pool/grub2
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
456 Commits 2 Branches 0 Tags 31 MiB
39ef9c79b7
Commit Graph

369 Commits

Author SHA256 Message Date
Michael Chang
7c44841cbf Accepting request 1071405 from home:rwill:branches:Base:System 
Add support for UsrMerged kernels. (bsc#1184804)

OBS-URL: https://build.opensuse.org/request/show/1071405
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=444
 2023-03-15 09:43:19 +00:00
Michael Chang
d9083613d3 Accepting request 1071066 from home:michael-chang:branches:Base:System 
- Discard cached key from grub shell and editor mode
  * 0001-clean-up-crypttab-and-linux-modules-dependency.patch
  * 0002-discard-cached-key-before-entering-grub-shell-and-ed.patch

- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch

OBS-URL: https://build.opensuse.org/request/show/1071066
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=443
 2023-03-13 10:05:13 +00:00
Michael Chang
f6a335c91f Accepting request 1068350 from home:michael-chang:branches:Base:System 
- Fix riscv64 error for relocation 0x13 is not implemented yet
  * 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch

OBS-URL: https://build.opensuse.org/request/show/1068350
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=442
 2023-03-06 06:07:30 +00:00
Michael Chang
23aa9ce4c5 Accepting request 1067109 from home:michael-chang:branches:Base:System 
- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch
- Rediff
  * safe_tpm_pcr_snapshot.patch
- Patch supersceded
  * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch

OBS-URL: https://build.opensuse.org/request/show/1067109
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=441
 2023-02-24 05:42:16 +00:00
Michael Chang
e99fcd8544 Accepting request 1065383 from home:vlefebvre:unified 
Patch to add some efi varibales needed for efi partition as for Unified Kernel Image

OBS-URL: https://build.opensuse.org/request/show/1065383
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=439
 2023-02-14 07:57:34 +00:00
Gary Ching-Pang Lin
7ad3520153 Accepting request 1063960 from home:gary_lin:tpm2-unseal 
- Amend the TPM2 stack and add authorized policy mode to tpm2_key_protector

OBS-URL: https://build.opensuse.org/request/show/1063960
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=438
 2023-02-09 08:57:28 +00:00
Michael Chang
f461fa520e Accepting request 1063713 from home:michael-chang:branches:Base:System 
- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch

OBS-URL: https://build.opensuse.org/request/show/1063713
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=437
 2023-02-08 05:32:33 +00:00
Michael Chang
a7b06b9f1a Accepting request 1063542 from home:michael-chang:branches:Base:System 
- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch

- Fix GCC 13 build failure (bsc#1201089)
  * 0002-AUDIT-0-http-boot-tracker-bug.patch

OBS-URL: https://build.opensuse.org/request/show/1063542
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=436
 2023-02-07 07:20:35 +00:00
Michael Chang
cb476353d0 Accepting request 1046402 from home:gary_lin:branches:Base:System 
- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)

OBS-URL: https://build.opensuse.org/request/show/1046402
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=435
 2023-01-06 02:48:00 +00:00
Michael Chang
ef0ef13ff0 Accepting request 1045798 from home:michael-chang:branches:Base:System 
- Fix inappropriately including commented lines in crypttab (bsc#1206279)
  * 0010-templates-import-etc-crypttab-to-grub.cfg.patch

- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch

OBS-URL: https://build.opensuse.org/request/show/1045798
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=434
 2023-01-03 02:35:16 +00:00
Marcus Meissner
7db9c91d3c Accepting request 1043840 from home:michael-chang:branches:Base:System 
- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch

OBS-URL: https://build.opensuse.org/request/show/1043840
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=433
 2022-12-20 15:32:08 +00:00
Michael Chang
4f37c09e47 Accepting request 1043245 from home:gary_lin:bsc1206333 
- Increase the path buffer in the crypttab command for the long
  volume name (bsc#1206333)
  * grub2-increase-crypttab-path-buffer.patch

OBS-URL: https://build.opensuse.org/request/show/1043245
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=432
 2022-12-19 03:45:35 +00:00
Gary Ching-Pang Lin
56f10d0ce0 Accepting request 1042243 from Base:System 
Revert the zfs change for now

OBS-URL: https://build.opensuse.org/request/show/1042243
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=431
 2022-12-12 05:41:30 +00:00
Gary Ching-Pang Lin
7a7c298814 Accepting request 1041797 from home:gary_lin:branches:Base:System 
Move unsupported zfs modules into 'extras' packages (bsc#1205554)

OBS-URL: https://build.opensuse.org/request/show/1041797
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=430
 2022-12-09 08:55:31 +00:00
Michael Chang
b8a9f2473e Accepting request 1040499 from home:michael-chang:branches:Base:System 
- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912) 
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch

OBS-URL: https://build.opensuse.org/request/show/1040499
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=429
 2022-12-06 07:49:23 +00:00
Michael Chang
46c0e0c8b7 Accepting request 1037548 from home:michael-chang:branches:Base:System 
- Make full utilization of btrfs bootloader area (bsc#1161823)
  * 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch
  * 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch
- Patch removed
  * 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch

OBS-URL: https://build.opensuse.org/request/show/1037548
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=428
 2022-11-24 03:05:20 +00:00
Michael Chang
fd4fd3a935 Accepting request 1035936 from home:michael-chang:branches:Base:System 
- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3

OBS-URL: https://build.opensuse.org/request/show/1035936
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=426
 2022-11-16 03:21:13 +00:00
Michael Chang
d3aabbf763 Accepting request 1035607 from home:michael-chang:branches:Base:System 
- Removed 0001-linux-fix-efi_relocate_kernel-failure.patch as reported
  regression in some hardware being stuck in initrd loading (bsc#1205380)

- Fix password asked twice if third field in crypttab not present (bsc#1205312)
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch

OBS-URL: https://build.opensuse.org/request/show/1035607
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=425
 2022-11-14 10:33:06 +00:00
Michael Chang
61a62ea989 Accepting request 1032365 from home:michael-chang:15sp5 
- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990) 
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch
- Fix efi pcr snapshot related funtion is defined but not used on powerpc
  platform.
  * safe_tpm_pcr_snapshot.patch

OBS-URL: https://build.opensuse.org/request/show/1032365
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=424
 2022-11-01 04:59:50 +00:00
Dirk Mueller
eb7c39ad64 Accepting request 1030619 from home:michael-chang:ped:2150 
- Include loopback into signed grub2 image (jsc#PED-2150)

OBS-URL: https://build.opensuse.org/request/show/1030619
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=423
 2022-10-24 11:44:15 +00:00
Michael Chang
5912838326 Accepting request 1006353 from home:michael-chang:branches:Base:System 
- Add patch to fix kernel relocation error in low memory
  * 0001-linux-fix-efi_relocate_kernel-failure.patch

OBS-URL: https://build.opensuse.org/request/show/1006353
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=420
 2022-09-28 02:40:56 +00:00
Michael Chang
3e026f665c Accepting request 1004537 from home:gary_lin:branches:Base:System 
- Add safety measure to pcr snapshot by checking platform and tpm status
  * safe_tpm_pcr_snapshot.patch

- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch

- Add patches to dynamically allocate additional memory regions for
  EFI systems (bsc#1202438)
  * 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch
  * 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch
  * 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch
  * 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch
  * 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch
- Enlarge the default heap size and defer the disk cache
  invalidation (bsc#1202438)
  * 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch
  * 0002-mm-Defer-the-disk-cache-invalidation.patch

- Add patches for ALP FDE support
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch
  * 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch
  * 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch
  * 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch
  * 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch
  * 0008-linuxefi-Use-common-grub_initrd_load.patch
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
  * 0010-templates-import-etc-crypttab-to-grub.cfg.patch

OBS-URL: https://build.opensuse.org/request/show/1004537
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=419
 2022-09-19 06:10:23 +00:00
Michael Chang
761268d847 Accepting request 997708 from home:michael-chang:bsc:1202374 
- Fix tpm error stop tumbleweed from booting (bsc#1202374)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Patch Removed
  * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch

OBS-URL: https://build.opensuse.org/request/show/997708
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=418
 2022-08-18 09:42:06 +00:00
Michael Chang
14793c1f96 Accepting request 992180 from home:michael-chang:branches:home:michael-chang:test:tpm 
- Add tpm, tpm2, luks2 and gcry_sha512 to default grub.efi (bsc#1197625)
- Make grub-tpm.efi a symlink to grub.efi
  * grub2.spec
- Log error when tpm event log is full and continue
  * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch
- Patch superseded
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch

- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch

OBS-URL: https://build.opensuse.org/request/show/992180
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=417
 2022-08-11 10:30:46 +00:00
Michael Chang
e016790fe1 Accepting request 981228 from home:michael-chang:branches:Base:System 
- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch

OBS-URL: https://build.opensuse.org/request/show/981228
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=416
 2022-06-08 03:04:17 +00:00
Michael Chang
2d223e0f89 Accepting request 980213 from home:michael-chang:branches:Base:System 
- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch

- Fix error message in displaying help on bootable snapshot (bsc#1199609)

OBS-URL: https://build.opensuse.org/request/show/980213
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=415
 2022-06-01 06:10:34 +00:00
Dirk Mueller
db2c247b25 Accepting request 978064 from home:michael-chang:branches:Base:System 
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch
- Fix ppc64le build error for new IEEE long double ABI
  * 0001-libc-config-merge-from-glibc.patch

OBS-URL: https://build.opensuse.org/request/show/978064
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=414
 2022-05-23 06:31:10 +00:00
Michael Chang
14c89e54e6 Accepting request 972429 from home:michael-chang:branches:Base:System 
- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch

OBS-URL: https://build.opensuse.org/request/show/972429
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=413
 2022-04-25 05:04:46 +00:00
Michael Chang
1583b449d8 Accepting request 971027 from home:lnussel:branches:Base:System 
- use common SBAT values (boo#1193282)

OBS-URL: https://build.opensuse.org/request/show/971027
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=412
 2022-04-21 03:49:55 +00:00
Michael Chang
a4bd7dba38 Accepting request 962647 from home:michael-chang:branches:Base:System 
- Fix duplicated insmod part_gpt lines in grub.cfg (bsc#1197186)
  * 0001-grub-probe-Deduplicate-probed-partmap-output.patch

OBS-URL: https://build.opensuse.org/request/show/962647
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=409
 2022-03-18 12:30:44 +00:00
Michael Chang
91bf25e435 Accepting request 962324 from home:michael-chang:gcc12:grub2 
- Fix GCC 12 build failure (bsc#1196546)
  * 0001-mkimage-Fix-dangling-pointer-may-be-used-error.patch
  * 0002-Fix-Werror-array-bounds-array-subscript-0-is-outside.patch
  * 0003-reed_solomon-Fix-array-subscript-0-is-outside-array-.patch
- Revised
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch

OBS-URL: https://build.opensuse.org/request/show/962324
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=408
 2022-03-18 07:29:19 +00:00
Michael Chang
b873cb8d2f Accepting request 961057 from home:michael-chang:branches:Base:System 
- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch

- Fix riscv64 build error 
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch

- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch

- VUL-0: grub2: grub2-once uses fixed file name in /var/tmp (bsc#1190474) (CVE-2021-46705)

OBS-URL: https://build.opensuse.org/request/show/961057
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=407
 2022-03-14 06:53:06 +00:00
Michael Chang
24522d5d12 Accepting request 959762 from home:michael-chang:branches:Base:System 
- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device 
  * grub2.spec

OBS-URL: https://build.opensuse.org/request/show/959762
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=406
 2022-03-07 03:24:00 +00:00
Michael Chang
ec47fa63cf Accepting request 958738 from home:michals 
- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.

OBS-URL: https://build.opensuse.org/request/show/958738
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=405
 2022-03-04 02:14:49 +00:00
Michael Chang
0f630408b0 Accepting request 946359 from home:michael-chang:branches:Base:System 
- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch

OBS-URL: https://build.opensuse.org/request/show/946359
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=402
 2022-01-14 08:55:34 +00:00
Michael Chang
d6d145b71a Accepting request 945751 from home:michael-chang:branches:Base:System 
- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch

- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)

OBS-URL: https://build.opensuse.org/request/show/945751
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=401
 2022-01-12 07:31:19 +00:00
Michael Chang
005c99a035 Accepting request 942210 from home:michael-chang:branches:Base:System 
- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch

- Fix can't allocate initrd error (bsc#1191378) 
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch

OBS-URL: https://build.opensuse.org/request/show/942210
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=400
 2021-12-27 06:21:59 +00:00
Michael Chang
11d4e23ea8 Accepting request 936511 from home:michals 
- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch

OBS-URL: https://build.opensuse.org/request/show/936511
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=399
 2021-12-09 07:35:45 +00:00
Michael Chang
42aba3795c Accepting request 935870 from home:michael-chang:branches:Base:System 
- Fix extent not found when initramfs contains shared extents (bsc#1190982)
  * 0001-fs-btrfs-Make-extent-item-iteration-to-handle-gaps.patch

OBS-URL: https://build.opensuse.org/request/show/935870
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=398
 2021-12-06 02:44:05 +00:00
Michael Chang
fb89b0c9e2 Accepting request 931473 from home:michael-chang:bsc:1192522 
- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
  * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
  * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch

OBS-URL: https://build.opensuse.org/request/show/931473
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=397
 2021-11-16 01:06:12 +00:00
Michael Chang
da8194b45d Accepting request 928444 from home:michael-chang:branches:Base:System 
- Remove openSUSE Tumbleweed specific handling for default grub
  distributor (bsc#1191198)
- Use /usr/lib/os-release as fallback (bsc#1191196)
  * grub2-default-distributor.patch
  * grub2-check-default.sh
- VUL-0: grub2: grub2-once uses fixed file name in /var/tmp (bsc#1190474)
  * grub2-once
  * grub2-once.service
- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
  * 0001-Filter-out-POSIX-locale-for-translation.patch
- Fix error lvmid disk cannot be found after second disk added to the root
  volume group (bsc#1189874) (bsc#1071559)
  * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
- Fix error in grub installation due to unnecessary requirement to support
  excessive device for the root logical volume (bsc#1184135)
  * 0001-disk-diskfilter-Use-nodes-in-logical-volume-s-segmen.patch
- Fix regression in reading xfs v4
  *0001-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock.patch

OBS-URL: https://build.opensuse.org/request/show/928444
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=396
 2021-11-02 05:52:57 +00:00
Michael Chang
8a98abff7e Accepting request 926161 from home:favogt:branches:Base:System 
- Fix installation on usrmerged s390x

OBS-URL: https://build.opensuse.org/request/show/926161
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=395
 2021-10-21 11:18:09 +00:00
Michael Chang
7036153f34 Accepting request 917186 from home:michael-chang:branches:Base:System 
- Follow usr merge for looking up kernel config (bsc#1189782) (bsc#1190061)
  * 0001-templates-Follow-the-path-of-usr-merged-kernel-confi.patch

OBS-URL: https://build.opensuse.org/request/show/917186
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=393
 2021-09-07 03:50:12 +00:00
Michael Chang
39eeed1efc Accepting request 916104 from home:michael-chang:branches:Base:System 
- Add btrfs zstd compression on i386-pc and also make sure it won't break
  existing grub installations (bsc#1161823)
  * deleted 0001-btrfs-disable-zstd-support-for-i386-pc.patch
  * added 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch

OBS-URL: https://build.opensuse.org/request/show/916104
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=392
 2021-09-06 08:56:32 +00:00
Michael Chang
473231b79f Accepting request 915745 from home:pevik:branches:Base:System 
- Delete the author list from %description (the %description section is
  literally for package descriptions (only) these days, encoding was also
  problematic).
- Add %doc AUTHORS to get packaged that info

OBS-URL: https://build.opensuse.org/request/show/915745
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=391
 2021-09-03 05:47:20 +00:00
Michael Chang
7256c68a54 Accepting request 912419 from home:favogt:autogrub 
- Use %autosetup

OBS-URL: https://build.opensuse.org/request/show/912419
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=390
 2021-08-20 03:32:29 +00:00
Michael Chang
8704ee74b5 Accepting request 910108 from home:pevik:branches:Base:System 
- Replace grub2-use-stat-instead-of-udevadm-for-partition-lookup.patch and
  fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
  with upstream backport:
  0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch and
  0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch.

OBS-URL: https://build.opensuse.org/request/show/910108
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=388
 2021-08-05 02:21:26 +00:00
Michael Chang
a3bdb368a2 Accepting request 904721 from home:michael-chang:grub:2.06 
- Version bump to 2.06
  * rediff
    - 0001-add-support-for-UEFI-network-protocols.patch
    - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
    - 0003-Make-grub_error-more-verbose.patch
    - 0003-bootp-New-net_bootp6-command.patch
    - 0005-grub.texi-Add-net_bootp6-doument.patch
    - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
    - 0006-efi-Set-image-base-address-before-jumping-to-the-PE-.patch
    - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
    - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
    - grub-install-force-journal-draining-to-ensure-data-i.patch
    - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
    - grub2-diskfilter-support-pv-without-metadatacopies.patch
    - grub2-efi-HP-workaround.patch
    - grub2-efi-xen-cfg-unquote.patch
    - grub2-efi-xen-chainload.patch
    - grub2-fix-menu-in-xen-host-server.patch
    - grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
    - grub2-install-remove-useless-check-PReP-partition-is-empty.patch
    - grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
    - grub2-mkconfig-default-entry-correction.patch
    - grub2-pass-corret-root-for-nfsroot.patch
    - grub2-s390x-03-output-7-bit-ascii.patch
    - grub2-s390x-04-grub2-install.patch
    - grub2-secureboot-install-signed-grub.patch
    - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
    - use-grub2-as-a-package-name.patch
  * update by patch squashed:
    - 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch

OBS-URL: https://build.opensuse.org/request/show/904721
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=386
 2021-07-08 09:03:14 +00:00
Michael Chang
8548127eeb Accepting request 892145 from home:michael-chang:branches:Base:System 
- Fix plaintext password in grub config didn't work to unlock menu entry if
  enabling secure boot in UEFI (bsc#1181892)

OBS-URL: https://build.opensuse.org/request/show/892145
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=383
 2021-05-13 08:40:35 +00:00
Michael Chang
b679c30cab Accepting request 887910 from home:michael-chang:branches:Base:System 
- Fix obsolete syslog in systemd unit file and updating to use journal as
  StandardOutput (bsc#1185149) 
  * grub2-once.service

OBS-URL: https://build.opensuse.org/request/show/887910
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=382
 2021-04-23 03:44:52 +00:00
Michael Chang
fde9285bc1 Accepting request 883932 from home:michael-chang:branches:Base:System 
- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch

OBS-URL: https://build.opensuse.org/request/show/883932
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=380
 2021-04-09 06:58:33 +00:00
Michael Chang
3dabc06964 Accepting request 879335 from home:michael-chang:branches:Base:System 
- Fix powerpc-ieee1275 lpar takes long time to boot with increasing number of
  nvme namespace (bsc#1177751)
  0001-ieee1275-Avoiding-many-unecessary-open-close.patch

OBS-URL: https://build.opensuse.org/request/show/879335
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=379
 2021-03-16 05:26:13 +00:00
Michael Chang
6366cfa9e7 Accepting request 878247 from home:michael-chang:branches:Base:System 
- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch

OBS-URL: https://build.opensuse.org/request/show/878247
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=378
 2021-03-11 03:22:49 +00:00
Michael Chang
a87715017f Accepting request 877250 from home:michael-chang:branches:Base:System 
OBS-URL: https://build.opensuse.org/request/show/877250
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=377
 2021-03-05 14:26:32 +00:00
Michael Chang
0d706339c2 Accepting request 876961 from home:michael-chang:branches:Base:System 
- Fix chainloading windows on dual boot machine (bsc#1183073)

OBS-URL: https://build.opensuse.org/request/show/876961
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=375
 2021-03-05 10:56:31 +00:00
Michael Chang
be3181b1eb Accepting request 876326 from home:michael-chang:branches:Base:System 
- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch

OBS-URL: https://build.opensuse.org/request/show/876326
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=374
 2021-03-03 01:40:50 +00:00
Michael Chang
b2d62d6d4b Accepting request 874318 from home:michael-chang:branches:Base:System 
- Fix build error in binutils 2.36 (bsc#1181741)
  * 0001-Fix-build-error-in-binutils-2.36.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch

OBS-URL: https://build.opensuse.org/request/show/874318
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=373
 2021-02-23 00:58:17 +00:00
Marcus Meissner
baeaac9f95 Accepting request 873305 from home:michael-chang:branches:Base:System 
- Restore compatibilty sym-links
  * grub2.spec
- Use rpmlintrc to filter out rpmlint 2.0 error (bsc#1179044)
  * grub2.rpmlintrc

OBS-URL: https://build.opensuse.org/request/show/873305
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=372
 2021-02-18 10:15:28 +00:00
Michael Chang
31d3c4f444 Accepting request 867843 from home:michael-chang:branches:Base:System 
* 0009-squash-Add-support-for-linuxefi.patch

OBS-URL: https://build.opensuse.org/request/show/867843
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=370
 2021-01-30 05:56:02 +00:00
Michael Chang
5a314d1a22 Accepting request 867030 from home:michael-chang:branches:Base:System 
- Secure Boot support in GRUB on aarch64 (jsc#SLE-15864)
  * 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch
  * 0002-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch
  * 0003-Make-grub_error-more-verbose.patch
  * 0004-arm-arm64-loader-Better-memory-allocation-and-error-.patch
  * 0005-Make-linux_arm_kernel_header.hdr_offset-be-at-the-ri.patch
  * 0006-efi-Set-image-base-address-before-jumping-to-the-PE-.patch
  * 0007-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0008-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch

OBS-URL: https://build.opensuse.org/request/show/867030
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=369
 2021-01-27 06:11:30 +00:00
Michael Chang
18241ef23c Accepting request 866469 from home:michael-chang:branches:Base:System 
- Fix rpmlint 2.0 error for having arch specific path in noarch package aiming
  for compatibility with old package (bsc#1179044)
  * grub2.spec
- Fix non POSIX sed argument which failed in sed from busybox (bsc#1181091)
  * grub2-check-default.sh

OBS-URL: https://build.opensuse.org/request/show/866469
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=368
 2021-01-27 02:20:10 +00:00
Michael Chang
c18d8c8aff Accepting request 841761 from home:michael-chang:branches:Base:System 
- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * 0001-add-support-for-UEFI-network-protocols.patch

- grub2.spec: Fix bare words used as string in expression which is no longer
  allowed in rpm 4.16

- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch

OBS-URL: https://build.opensuse.org/request/show/841761
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=365
 2020-10-16 02:22:18 +00:00
Michael Chang
d15b812c62 Accepting request 833393 from home:michael-chang:bsc:1176134 
- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch

OBS-URL: https://build.opensuse.org/request/show/833393
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=364
 2020-09-10 08:06:48 +00:00
Michael Chang
9d81a73a54 Accepting request 829926 from home:michael-chang:branches:Base:System 
- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch

OBS-URL: https://build.opensuse.org/request/show/829926
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=363
 2020-08-28 04:34:19 +00:00
Michael Chang
67e6feecbf Accepting request 828857 from home:michael-chang:bsc:1174567 
- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch

OBS-URL: https://build.opensuse.org/request/show/828857
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=362
 2020-08-24 07:58:17 +00:00
Michael Chang
8d758b1bd2 Accepting request 828452 from home:michael-chang:branches:Base:System 
- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch

OBS-URL: https://build.opensuse.org/request/show/828452
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=361
 2020-08-21 11:29:27 +00:00
Michael Chang
575991c6e5 Accepting request 827964 from home:michael-chang:branches:Base:System 
- Fix for CVE-2020-15705 (bsc#1174421) 
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch

OBS-URL: https://build.opensuse.org/request/show/827964
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=360
 2020-08-20 03:33:06 +00:00
Michael Chang
395f4bd1a9 Accepting request 826244 from home:michael-chang:branches:Base:System 
- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036) 
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch

OBS-URL: https://build.opensuse.org/request/show/826244
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=359
 2020-08-13 09:48:00 +00:00
Michael Chang
1f5e046570 Accepting request 823469 from home:michael-chang:branches:Base:System 
- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur 
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch

OBS-URL: https://build.opensuse.org/request/show/823469
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=358
 2020-07-30 01:36:35 +00:00
Michael Chang
1f1692c67a Accepting request 821317 from home:michel_mno:branches:Base:System 
- No 95_textmode for PowerPC (boo#1174166)

OBS-URL: https://build.opensuse.org/request/show/821317
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=357
 2020-07-24 15:08:17 +00:00
Michael Chang
a306cdfe17 Accepting request 807075 from home:michael-chang:branches:Base:System 
- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch

OBS-URL: https://build.opensuse.org/request/show/807075
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=356
 2020-05-20 08:54:22 +00:00
Michael Chang
8112871606 Accepting request 800378 from home:michael-chang:branches:Base:System 
- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch

OBS-URL: https://build.opensuse.org/request/show/800378
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=355
 2020-05-06 07:01:48 +00:00
Michael Chang
a414b35cba Accepting request 794918 from home:michael-chang:branches:Base:System 
- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch

OBS-URL: https://build.opensuse.org/request/show/794918
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=354
 2020-04-17 13:45:25 +00:00
Michael Chang
a531c295e8 Accepting request 792408 from home:michael-chang:gcc10 
- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch

OBS-URL: https://build.opensuse.org/request/show/792408
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=353
 2020-04-08 11:06:35 +00:00
Michael Chang
ddf5f70a27 Accepting request 788092 from home:michael-chang:branches:Base:System 
- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch

OBS-URL: https://build.opensuse.org/request/show/788092
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=352
 2020-03-25 09:07:52 +00:00
Michael Chang
f9380bffdc Accepting request 786172 from home:lnussel:branches:Base:System 
- move *.module files to separate -debug subpackage (boo#1166578)
- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)

OBS-URL: https://build.opensuse.org/request/show/786172
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=351
 2020-03-18 13:48:10 +00:00
Michael Chang
a485ecba37 Accepting request 784214 from home:favogt:bsc1164385 
- Adjust patch to make EFI detection a runtime decision (bsc#1164385):
  * grub2-SUSE-Add-the-t-hotkey.patch

OBS-URL: https://build.opensuse.org/request/show/784214
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=348
 2020-03-12 11:58:43 +00:00
Michael Chang
e8d04bfdc9 Accepting request 783045 from home:rwill:branches:Base:System 
Add secure boot support for s390x.  (jsc#SLE-9425)

OBS-URL: https://build.opensuse.org/request/show/783045
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=347
 2020-03-10 06:21:18 +00:00
Michael Chang
6ebf4c4807 Accepting request 777567 from home:michael-chang:branches:Base:System 
- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch

OBS-URL: https://build.opensuse.org/request/show/777567
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=346
 2020-02-20 07:21:45 +00:00
Michael Chang
5a5b74dea6 Accepting request 769926 from home:michael-chang:branches:Base:System 
- From Stefan Seyfried <seife@novell.slipkontur.de> : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch

OBS-URL: https://build.opensuse.org/request/show/769926
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=345
 2020-02-06 04:53:11 +00:00
Michael Chang
5d1d201c64 Accepting request 743951 from home:michael-chang:branches:Base:System 
- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch

OBS-URL: https://build.opensuse.org/request/show/743951
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=343
 2019-10-30 07:08:31 +00:00
Michael Chang
5c5a86e543 Accepting request 741725 from home:Andreas_Schwab:Factory 
- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch

OBS-URL: https://build.opensuse.org/request/show/741725
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=341
 2019-10-23 06:00:37 +00:00
Michael Chang
62e3547e57 Accepting request 741033 from home:michael-chang:devel 
- Version bump to 2.04
  * removed
    - translations-20170427.tar.xz
  * grub2.spec
    - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
      currently shipped with tpm module from upstream codebase
    - Add shim_lock to signed grub.efi in x86_64-efi build
    - x86_64: linuxefi now depends on linux, both will verify kernel via
      shim_lock
    - Remove translation tarball and po file hacks as it's been included in
      upstream tarball
  * rediff
    - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
    - grub2-commands-introduce-read_file-subcommand.patch
    - grub2-secureboot-add-linuxefi.patch
    - 0001-add-support-for-UEFI-network-protocols.patch
    - grub2-efi-HP-workaround.patch
    - grub2-secureboot-install-signed-grub.patch
    - grub2-linux.patch
    - use-grub2-as-a-package-name.patch
    - grub2-pass-corret-root-for-nfsroot.patch
    - grub2-secureboot-use-linuxefi-on-uefi.patch
    - grub2-secureboot-no-insmod-on-sb.patch
    - grub2-secureboot-provide-linuxefi-config.patch
    - grub2-secureboot-chainloader.patch
    - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
    - grub2-s390x-02-kexec-module-added-to-emu.patch
    - grub2-s390x-04-grub2-install.patch
    - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
    - grub2-efi-chainloader-root.patch

OBS-URL: https://build.opensuse.org/request/show/741033
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=340
 2019-10-18 10:18:53 +00:00
Michael Chang
60a288108a Accepting request 716996 from home:michael-chang:branches:Base:System 
- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).

OBS-URL: https://build.opensuse.org/request/show/716996
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=337
 2019-07-19 09:55:26 +00:00
Michael Chang
6b8bc36c6d Accepting request 713147 from home:michael-chang:bsc:1136601 
- Use grub2-install to handle signed grub installation for UEFI secure
  boot and also provide options to override default (bsc#1136601)
  * grub2-secureboot-install-signed-grub.patch
- Remove arm64 linuxefi patches as it's not needed for secure boot
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch

OBS-URL: https://build.opensuse.org/request/show/713147
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=335
 2019-07-03 06:15:39 +00:00
Michael Chang
df62b2deb2 Accepting request 703735 from home:rwill:branches:Base:System 
- Check/refresh zipl-kernel before hibernate on s390x.  (bsc#940457)
  (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.)
- Try to refresh zipl-kernel on failed kexec.  (bsc#1127293)
- Fully support "previous" zipl-kernel,
  with 'mem=1G' being available on dedicated entries.  (bsc#928131)

OBS-URL: https://build.opensuse.org/request/show/703735
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=333
 2019-05-20 06:03:38 +00:00
Michael Chang
591f180452 Accepting request 700268 from home:michael-chang:branches:Base:System 
- Fix GCC 9 build failure (bsc#1121208)
  * 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  * 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  * 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  * 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  * 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  * 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  * 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  * 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch

OBS-URL: https://build.opensuse.org/request/show/700268
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=332
 2019-05-03 03:07:30 +00:00
Michael Chang
943cb82413 Accepting request 686299 from home:michael-chang:branches:Base:System 
- Use %doc for older products for compatibility, or may end up with
  unsuccessful build result
  * grub2.spec

- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on
  multipath SAN (bsc#1113702)
  * deleted grub2-ieee1275-open-raw-mode.patch
- Add exception handling to FCP lun enumeration (bsc#1113702)
  * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch

OBS-URL: https://build.opensuse.org/request/show/686299
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=331
 2019-03-19 06:52:40 +00:00
Raymund Will
9633303c76 OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=329 2019-02-14 16:35:45 +00:00
Raymund Will
00d6c5894e OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=327 2019-02-14 15:51:15 +00:00
Raymund Will
74165feb3c Accepting request 674894 from home:michael-chang:boo:1123942 
- Create compatibility sym-link of grub.xen in the old location to which
  old VM definition is pointing (boo#1123942)

OBS-URL: https://build.opensuse.org/request/show/674894
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=326
 2019-02-14 15:38:58 +00:00
Michael Chang
d55d47e08d Accepting request 668764 from home:jengelh:branches:Base:System 
- Replace old $RPM_* shell vars.

OBS-URL: https://build.opensuse.org/request/show/668764
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=325
 2019-02-12 08:10:12 +00:00
Michael Chang
2db2e060f1 Accepting request 669146 from home:Guillaume_G:branches:openSUSE:Factory:ARM 
- Add patch to fix ARM boot, when kernel become too big:
  * grub2-move-initrd-upper.patch (boo#1123350)

OBS-URL: https://build.opensuse.org/request/show/669146
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=324
 2019-01-29 07:27:11 +00:00
Michael Chang
7ca2efb407 Accepting request 668553 from home:michael-chang:fate:325760 
- Support long menu entry by scrolling its text left and right through
  the key stroke ctrl+l and ctrl+r (FATE#325760) 
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch

OBS-URL: https://build.opensuse.org/request/show/668553
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=323
 2019-01-25 09:33:40 +00:00
Michael Chang
16ae4afbe8 Accepting request 668263 from home:michael-chang:branches:Base:System 
- Improved hiDPI device support (FATE#326680)
  * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch

OBS-URL: https://build.opensuse.org/request/show/668263
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=322
 2019-01-24 10:05:22 +00:00
Michael Chang
eac2d99699 Accepting request 667984 from home:rwill:branches:Base:System 
- Build platform-packages 'noarch' and move to '/usr/share/efi'
  for SUSE Manager.  (FATE#326960)
  * grub2-efi-xen-chainload.patch (bsc#1122563)
  * grub2-efi-xen-removable.patch (refresh)

OBS-URL: https://build.opensuse.org/request/show/667984
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=321
 2019-01-23 11:53:47 +00:00
Michael Chang
0aca94611d Accepting request 664316 from home:rwill:branches:Base:System 
Build platform-packages 'noarch' for SUSE Manager.  (FATE#326960)
With spec-file cleanup and and attempt to fix SLE11SP4.

OBS-URL: https://build.opensuse.org/request/show/664316
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=320
 2019-01-10 09:57:18 +00:00
Michael Chang
992b86f38f Accepting request 660470 from home:michael-chang:branches:Base:System 
- Support for UEFI Secure Boot on AArch64 (FATE#326541)
  * 0001-efi-refactor-grub_efi_allocate_pages.patch
  * 0002-Remove-grub_efi_allocate_pages.patch
  * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
  * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
  * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
  * 0006-Add-support-for-EFI-handover-on-ARM64.patch

OBS-URL: https://build.opensuse.org/request/show/660470
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=319
 2018-12-21 08:21:48 +00:00
Michael Chang
f13c0d44cf Accepting request 651963 from home:michael-chang:branches:Base:System 
- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
  * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch

- ieee1275: Fix double free in CAS reboot (bsc#1111955)
  * grub2-ppc64-cas-fix-double-free.patch

OBS-URL: https://build.opensuse.org/request/show/651963
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=318
 2018-11-26 09:10:43 +00:00
Michael Chang
209e8b508d Accepting request 639870 from home:gary_lin:branches:Base:System 
Support NVDIMM device names (bsc#1110073)

OBS-URL: https://build.opensuse.org/request/show/639870
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=317
 2018-10-04 07:19:50 +00:00