michael-chang:branches:Base:System
...
- Fix grub-bls has broken builtin theme for SLE (bsc#1240090)
OBS-URL: https://build.opensuse.org/request/show/1256390
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=538
2025-03-31 05:05:17 +00:00
31be5a7ac8
Accepting request 1254935 from home:gary_lin:branches:Base:System
...
- Filter out the non-subvolume btrfs mount points when creating the
relative path (bsc#1239674)
* grub2-btrfs-filter-non-subvol-mount.patch
OBS-URL: https://build.opensuse.org/request/show/1254935
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=537
2025-03-24 08:00:24 +00:00
6a2cb42c97
Accepting request 1254013 from home:michael-chang:branches:Base:System
...
- Refresh PPC NVMEoF ofpath related patches to newer revision
* 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
* 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obseleted
* 0004-ofpath-controller-name-update.patch
* 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
(bsc#1235971) (bsc#1235958) (bsc#1239651)
* 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch
OBS-URL: https://build.opensuse.org/request/show/1254013
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=536
2025-03-18 07:53:16 +00:00
ac1670cda5
Accepting request 1252651 from home:gary_lin:branches:Base:System
...
- Update the patch to fix "SRK not matched" errors when unsealing
the key (bsc#1232411)
* 0001-tpm2-Add-extra-RSA-SRK-types.patch
OBS-URL: https://build.opensuse.org/request/show/1252651
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=535
2025-03-14 05:04:04 +00:00
0cca6ca565
Accepting request 1252188 from home:michael-chang:branches:Base:System
...
- Update patches for Power guest secure boot with key management (jsc#PED-3520)
(jsc#PED-9892)
* 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
* 0002-ieee1275-Platform-Keystore-PKS-Support.patch
* 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
* 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
* 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
* 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
* 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
* 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
* 0009-appendedsig-documentation.patch
- Remove patches
* 0001-ieee1275-Platform-Keystore-PKS-Support.patch
* 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
* 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
* 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
* 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
* 0006-appendedsig-documentation.patch
OBS-URL: https://build.opensuse.org/request/show/1252188
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=534
2025-03-12 04:31:40 +00:00
Raymund Will
dc7dff96a4
Accepting request 1251170 from home:michael-chang:branches:Base:System
...
- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
* 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch
- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
* 0001-autofs-Ignore-zfs-not-found.patch
OBS-URL: https://build.opensuse.org/request/show/1251170
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=532
2025-03-07 12:31:37 +00:00
72d39f0c2a
Accepting request 1249586 from home:michael-chang:branches:Base:System
...
- Cherry-pick upstream XFS fixes
* 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
* 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
* 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch
OBS-URL: https://build.opensuse.org/request/show/1249586
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=531
2025-03-03 05:07:03 +00:00
accc69b5ef
Accepting request 1248262 from home:michael-chang:branches:Base:System
...
- Make SLFO/SLE-16 and openSUSE have identical package structures
- Provide grub2-<CPUARCH>-efi-bls for SLFO/SLE-16
OBS-URL: https://build.opensuse.org/request/show/1248262
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=530
2025-02-25 03:51:07 +00:00
ce712167dc
Accepting request 1247513 from home:michael-chang:branches:Base:System
...
- Fix grub-bls does not rollback via setting new default (bsc#1237198)
* 0001-bls-Accept-.conf-suffix-in-setting-default-entry.patch
OBS-URL: https://build.opensuse.org/request/show/1247513
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=529
2025-02-21 08:55:11 +00:00
0c7966e55c
Accepting request 1246819 from home:michael-chang:branches:Base:System
...
- Security fixes for 2024
* 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
* 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
* 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
* 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
* 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
* 0006-kern-file-Ensure-file-data-is-set.patch
* 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
* 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
* 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
* 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
* 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
* 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
* 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
* 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
* 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
OBS-URL: https://build.opensuse.org/request/show/1246819
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=528
2025-02-19 01:23:28 +00:00
f91126e9bb
Accepting request 1245717 from home:michael-chang:branches:Base:System
...
- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
* 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch
OBS-URL: https://build.opensuse.org/request/show/1245717
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=527
2025-02-14 03:29:15 +00:00
a70b02c459
Accepting request 1229182 from home:michael-chang:branches:Base:System
...
- Update PowerPC SBAT patches to upstream (bsc#1233730)
* 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
* 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
* 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
* 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch
- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)
OBS-URL: https://build.opensuse.org/request/show/1229182
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=526
2024-12-09 03:05:05 +00:00
37a59ccb76
Accepting request 1227921 from home:gary_lin:branches:Base:System
...
- Update the TPM2 patches to the upstream final version
* Update 0001-key_protector-Add-key-protectors-framework.patch
* Replace 0002-tpm2-Add-TPM-Software-Stack-TSS.patch with
grub2-add-tss2-support.patch
* Replace 0003-key_protector-Add-TPM2-Key-Protector.patch with
0001-key_protector-Add-TPM2-Key-Protector.patch
* Replace 0005-util-grub-protect-Add-new-tool.patch with
0001-util-grub-protect-Add-new-tool.patch
* Replace 0001-tpm2-Implement-NV-index.patch with
0001-tpm2_key_protector-Implement-NV-index.patch
* Replace 0001-tpm2-Support-authorized-policy.patch with
0001-tpm2_key_protector-Support-authorized-policy.patch
- Refresh the TPM2 related patches
* grub-read-pcr.patch
* 0001-tpm2-Add-extra-RSA-SRK-types.patch
* grub2-bsc1220338-key_protector-implement-the-blocklist.patch
* safe_tpm_pcr_snapshot.patch
* tpm-record-pcrs.patch
OBS-URL: https://build.opensuse.org/request/show/1227921
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=525
2024-12-04 03:59:01 +00:00
