rpm/grub2
SHA256
1
0
Fork 0
forked from pool/grub2
Code Pull Requests Activity
368 Commits 2 Branches 0 Tags 30 MiB
3e026f665c
Commit Graph

368 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Michael Chang
3e026f665c Accepting request 1004537 from home:gary_lin:branches:Base:System 
- Add safety measure to pcr snapshot by checking platform and tpm status
  * safe_tpm_pcr_snapshot.patch

- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch

- Add patches to dynamically allocate additional memory regions for
  EFI systems (bsc#1202438)
  * 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch
  * 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch
  * 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch
  * 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch
  * 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch
- Enlarge the default heap size and defer the disk cache
  invalidation (bsc#1202438)
  * 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch
  * 0002-mm-Defer-the-disk-cache-invalidation.patch

- Add patches for ALP FDE support
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch
  * 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch
  * 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch
  * 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch
  * 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch
  * 0008-linuxefi-Use-common-grub_initrd_load.patch
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
  * 0010-templates-import-etc-crypttab-to-grub.cfg.patch

OBS-URL: https://build.opensuse.org/request/show/1004537
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=419
 2022-09-19 06:10:23 +00:00
Michael Chang
761268d847 Accepting request 997708 from home:michael-chang:bsc:1202374 
- Fix tpm error stop tumbleweed from booting (bsc#1202374)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Patch Removed
  * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch

OBS-URL: https://build.opensuse.org/request/show/997708
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=418
 2022-08-18 09:42:06 +00:00
Michael Chang
14793c1f96 Accepting request 992180 from home:michael-chang:branches:home:michael-chang:test:tpm 
- Add tpm, tpm2, luks2 and gcry_sha512 to default grub.efi (bsc#1197625)
- Make grub-tpm.efi a symlink to grub.efi
  * grub2.spec
- Log error when tpm event log is full and continue
  * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch
- Patch superseded
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch

- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch

OBS-URL: https://build.opensuse.org/request/show/992180
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=417
 2022-08-11 10:30:46 +00:00
Michael Chang
e016790fe1 Accepting request 981228 from home:michael-chang:branches:Base:System 
- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch

OBS-URL: https://build.opensuse.org/request/show/981228
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=416
 2022-06-08 03:04:17 +00:00
Michael Chang
2d223e0f89 Accepting request 980213 from home:michael-chang:branches:Base:System 
- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch

- Fix error message in displaying help on bootable snapshot (bsc#1199609)

OBS-URL: https://build.opensuse.org/request/show/980213
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=415
 2022-06-01 06:10:34 +00:00
Dirk Mueller
db2c247b25 Accepting request 978064 from home:michael-chang:branches:Base:System 
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch
- Fix ppc64le build error for new IEEE long double ABI
  * 0001-libc-config-merge-from-glibc.patch

OBS-URL: https://build.opensuse.org/request/show/978064
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=414
 2022-05-23 06:31:10 +00:00
Michael Chang
14c89e54e6 Accepting request 972429 from home:michael-chang:branches:Base:System 
- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch

OBS-URL: https://build.opensuse.org/request/show/972429
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=413
 2022-04-25 05:04:46 +00:00
Michael Chang
1583b449d8 Accepting request 971027 from home:lnussel:branches:Base:System 
- use common SBAT values (boo#1193282)

OBS-URL: https://build.opensuse.org/request/show/971027
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=412
 2022-04-21 03:49:55 +00:00
Michael Chang
74d4a644bb Accepting request 965514 from home:michael-chang:branches:Base:System 
Add missing patch in changelog

OBS-URL: https://build.opensuse.org/request/show/965514
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=411
 2022-03-29 04:27:55 +00:00
Michael Chang
ede0f18d2b Accepting request 964777 from home:michael-chang:branches:Base:System 
- Fix wrong order in kernel sorting of listing rc before final release
  (bsc#1197376)

OBS-URL: https://build.opensuse.org/request/show/964777
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=410
 2022-03-29 04:20:08 +00:00
Michael Chang
a4bd7dba38 Accepting request 962647 from home:michael-chang:branches:Base:System 
- Fix duplicated insmod part_gpt lines in grub.cfg (bsc#1197186)
  * 0001-grub-probe-Deduplicate-probed-partmap-output.patch

OBS-URL: https://build.opensuse.org/request/show/962647
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=409
 2022-03-18 12:30:44 +00:00
Michael Chang
91bf25e435 Accepting request 962324 from home:michael-chang:gcc12:grub2 
- Fix GCC 12 build failure (bsc#1196546)
  * 0001-mkimage-Fix-dangling-pointer-may-be-used-error.patch
  * 0002-Fix-Werror-array-bounds-array-subscript-0-is-outside.patch
  * 0003-reed_solomon-Fix-array-subscript-0-is-outside-array-.patch
- Revised
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch

OBS-URL: https://build.opensuse.org/request/show/962324
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=408
 2022-03-18 07:29:19 +00:00
Michael Chang
b873cb8d2f Accepting request 961057 from home:michael-chang:branches:Base:System 
- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch

- Fix riscv64 build error 
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch

- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch

- VUL-0: grub2: grub2-once uses fixed file name in /var/tmp (bsc#1190474) (CVE-2021-46705)

OBS-URL: https://build.opensuse.org/request/show/961057
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=407
 2022-03-14 06:53:06 +00:00
Michael Chang
24522d5d12 Accepting request 959762 from home:michael-chang:branches:Base:System 
- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device 
  * grub2.spec

OBS-URL: https://build.opensuse.org/request/show/959762
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=406
 2022-03-07 03:24:00 +00:00
Michael Chang
ec47fa63cf Accepting request 958738 from home:michals 
- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.

OBS-URL: https://build.opensuse.org/request/show/958738
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=405
 2022-03-04 02:14:49 +00:00
Michael Chang
c8d45660b1 Accepting request 953265 from home:iznogood:branches:Base:System 
- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).

OBS-URL: https://build.opensuse.org/request/show/953265
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=404
 2022-02-14 03:49:47 +00:00
Michael Chang
da02c891ad Accepting request 947913 from home:michael-chang:bsc:1159205 
- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch

OBS-URL: https://build.opensuse.org/request/show/947913
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=403
 2022-01-25 06:00:36 +00:00
Michael Chang
0f630408b0 Accepting request 946359 from home:michael-chang:branches:Base:System 
- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch

OBS-URL: https://build.opensuse.org/request/show/946359
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=402
 2022-01-14 08:55:34 +00:00
Michael Chang
d6d145b71a Accepting request 945751 from home:michael-chang:branches:Base:System 
- Power guest secure boot with static keys: GRUB2 signing portion
  (jsc#SLE-18271) (bsc#1192764)
  * grub2.spec
- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144)
  (bsc#1192686)
  * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
  * 0002-ieee1275-claim-more-memory.patch
  * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
  * 0021-appended-signatures-documentation.patch
  * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch

- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)

OBS-URL: https://build.opensuse.org/request/show/945751
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=401
 2022-01-12 07:31:19 +00:00
Michael Chang
005c99a035 Accepting request 942210 from home:michael-chang:branches:Base:System 
- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch

- Fix can't allocate initrd error (bsc#1191378) 
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch

OBS-URL: https://build.opensuse.org/request/show/942210
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=400
 2021-12-27 06:21:59 +00:00
Michael Chang
11d4e23ea8 Accepting request 936511 from home:michals 
- Add support for simplefb (boo#1193532).
  + grub2-simplefb.patch

OBS-URL: https://build.opensuse.org/request/show/936511
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=399
 2021-12-09 07:35:45 +00:00
Michael Chang
42aba3795c Accepting request 935870 from home:michael-chang:branches:Base:System 
- Fix extent not found when initramfs contains shared extents (bsc#1190982)
  * 0001-fs-btrfs-Make-extent-item-iteration-to-handle-gaps.patch

OBS-URL: https://build.opensuse.org/request/show/935870
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=398
 2021-12-06 02:44:05 +00:00
Michael Chang
fb89b0c9e2 Accepting request 931473 from home:michael-chang:bsc:1192522 
- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
  * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
  * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch

OBS-URL: https://build.opensuse.org/request/show/931473
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=397
 2021-11-16 01:06:12 +00:00
Michael Chang
da8194b45d Accepting request 928444 from home:michael-chang:branches:Base:System 
- Remove openSUSE Tumbleweed specific handling for default grub
  distributor (bsc#1191198)
- Use /usr/lib/os-release as fallback (bsc#1191196)
  * grub2-default-distributor.patch
  * grub2-check-default.sh
- VUL-0: grub2: grub2-once uses fixed file name in /var/tmp (bsc#1190474)
  * grub2-once
  * grub2-once.service
- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
  * 0001-Filter-out-POSIX-locale-for-translation.patch
- Fix error lvmid disk cannot be found after second disk added to the root
  volume group (bsc#1189874) (bsc#1071559)
  * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
- Fix error in grub installation due to unnecessary requirement to support
  excessive device for the root logical volume (bsc#1184135)
  * 0001-disk-diskfilter-Use-nodes-in-logical-volume-s-segmen.patch
- Fix regression in reading xfs v4
  *0001-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock.patch

OBS-URL: https://build.opensuse.org/request/show/928444
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=396
 2021-11-02 05:52:57 +00:00
Michael Chang
8a98abff7e Accepting request 926161 from home:favogt:branches:Base:System 
- Fix installation on usrmerged s390x

OBS-URL: https://build.opensuse.org/request/show/926161
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=395
 2021-10-21 11:18:09 +00:00
Michael Chang
811b0187b3 Accepting request 921173 from home:rwill:branches:Base:System 
Improve support for SLE Micro 5.1 on s390x.  (bsc#1190395)

OBS-URL: https://build.opensuse.org/request/show/921173
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=394
 2021-09-24 01:32:57 +00:00
Michael Chang
7036153f34 Accepting request 917186 from home:michael-chang:branches:Base:System 
- Follow usr merge for looking up kernel config (bsc#1189782) (bsc#1190061)
  * 0001-templates-Follow-the-path-of-usr-merged-kernel-confi.patch

OBS-URL: https://build.opensuse.org/request/show/917186
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=393
 2021-09-07 03:50:12 +00:00
Michael Chang
39eeed1efc Accepting request 916104 from home:michael-chang:branches:Base:System 
- Add btrfs zstd compression on i386-pc and also make sure it won't break
  existing grub installations (bsc#1161823)
  * deleted 0001-btrfs-disable-zstd-support-for-i386-pc.patch
  * added 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch

OBS-URL: https://build.opensuse.org/request/show/916104
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=392
 2021-09-06 08:56:32 +00:00
Michael Chang
473231b79f Accepting request 915745 from home:pevik:branches:Base:System 
- Delete the author list from %description (the %description section is
  literally for package descriptions (only) these days, encoding was also
  problematic).
- Add %doc AUTHORS to get packaged that info

OBS-URL: https://build.opensuse.org/request/show/915745
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=391
 2021-09-03 05:47:20 +00:00
Michael Chang
7256c68a54 Accepting request 912419 from home:favogt:autogrub 
- Use %autosetup

OBS-URL: https://build.opensuse.org/request/show/912419
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=390
 2021-08-20 03:32:29 +00:00
Michael Chang
22ae84ab72 Accepting request 910700 from home:seife:branches:Base:System 
update grub2-systemd-sleep.sh to fix hibernation

OBS-URL: https://build.opensuse.org/request/show/910700
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=389
 2021-08-09 06:59:04 +00:00
Michael Chang
8704ee74b5 Accepting request 910108 from home:pevik:branches:Base:System 
- Replace grub2-use-stat-instead-of-udevadm-for-partition-lookup.patch and
  fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch
  with upstream backport:
  0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch and
  0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch.

OBS-URL: https://build.opensuse.org/request/show/910108
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=388
 2021-08-05 02:21:26 +00:00
Michael Chang
8c8da55daa Accepting request 906622 from home:michael-chang:branches:Base:System 
- Fix error not a btrfs filesystem on s390x (bsc#1187645)
  * 80_suse_btrfs_snapshot

- Fix error gfxterm isn't found with multiple terminals (bsc#1187565)
  * grub2-fix-error-terminal-gfxterm-isn-t-found.patch

- Fix boot failure after kdump due to the content of grub.cfg is not
  completed with pending modificaton in xfs journal (bsc#1186975)
  * grub-install-force-journal-draining-to-ensure-data-i.patch
- Patch refreshed
  * grub2-mkconfig-default-entry-correction.patch

OBS-URL: https://build.opensuse.org/request/show/906622
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=387
 2021-07-16 08:23:34 +00:00
Michael Chang
a3bdb368a2 Accepting request 904721 from home:michael-chang:grub:2.06 
- Version bump to 2.06
  * rediff
    - 0001-add-support-for-UEFI-network-protocols.patch
    - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
    - 0003-Make-grub_error-more-verbose.patch
    - 0003-bootp-New-net_bootp6-command.patch
    - 0005-grub.texi-Add-net_bootp6-doument.patch
    - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
    - 0006-efi-Set-image-base-address-before-jumping-to-the-PE-.patch
    - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
    - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
    - grub-install-force-journal-draining-to-ensure-data-i.patch
    - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
    - grub2-diskfilter-support-pv-without-metadatacopies.patch
    - grub2-efi-HP-workaround.patch
    - grub2-efi-xen-cfg-unquote.patch
    - grub2-efi-xen-chainload.patch
    - grub2-fix-menu-in-xen-host-server.patch
    - grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
    - grub2-install-remove-useless-check-PReP-partition-is-empty.patch
    - grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
    - grub2-mkconfig-default-entry-correction.patch
    - grub2-pass-corret-root-for-nfsroot.patch
    - grub2-s390x-03-output-7-bit-ascii.patch
    - grub2-s390x-04-grub2-install.patch
    - grub2-secureboot-install-signed-grub.patch
    - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
    - use-grub2-as-a-package-name.patch
  * update by patch squashed:
    - 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch

OBS-URL: https://build.opensuse.org/request/show/904721
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=386
 2021-07-08 09:03:14 +00:00
Michael Chang
a79c01f92a Accepting request 898233 from home:michael-chang:branches:Base:System 
- Fix running grub2-once leads to failure of starting systemd service in the
  boot sequence (bsc#1169460)
  * grub2-once
  * grub2-once.service

OBS-URL: https://build.opensuse.org/request/show/898233
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=385
 2021-06-08 05:13:58 +00:00
Marcus Meissner
c1df6c7a1f Accepting request 896666 from home:michael-chang:branches:Base:System 
- Fix crash in launching gfxmenu without theme file (bsc#1186481)
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch

OBS-URL: https://build.opensuse.org/request/show/896666
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=384
 2021-06-02 11:26:04 +00:00
Michael Chang
8548127eeb Accepting request 892145 from home:michael-chang:branches:Base:System 
- Fix plaintext password in grub config didn't work to unlock menu entry if
  enabling secure boot in UEFI (bsc#1181892)

OBS-URL: https://build.opensuse.org/request/show/892145
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=383
 2021-05-13 08:40:35 +00:00
Michael Chang
b679c30cab Accepting request 887910 from home:michael-chang:branches:Base:System 
- Fix obsolete syslog in systemd unit file and updating to use journal as
  StandardOutput (bsc#1185149) 
  * grub2-once.service

OBS-URL: https://build.opensuse.org/request/show/887910
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=382
 2021-04-23 03:44:52 +00:00
Michael Chang
f58f445591 Accepting request 886638 from home:michael-chang:branches:Base:System 
- Fix build error on armv6/armv7 (bsc#1184712)
  * 0001-emu-fix-executable-stack-marking.patch

OBS-URL: https://build.opensuse.org/request/show/886638
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=381
 2021-04-21 09:28:04 +00:00
Michael Chang
fde9285bc1 Accepting request 883932 from home:michael-chang:branches:Base:System 
- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch

OBS-URL: https://build.opensuse.org/request/show/883932
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=380
 2021-04-09 06:58:33 +00:00
Michael Chang
3dabc06964 Accepting request 879335 from home:michael-chang:branches:Base:System 
- Fix powerpc-ieee1275 lpar takes long time to boot with increasing number of
  nvme namespace (bsc#1177751)
  0001-ieee1275-Avoiding-many-unecessary-open-close.patch

OBS-URL: https://build.opensuse.org/request/show/879335
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=379
 2021-03-16 05:26:13 +00:00
Michael Chang
6366cfa9e7 Accepting request 878247 from home:michael-chang:branches:Base:System 
- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch

OBS-URL: https://build.opensuse.org/request/show/878247
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=378
 2021-03-11 03:22:49 +00:00
Michael Chang
a87715017f Accepting request 877250 from home:michael-chang:branches:Base:System 
OBS-URL: https://build.opensuse.org/request/show/877250
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=377
 2021-03-05 14:26:32 +00:00
Michael Chang
dd1ea87966 Accepting request 876985 from home:michael-chang:branches:Base:System 
* 0001-Add-chainloaded-image-as-shim-s-verifiable-object.patch

OBS-URL: https://build.opensuse.org/request/show/876985
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=376
 2021-03-05 11:35:40 +00:00
Michael Chang
0d706339c2 Accepting request 876961 from home:michael-chang:branches:Base:System 
- Fix chainloading windows on dual boot machine (bsc#1183073)

OBS-URL: https://build.opensuse.org/request/show/876961
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=375
 2021-03-05 10:56:31 +00:00
Michael Chang
be3181b1eb Accepting request 876326 from home:michael-chang:branches:Base:System 
- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch

OBS-URL: https://build.opensuse.org/request/show/876326
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=374
 2021-03-03 01:40:50 +00:00
Michael Chang
b2d62d6d4b Accepting request 874318 from home:michael-chang:branches:Base:System 
- Fix build error in binutils 2.36 (bsc#1181741)
  * 0001-Fix-build-error-in-binutils-2.36.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch

OBS-URL: https://build.opensuse.org/request/show/874318
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=373
 2021-02-23 00:58:17 +00:00
Marcus Meissner
baeaac9f95 Accepting request 873305 from home:michael-chang:branches:Base:System 
- Restore compatibilty sym-links
  * grub2.spec
- Use rpmlintrc to filter out rpmlint 2.0 error (bsc#1179044)
  * grub2.rpmlintrc

OBS-URL: https://build.opensuse.org/request/show/873305
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=372
 2021-02-18 10:15:28 +00:00
Michael Chang
1b8abe9c89 Accepting request 868317 from home:michael-chang:branches:Base:System 
- Complete Secure Boot support on aarch64 (jsc#SLE-15020)

OBS-URL: https://build.opensuse.org/request/show/868317
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=371
 2021-02-01 10:18:38 +00:00
Michael Chang
31d3c4f444 Accepting request 867843 from home:michael-chang:branches:Base:System 
* 0009-squash-Add-support-for-linuxefi.patch

OBS-URL: https://build.opensuse.org/request/show/867843
OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=370
 2021-01-30 05:56:02 +00:00