Commit - rpms/grub2 - bd7cb174b27f72b72d6b3e1276f13a14ef0e1fb5

    Update to 2.06~rc1 to fix a bunch of CVEs
    
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233
    
    Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>

Build completed
success

Built as grub2-1:2.06~rc1-1.fc33
3 years ago

0001-Add-support-for-Linux-EFI-stub-loading.patch

file modified

+25 -26

0002-Rework-linux-command.patch

file modified

+22 -27

0003-Rework-linux16-command.patch

file modified

+10 -8

0004-Add-secureboot-support-on-efi-chainloader.patch

file modified

+14 -22

0005-Make-any-of-the-loaders-that-link-in-efi-mode-honor-.patch

file modified

+74 -200

0006-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch

file modified

+2 -2

0007-re-write-.gitignore.patch

file modified

+22 -244

0008-IBM-client-architecture-CAS-reboot-support.patch

file modified

+5 -5

0009-for-ppc-reset-console-display-attr-when-clear-screen.patch

file modified

+1 -1

0011-Honor-a-symlink-when-generating-configuration-by-gru.patch

file removed

-26

0011-Move-bash-completion-script-922997.patch ~~0012-Move-bash-completion-script-922997.patch~~

file renamed

+3 -3

0012-Allow-fallback-to-include-entries-by-title-not-just-.patch ~~0014-Allow-fallback-to-include-entries-by-title-not-just-.patch~~

file renamed

+6 -7

0013-Make-exit-take-a-return-code.patch ~~0016-Make-exit-take-a-return-code.patch~~

file renamed

+11 -11

0013-Update-to-minilzo-2.08.patch

file removed

-8509

0014-Make-efi-machines-load-an-env-block-from-a-variable.patch ~~0018-Make-efi-machines-load-an-env-block-from-a-variable.patch~~

file renamed

+19 -11

0015-Add-GRUB_DISABLE_UUID.patch

file removed

-106

0015-Migrate-PPC-from-Yaboot-to-Grub2.patch ~~0022-Migrate-PPC-from-Yaboot-to-Grub2.patch~~

file renamed

+2 -2

0016-Add-fw_path-variable-revised.patch ~~0023-Add-fw_path-variable-revised.patch~~

file renamed

+4 -4

0017-Mark-po-exclude.pot-as-binary-so-git-won-t-try-to-di.patch

file removed

-19

0017-Pass-x-hex-hex-straight-through-unmolested.patch ~~0024-Pass-x-hex-hex-straight-through-unmolested.patch~~

file renamed

+12 -18

0018-blscfg-add-blscfg-module-to-parse-Boot-Loader-Specif.patch ~~0027-blscfg-add-blscfg-module-to-parse-Boot-Loader-Specif.patch~~

file renamed

+126 -45

0019-Add-devicetree-loading.patch ~~0028-Add-devicetree-loading.patch~~

file renamed

+3 -3

0019-DHCP-client-ID-and-UUID-options-added.patch

file removed

-140

0020-Don-t-write-messages-to-the-screen.patch ~~0029-Don-t-write-messages-to-the-screen.patch~~

file renamed

+5 -5

0020-Fix-bad-test-on-GRUB_DISABLE_SUBMENU.patch

file removed

-38

0021-Add-support-for-UEFI-operating-systems-returned-by-o.patch

file removed

-46

0021-Don-t-print-GNU-GRUB-header.patch ~~0030-Don-t-print-GNU-GRUB-header.patch~~

file renamed

+1 -1

0022-Don-t-add-to-highlighted-row.patch ~~0031-Don-t-add-to-highlighted-row.patch~~

file renamed

+1 -1

0023-Message-string-cleanups.patch ~~0032-Message-string-cleanups.patch~~

file renamed

+1 -1

0024-Fix-border-spacing-now-that-we-aren-t-displaying-it.patch ~~0033-Fix-border-spacing-now-that-we-aren-t-displaying-it.patch~~

file renamed

+1 -1

0025-Add-X-option-to-printf-functions.patch

file removed

-55

0025-Use-the-correct-indentation-for-the-term-help-text.patch ~~0034-Use-the-correct-indentation-for-the-term-help-text.patch~~

file renamed

+2 -2

0026-Indent-menu-entries.patch ~~0035-Indent-menu-entries.patch~~

file renamed

+1 -1

0026-Search-for-specific-config-file-for-netboot.patch

file removed

-200

0027-Fix-margins.patch ~~0036-Fix-margins.patch~~

file renamed

+1 -1

0028-Use-2-instead-of-1-for-our-right-hand-margin-so-line.patch ~~0037-Use-2-instead-of-1-for-our-right-hand-margin-so-line.patch~~

file renamed

+1 -1

0029-Enable-pager-by-default.-985860.patch ~~0038-Enable-pager-by-default.-985860.patch~~

file renamed

file was renamed with no change to the file

0030-F10-doesn-t-work-on-serial-so-don-t-tell-the-user-to.patch ~~0039-F10-doesn-t-work-on-serial-so-don-t-tell-the-user-to.patch~~

file renamed

+1 -1

0031-Don-t-say-GNU-Linux-in-generated-menus.patch ~~0040-Don-t-say-GNU-Linux-in-generated-menus.patch~~

file renamed

+2 -2

0032-Don-t-draw-a-border-around-the-menu.patch ~~0041-Don-t-draw-a-border-around-the-menu.patch~~

file renamed

+1 -1

0033-Use-the-standard-margin-for-the-timeout-string.patch ~~0042-Use-the-standard-margin-for-the-timeout-string.patch~~

file renamed

+1 -1

0034-Add-.eh_frame-to-list-of-relocations-stripped.patch ~~0043-Add-.eh_frame-to-list-of-relocations-stripped.patch~~

file renamed

+1 -1

0035-Don-t-require-a-password-to-boot-entries-generated-b.patch ~~0045-Don-t-require-a-password-to-boot-entries-generated-b.patch~~

file renamed

+1 -1

0036-Don-t-emit-Booting-.-message.patch ~~0046-Don-t-emit-Booting-.-message.patch~~

file renamed

+4 -4

0037-Replace-a-lot-of-man-pages-with-slightly-nicer-ones.patch ~~0047-Replace-a-lot-of-man-pages-with-slightly-nicer-ones.patch~~

file renamed

+10 -11

0038-use-fw_path-prefix-when-fallback-searching-for-grub-.patch ~~0048-use-fw_path-prefix-when-fallback-searching-for-grub-.patch~~

file renamed

+1 -1

0039-Try-mac-guid-etc-before-grub.cfg-on-tftp-config-file.patch ~~0049-Try-mac-guid-etc-before-grub.cfg-on-tftp-config-file.patch~~

file renamed

+22 -8

0040-Generate-OS-and-CLASS-in-10_linux-from-etc-os-releas.patch ~~0053-Generate-OS-and-CLASS-in-10_linux-from-etc-os-releas.patch~~

file renamed

+1 -1

0041-Minimize-the-sort-ordering-for-.debug-and-rescue-ker.patch ~~0054-Minimize-the-sort-ordering-for-.debug-and-rescue-ker.patch~~

file renamed

+2 -2

0042-Try-prefix-if-fw_path-doesn-t-work.patch ~~0055-Try-prefix-if-fw_path-doesn-t-work.patch~~

file renamed

+24 -10

0043-Use-Distribution-Package-Sort-for-grub2-mkconfig-112.patch ~~0057-Use-Distribution-Package-Sort-for-grub2-mkconfig-112.patch~~

file renamed

+23 -12

0044-Don-t-munge-raw-spaces-when-we-re-doing-our-cmdline-.patch

file removed

-33

0044-Make-grub2-mkconfig-construct-titles-that-look-like-.patch ~~0059-Make-grub2-mkconfig-construct-titles-that-look-like-.patch~~

file renamed

+1 -1

0045-Add-friendly-grub2-password-config-tool-985962.patch ~~0060-Add-friendly-grub2-password-config-tool-985962.patch~~

file renamed

+7 -7

0046-tcp-add-window-scaling-support.patch ~~0061-tcp-add-window-scaling-support.patch~~

file renamed

file was renamed with no change to the file

0047-efinet-and-bootp-add-support-for-dhcpv6.patch ~~0064-efinet-and-bootp-add-support-for-dhcpv6.patch~~

file renamed

+25 -35

0048-Add-grub-get-kernel-settings-and-use-it-in-10_linux.patch ~~0065-Add-grub-get-kernel-settings-and-use-it-in-10_linux.patch~~

file renamed

+13 -13

0049-bz1374141-fix-incorrect-mask-for-ppc64.patch ~~0067-bz1374141-fix-incorrect-mask-for-ppc64.patch~~

file renamed

file was renamed with no change to the file

0050-Fix-convert-function-to-support-NVMe-devices.patch

file removed

-56

0050-Make-grub_fatal-also-backtrace.patch ~~0068-Make-grub_fatal-also-backtrace.patch~~

file renamed

+4 -4

0051-Add-grub_util_readlink.patch

file removed

-82

0051-Fix-up-some-man-pages-rpmdiff-noticed.patch ~~0069-Fix-up-some-man-pages-rpmdiff-noticed.patch~~

file renamed

+3 -3

0052-Make-editenv-chase-symlinks-including-those-across-d.patch

file removed

-104

0052-Make-our-info-pages-say-grub2-where-appropriate.patch ~~0071-Make-our-info-pages-say-grub2-where-appropriate.patch~~

file renamed

+84 -83

0053-macos-just-build-chainloader-entries-don-t-try-any-x.patch ~~0073-macos-just-build-chainloader-entries-don-t-try-any-x.patch~~

file renamed

+3 -3

0054-grub2-btrfs-Add-ability-to-boot-from-subvolumes.patch ~~0074-grub2-btrfs-Add-ability-to-boot-from-subvolumes.patch~~

file renamed

+15 -15

0055-export-btrfs_subvol-and-btrfs_subvolid.patch ~~0075-export-btrfs_subvol-and-btrfs_subvolid.patch~~

file renamed

+2 -2

0056-Update-info-with-grub.cfg-netboot-selection-order-11.patch

file removed

-66

0056-grub2-btrfs-03-follow_default.patch ~~0076-grub2-btrfs-03-follow_default.patch~~

file renamed

+10 -10

0057-grub2-btrfs-04-grub2-install.patch ~~0077-grub2-btrfs-04-grub2-install.patch~~

file renamed

+6 -6

0058-Handle-rssd-storage-devices.patch

file removed

-36

0058-grub2-btrfs-05-grub2-mkconfig.patch ~~0078-grub2-btrfs-05-grub2-mkconfig.patch~~

file renamed

+5 -5

0059-grub2-btrfs-06-subvol-mount.patch ~~0079-grub2-btrfs-06-subvol-mount.patch~~

file renamed

+12 -12

0060-Fallback-to-old-subvol-name-scheme-to-support-old-sn.patch ~~0080-Fallback-to-old-subvol-name-scheme-to-support-old-sn.patch~~

file renamed

+2 -2

0061-Grub-not-working-correctly-with-btrfs-snapshots-bsc-.patch ~~0081-Grub-not-working-correctly-with-btrfs-snapshots-bsc-.patch~~

file renamed

+4 -4

0062-Add-grub_efi_allocate_pool-and-grub_efi_free_pool-wr.patch ~~0082-Add-grub_efi_allocate_pool-and-grub_efi_free_pool-wr.patch~~

file renamed

+2 -2

0062-Fix-security-issue-when-reading-username-and-passwor.patch

file removed

-44

0063-Add-a-url-parser.patch

file removed

-1021

0063-Use-grub_efi_.-memory-helpers-where-reasonable.patch ~~0083-Use-grub_efi_.-memory-helpers-where-reasonable.patch~~

file renamed

+7 -7

0064-Add-PRIxGRUB_EFI_STATUS-and-use-it.patch ~~0084-Add-PRIxGRUB_EFI_STATUS-and-use-it.patch~~

file renamed

+9 -7

0065-don-t-use-int-for-efi-status.patch ~~0087-don-t-use-int-for-efi-status.patch~~

file renamed

+2 -2

0066-Normalize-slashes-in-tftp-paths.patch

file removed

-61

0066-make-GRUB_MOD_INIT-declare-its-function-prototypes.patch ~~0088-make-GRUB_MOD_INIT-declare-its-function-prototypes.patch~~

file renamed

+1 -1

0067-Don-t-guess-boot-efi-as-HFS-on-ppc-machines-in-grub-.patch ~~0091-Don-t-guess-boot-efi-as-HFS-on-ppc-machines-in-grub-.patch~~

file renamed

+2 -2

0068-20_linux_xen-load-xen-or-multiboot-2-modules-as-need.patch ~~0092-20_linux_xen-load-xen-or-multiboot-2-modules-as-need.patch~~

file renamed

+8 -24

0069-Make-pmtimer-tsc-calibration-not-take-51-seconds-to-.patch ~~0093-Make-pmtimer-tsc-calibration-not-take-51-seconds-to-.patch~~

file renamed

file was renamed with no change to the file

0070-align-struct-efi_variable-better.patch ~~0094-align-struct-efi_variable-better.patch~~

file renamed

+1 -1

0070-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch

file removed

-42

0071-Add-BLS-support-to-grub-mkconfig.patch

file added

+397

0072-Don-t-attempt-to-backtrace-on-grub_abort-for-grub-em.patch ~~0096-Don-t-attempt-to-backtrace-on-grub_abort-for-grub-em.patch~~

file renamed

+2 -2

0072-print-more-debug-info-in-our-module-loader.patch

file removed

-41

0073-Add-linux-and-initrd-commands-for-grub-emu.patch ~~0097-Add-linux-and-initrd-commands-for-grub-emu.patch~~

file renamed

+9 -9

0074-Add-grub2-switch-to-blscfg.patch ~~0098-Add-grub2-switch-to-blscfg.patch~~

file renamed

+30 -27

0075-make-better-backtraces.patch ~~0100-make-better-backtraces.patch~~

file renamed

+19 -19

0076-normal-don-t-draw-our-startup-message-if-debug-is-se.patch ~~0101-normal-don-t-draw-our-startup-message-if-debug-is-se.patch~~

file renamed

+2 -2

0077-Work-around-some-minor-include-path-weirdnesses.patch ~~0102-Work-around-some-minor-include-path-weirdnesses.patch~~

file renamed

file was renamed with no change to the file

0078-Make-it-possible-to-enabled-build-id-sha1.patch ~~0103-Make-it-possible-to-enabled-build-id-sha1.patch~~

file renamed

+3 -3

0079-Add-grub_qdprintf-grub_dprintf-without-the-file-line.patch ~~0104-Add-grub_qdprintf-grub_dprintf-without-the-file-line.patch~~

file renamed

+4 -4

0080-Make-a-gdb-dprintf-that-tells-us-load-addresses.patch ~~0105-Make-a-gdb-dprintf-that-tells-us-load-addresses.patch~~

file renamed

+11 -11

0081-Fixup-for-newer-compiler.patch ~~0106-Fixup-for-newer-compiler.patch~~

file renamed

+2 -2

0082-Don-t-attempt-to-export-the-start-and-_start-symbols.patch ~~0107-Don-t-attempt-to-export-the-start-and-_start-symbols.patch~~

file renamed

+2 -2

0083-Fixup-for-newer-compiler.patch ~~0108-Fixup-for-newer-compiler.patch~~

file renamed

+1 -1

0084-Add-support-for-non-Ethernet-network-cards.patch ~~0109-Add-support-for-non-Ethernet-network-cards.patch~~

file renamed

+14 -14

0085-Don-t-use-dynamic-sized-arrays-since-we-don-t-build-.patch

file removed

-43

0085-net-read-bracketed-ipv6-addrs-and-port-numbers.patch ~~0111-net-read-bracketed-ipv6-addrs-and-port-numbers.patch~~

file renamed

+18 -21

0086-bootp-New-net_bootp6-command.patch ~~0112-bootp-New-net_bootp6-command.patch~~

file renamed

+13 -13

0086-don-t-ignore-const.patch

file removed

-22

0087-efinet-UEFI-IPv6-PXE-support.patch ~~0113-efinet-UEFI-IPv6-PXE-support.patch~~

file renamed

+6 -6

0088-grub.texi-Add-net_bootp6-doument.patch ~~0114-grub.texi-Add-net_bootp6-doument.patch~~

file renamed

+6 -6

0089-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch ~~0115-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch~~

file renamed

+11 -11

0089-editenv-handle-relative-symlinks.patch

file removed

-50

0090-Make-libgrub.pp-depend-on-config-util.h.patch

file removed

-45

0090-efinet-Setting-network-from-UEFI-device-path.patch ~~0116-efinet-Setting-network-from-UEFI-device-path.patch~~

file renamed

+10 -10

0091-efinet-Setting-DNS-server-from-UEFI-protocol.patch ~~0117-efinet-Setting-DNS-server-from-UEFI-protocol.patch~~

file renamed

+19 -20

0092-Support-UEFI-networking-protocols.patch ~~0119-Support-UEFI-networking-protocols.patch~~

file renamed

+28 -28

0093-AUDIT-0-http-boot-tracker-bug.patch ~~0120-AUDIT-0-http-boot-tracker-bug.patch~~

file renamed

+1 -1

0094-grub-editenv-Add-incr-command-to-increment-integer-v.patch ~~0128-grub-editenv-Add-incr-command-to-increment-integer-v.patch~~

file renamed

+3 -3

0095-Add-BLS-support-to-grub-mkconfig.patch

file removed

-741

0095-Add-auto-hide-menu-support.patch ~~0129-Add-auto-hide-menu-support.patch~~

file renamed

+11 -11

0096-Add-grub-set-bootflag-utility.patch ~~0131-Add-grub-set-bootflag-utility.patch~~

file renamed

+3 -3

0097-docs-Add-grub-boot-indeterminate.service-example.patch ~~0132-docs-Add-grub-boot-indeterminate.service-example.patch~~

file renamed

file was renamed with no change to the file

0098-gentpl-add-disable-support.patch ~~0133-gentpl-add-disable-support.patch~~

file renamed

+1 -1

0099-Add-grub_debug_enabled.patch

file removed

-60

0099-gentpl-add-pc-firmware-type.patch ~~0134-gentpl-add-pc-firmware-type.patch~~

file renamed

+1 -1

0100-efinet-also-use-the-firmware-acceleration-for-http.patch ~~0135-efinet-also-use-the-firmware-acceleration-for-http.patch~~

file renamed

file was renamed with no change to the file

0101-efi-http-Make-root_url-reflect-the-protocol-hostname.patch ~~0136-efi-http-Make-root_url-reflect-the-protocol-hostname.patch~~

file renamed

file was renamed with no change to the file

0102-Make-it-so-we-can-tell-configure-which-cflags-utils-.patch ~~0137-Make-it-so-we-can-tell-configure-which-cflags-utils-.patch~~

file renamed

+5 -5

0103-module-verifier-make-it-possible-to-run-checkers-on-.patch ~~0138-module-verifier-make-it-possible-to-run-checkers-on-.patch~~

file renamed

file was renamed with no change to the file

0104-Rework-how-the-fdt-command-builds.patch ~~0139-Rework-how-the-fdt-command-builds.patch~~

file renamed

+9 -9

0105-Disable-non-wordsize-allocations-on-arm.patch ~~0140-Disable-non-wordsize-allocations-on-arm.patch~~

file renamed

+2 -2

0106-Prepend-prefix-when-HTTP-path-is-relative.patch ~~0142-Prepend-prefix-when-HTTP-path-is-relative.patch~~

file renamed

+2 -2

0107-Make-grub_error-more-verbose.patch ~~0144-Make-grub_error-more-verbose.patch~~

file renamed

+10 -47

0108-Make-reset-an-alias-for-the-reboot-command.patch ~~0145-Make-reset-an-alias-for-the-reboot-command.patch~~

file renamed

file was renamed with no change to the file

0109-Add-a-version-command.patch ~~0147-Add-a-version-command.patch~~

file renamed

+4 -4

0110-Add-more-dprintf-and-nerf-dprintf-in-script.c.patch ~~0148-Add-more-dprintf-and-nerf-dprintf-in-script.c.patch~~

file renamed

+4 -4

0110-misc-fix-invalid-character-recongition-in-strto-l.patch

file removed

-37

0111-arm-arm64-loader-Better-memory-allocation-and-error-.patch ~~0149-arm-arm64-loader-Better-memory-allocation-and-error-.patch~~

file renamed

+14 -33

0112-Try-to-pick-better-locations-for-kernel-and-initrd.patch ~~0150-Try-to-pick-better-locations-for-kernel-and-initrd.patch~~

file renamed

+3 -3

0113-Attempt-to-fix-up-all-the-places-Wsign-compare-error.patch ~~0151-Attempt-to-fix-up-all-the-places-Wsign-compare-error.patch~~

file renamed

+20 -19

0114-Don-t-use-Wno-sign-compare-Wno-conversion-Wno-error-.patch ~~0152-Don-t-use-Wno-sign-compare-Wno-conversion-Wno-error-.patch~~

file renamed

+4 -4

0115-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch ~~0153-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch~~

file renamed

file was renamed with no change to the file

0116-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch ~~0154-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch~~

file renamed

file was renamed with no change to the file

0117-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch ~~0155-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch~~

file renamed

+2 -2

0118-Fix-one-more-coverity-complaint.patch

file removed

-27

0118-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch ~~0156-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch~~

file renamed

+3 -3

0119-Fix-getroot.c-s-trampolines.patch ~~0157-Fix-getroot.c-s-trampolines.patch~~

file renamed

+1 -1

0120-Do-not-allow-stack-trampolines-anywhere.patch ~~0158-Do-not-allow-stack-trampolines-anywhere.patch~~

file renamed

+3 -3

0121-Reimplement-boot_counter.patch ~~0159-Reimplement-boot_counter.patch~~

file renamed

+4 -4

0121-grub-core-video-efi_gop.c-Add-support-for-BLT_ONLY-a.patch

file removed

-56

0122-Fix-menu-entry-selection-based-on-ID-and-title.patch ~~0161-Fix-menu-entry-selection-based-on-ID-and-title.patch~~

file renamed

file was renamed with no change to the file

0122-efi-uga-use-64-bit-for-fb_base.patch

file removed

-105

0123-EFI-console-Do-not-set-text-mode-until-we-actually-n.patch

file removed

-184

0123-Make-the-menu-entry-users-option-argument-to-be-opti.patch ~~0162-Make-the-menu-entry-users-option-argument-to-be-opti.patch~~

file renamed

+1 -1

0124-Add-efi-export-env-and-efi-load-env-commands.patch ~~0163-Add-efi-export-env-and-efi-load-env-commands.patch~~

file renamed

+14 -28

0124-EFI-console-Add-grub_console_read_key_stroke-helper-.patch

file removed

-102

0125-EFI-console-Implement-getkeystatus-support.patch

file removed

-72

0125-Make-it-possible-to-subtract-conditions-from-debug.patch ~~0164-Make-it-possible-to-subtract-conditions-from-debug.patch~~

file renamed

+2 -2

0126-Export-all-variables-from-the-initial-context-when-c.patch ~~0165-Export-all-variables-from-the-initial-context-when-c.patch~~

file renamed

file was renamed with no change to the file

0126-Make-grub_getkeystatus-helper-funtion-available-ever.patch

file removed

-87

0127-Accept-ESC-F8-and-holding-SHIFT-as-user-interrupt-ke.patch

file removed

-94

0127-grub.d-Split-out-boot-success-reset-from-menu-auto-h.patch ~~0170-grub.d-Split-out-boot-success-reset-from-menu-auto-h.patch~~

file renamed

+3 -3

0128-Fix-systemctl-kexec-exit-status-check.patch ~~0171-Fix-systemctl-kexec-exit-status-check.patch~~

file renamed

file was renamed with no change to the file

0129-Print-grub-emu-linux-loader-messages-as-debug.patch ~~0172-Print-grub-emu-linux-loader-messages-as-debug.patch~~

file renamed

file was renamed with no change to the file

0130-Don-t-assume-that-boot-commands-will-only-return-on-.patch ~~0173-Don-t-assume-that-boot-commands-will-only-return-on-.patch~~

file renamed

+21 -3

0130-Output-a-menu-entry-for-firmware-setup-on-UEFI-FastB.patch

file removed

-94

0131-Fix-undefined-references-for-fdt-when-building-with-.patch ~~0174-Fix-undefined-references-for-fdt-when-building-with-.patch~~

file renamed

file was renamed with no change to the file

0132-Do-better-in-bootstrap.conf.patch ~~0175-Do-better-in-bootstrap.conf.patch~~

file renamed

+1 -1

0133-Use-git-to-apply-gnulib-patches.patch ~~0176-Use-git-to-apply-gnulib-patches.patch~~

file renamed

+165 -8

0134-Fix-build-error-with-the-fdt-module-on-risc-v.patch ~~0179-Fix-build-error-with-the-fdt-module-on-risc-v.patch~~

file renamed

file was renamed with no change to the file

0135-grub-set-bootflag-Update-comment-about-running-as-ro.patch ~~0186-grub-set-bootflag-Update-comment-about-running-as-ro.patch~~

file renamed

file was renamed with no change to the file

0136-grub-set-bootflag-Write-new-env-to-tmpfile-and-then-.patch ~~0187-grub-set-bootflag-Write-new-env-to-tmpfile-and-then-.patch~~

file renamed

file was renamed with no change to the file

0137-grub.d-Fix-boot_indeterminate-getting-set-on-boot_su.patch ~~0189-grub.d-Fix-boot_indeterminate-getting-set-on-boot_su.patch~~

file renamed

file was renamed with no change to the file

0138-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch ~~0192-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch~~

file renamed

file was renamed with no change to the file

0139-chainloader-Define-machine-types-for-RISC-V.patch ~~0193-chainloader-Define-machine-types-for-RISC-V.patch~~

file renamed

+2 -2

0140-Add-start-symbol-for-RISC-V.patch ~~0194-Add-start-symbol-for-RISC-V.patch~~

file renamed

file was renamed with no change to the file

0141-bootstrap.conf-Force-autogen.sh-to-use-python3.patch ~~0198-bootstrap.conf-Force-autogen.sh-to-use-python3.patch~~

file renamed

+5 -5

0141-strip-R-.note.gnu.property-at-more-places.patch

file removed

-82

0142-efi-http-Export-fw-http-_path-variables-to-make-them.patch ~~0199-efi-http-Export-fw-http-_path-variables-to-make-them.patch~~

file renamed

+2 -2

0143-Make-linux_arm_kernel_header.hdr_offset-be-at-the-ri.patch

file removed

-71

0143-efi-http-Enclose-literal-IPv6-addresses-in-square-br.patch ~~0200-efi-http-Enclose-literal-IPv6-addresses-in-square-br.patch~~

file renamed

file was renamed with no change to the file

0144-efi-net-Allow-to-specify-a-port-number-in-addresses.patch ~~0201-efi-net-Allow-to-specify-a-port-number-in-addresses.patch~~

file renamed

file was renamed with no change to the file

0145-efi-ip4_config-Improve-check-to-detect-literal-IPv6-.patch ~~0202-efi-ip4_config-Improve-check-to-detect-literal-IPv6-.patch~~

file renamed

file was renamed with no change to the file

0146-EFI-more-debug-output-on-GOP-and-UGA-probing.patch

file removed

-66

0146-efi-net-Print-a-debug-message-if-parsing-the-address.patch ~~0203-efi-net-Print-a-debug-message-if-parsing-the-address.patch~~

file renamed

file was renamed with no change to the file

0147-kern-term-Also-accept-F8-as-a-user-interrupt-key.patch

file added

+30

0148-efi-Set-image-base-address-before-jumping-to-the-PE-.patch ~~0210-efi-Set-image-base-address-before-jumping-to-the-PE-.patch~~

file renamed

+9 -7

0149-tpm-Don-t-propagate-TPM-measurement-errors-to-the-ve.patch ~~0216-tpm-Don-t-propagate-TPM-measurement-errors-to-the-ve.patch~~

file renamed

+4 -4

0150-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch ~~0219-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch~~

file renamed

+1 -1

0151-http-Prepend-prefix-when-the-HTTP-path-is-relative-a.patch ~~0220-http-Prepend-prefix-when-the-HTTP-path-is-relative-a.patch~~

file renamed

+4 -12

0152-Fix-a-missing-return-in-efi-export-env-and-efi-load-.patch ~~0224-Fix-a-missing-return-in-efi-export-env-and-efi-load-.patch~~

file renamed

+1 -1

0153-efi-dhcp-fix-some-allocation-error-checking.patch

file added

+37

0154-efi-http-fix-some-allocation-error-checking.patch

file added

+39

0155-efi-ip-46-_config.c-fix-some-potential-allocation-ov.patch

file added

+127

0156-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch

file added

+49

0157-linuxefi-fail-kernel-validation-without-shim-protoco.patch

file added

+130

0158-Fix-const-char-pointers-in-grub-core-net-bootp.c.patch

file added

+37

0159-Fix-const-char-pointers-in-grub-core-net-efi-ip4_con.patch

file added

+38

0160-Fix-const-char-pointers-in-grub-core-net-efi-ip6_con.patch

file added

+28

0160-Make-grub_strtol-end-pointers-have-safer-const-quali.patch

file removed

-987

0161-Fix-const-char-pointers-in-grub-core-net-efi-net.c.patch

file added

+37

0162-Fix-const-char-pointers-in-grub-core-net-efi-pxe.c.patch

file added

+46

0163-Add-systemd-integration-scripts-to-make-systemctl-re.patch

file added

+190

0164-systemd-integration.sh-Also-set-old-menu_show_once-g.patch

file added

+32

0165-at_keyboard-use-set-1-when-keyboard-is-in-Translate-.patch

file added

+121

0166-Fix-the-looking-up-grub.cfg-XXX-while-tftp-booting.patch

file removed

-42

0166-grub-install-disable-support-for-EFI-platforms.patch

file added

+120

0167-New-with-debug-timestamps-configure-flag-to-prepend-.patch

file added

+112

0167-Try-to-set-fPIE-and-friends-on-libgnu.a.patch

file removed

-40

0168-Added-debug-statements-to-grub_disk_open-and-grub_di.patch

file added

+47

0168-Don-t-make-grub_strtoull-print-an-error-if-no-conver.patch

file removed

-31

0169-Fix-the-type-of-grub_efi_status_t.patch

file removed

-79

0169-Introduce-function-grub_debug_is_enabled-void-return.patch

file added

+51

0170-Don-t-clear-screen-when-debugging-is-enabled.patch

file added

+27

0171-grub_file_-instrumentation-new-file-debug-tag.patch

file added

+71

0172-ieee1275-Avoiding-many-unecessary-open-close.patch

file added

+136

0173-ieee1275-powerpc-implements-fibre-channel-discovery-.patch

file added

+90

0174-ieee1275-powerpc-enables-device-mapper-discovery.patch

file added

+106

0175-Add-at_keyboard_fallback_set-var-to-force-the-set-ma.patch

file added

+239

0176-Add-suport-for-signing-grub-with-an-appended-signatu.patch

file added

+317

0177-autogen.sh-use-find-wholename-for-long-path-matches.patch

file removed

-23

0177-docs-grub-Document-signing-grub-under-UEFI.patch

file added

+61

0178-bootstrap.conf-don-t-clobber-AM_CFLAGS-here.patch

file removed

-23

0178-docs-grub-Document-signing-grub-with-an-appended-sig.patch

file added

+67

0179-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch

file added

+44

0180-RISC-V-Fix-computation-of-pc-relative-relocation-off.patch

file removed

-36

0180-pgp-factor-out-rsa_pad.patch

file added

+191

0181-blscfg-Add-support-for-the-devicetree-field.patch

file removed

-132

0181-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch

file added

+71

0182-Set-a-devicetree-var-in-a-BLS-config-if-GRUB_DEFAULT.patch

file removed

-38

0182-posix_wrap-tweaks-in-preparation-for-libtasn1.patch

file added

+64

0183-Don-t-add-a-class-option-to-menu-entries-generated-f.patch

file removed

-78

0183-libtasn1-import-libtasn1-4.16.0.patch

file added

+8934

0184-10_linux.in-Also-use-GRUB_CMDLINE_LINUX_DEFAULT-to-s.patch

file removed

-45

0184-libtasn1-disable-code-not-needed-in-grub.patch

file added

+307

0185-blscfg-Don-t-hardcode-an-env-var-as-fallback-for-the.patch

file removed

-63

0185-libtasn1-changes-for-grub-compatibility.patch

file added

+202

0186-libtasn1-compile-into-asn1-module.patch

file added

+70

0187-test_asn1-test-module-for-libtasn1.patch

file added

+1457

0188-blscfg-add-a-space-char-when-appending-fields-for-va.patch

file removed

-76

0188-grub-install-support-embedding-x509-certificates.patch

file added

+252

0189-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch

file added

+639

0190-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch

file added

+1528

0190-blscfg-Add-support-for-sorting-the-plus-higher-than-.patch

file removed

-59

0191-Fix-savedefault-with-blscfg.patch

file removed

-50

0191-appended-signatures-support-verifying-appended-signa.patch

file added

+716

0192-appended-signatures-verification-tests.patch

file added

+792

0193-appended-signatures-documentation.patch

file added

+341

0194-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch

file added

+109

0195-RISC-V-Add-__clzdi2-symbol.patch

file removed

-43

0195-Revert-templates-Properly-disable-the-os-prober-by-d.patch

file added

+71

0196-Revert-templates-Disable-the-os-prober-by-default.patch

file added

+70

0196-grub-install-Define-default-platform-for-RISC-V.patch

file removed

-31

0197-blscfg-Always-use-the-root-variable-to-search-for-BL.patch

file removed

-47

0204-blscfg-return-NULL-instead-of-a-zero-length-array-in.patch

file removed

-38

0205-grub-switch-to-blscfg-Update-grub2-binary-in-ESP-for.patch

file removed

-37

0206-grub-switch-to-blscfg-Only-mark-GRUB-as-BLS-supporte.patch

file removed

-37

0207-10_linux.in-Merge-logic-from-10_linux_bls-and-drop-t.patch

file removed

-662

0208-grub-switch-to-blscfg-Use-install-to-copy-GRUB-binar.patch

file removed

-46

0209-10_linux.in-Enable-BLS-configuration-if-new-kernel-p.patch

file removed

-39

0211-blscfg-Lookup-default_kernelopts-variable-as-fallbac.patch

file removed

-40

0212-10_linux.in-fix-early-exit-due-error-when-reading-pe.patch

file removed

-33

0213-envblk-Fix-buffer-overrun-when-attempting-to-shrink-.patch

file removed

-60

0214-10_linux.in-Store-cmdline-in-BLS-snippets-instead-of.patch

file removed

-160

0215-10_linux.in-restore-existence-check-in-get_sorted_bl.patch

file removed

-32

0217-tpm-Enable-module-for-all-EFI-platforms.patch

file removed

-26

0218-10_linux.in-Don-t-update-BLS-files-that-aren-t-manag.patch

file removed

-56

0221-fix-build-with-rpm-4.16.patch

file removed

-30

0222-Only-mark-GRUB-as-BLS-supported-in-OSTree-systems-wi.patch

file removed

-35

0223-Don-t-assume-that-boot-commands-will-only-return-on-.patch

file removed

-40

0225-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch

file removed

-67

0226-safemath-Add-some-arithmetic-primitives-that-check-f.patch

file removed

-124

0227-calloc-Make-sure-we-always-have-an-overflow-checking.patch

file removed

-240

0228-calloc-Use-calloc-at-most-places.patch

file removed

-1834

0229-malloc-Use-overflow-checking-primitives-where-we-do-.patch

file removed

-1320

0230-iso9660-Don-t-leak-memory-on-realloc-failures.patch

file removed

-66

0231-font-Do-not-load-more-than-one-NAME-section.patch

file removed

-35

0232-gfxmenu-Fix-double-free-in-load_image.patch

file removed

-33

0233-xnu-Fix-double-free-in-grub_xnu_devprop_add_property.patch

file removed

-53

0234-lzma-Make-sure-we-don-t-dereference-past-array.patch

file removed

-49

0235-term-Fix-overflow-on-user-inputs.patch

file removed

-63

0236-udf-Fix-memory-leak.patch

file removed

-53

0237-multiboot2-Fix-memory-leak-if-grub_create_loader_cmd.patch

file removed

-32

0238-tftp-Do-not-use-priority-queue.patch

file removed

-278

0239-multiboot2-Set-min-address-for-mbi-allocation-to-0x1.patch

file removed

-44

0240-relocator-Protect-grub_relocator_alloc_chunk_addr-in.patch

file removed

-147

0241-relocator-Protect-grub_relocator_alloc_chunk_align-m.patch

file removed

-335

0242-script-Remove-unused-fields-from-grub_script_functio.patch

file removed

-30

0243-script-Avoid-a-use-after-free-when-redefining-a-func.patch

file removed

-105

0244-relocator-Fix-grub_relocator_alloc_chunk_align-top-m.patch

file removed

-43

0245-hfsplus-fix-two-more-overflows.patch

file removed

-54

0246-lvm-fix-two-more-potential-data-dependent-alloc-over.patch

file removed

-108

0247-emu-make-grub_free-NULL-safe.patch

file removed

-31

0248-efi-fix-some-malformed-device-path-arithmetic-errors.patch

file removed

-248

0249-Fix-a-regression-caused-by-efi-fix-some-malformed-de.patch

file removed

-84

0250-efi-Fix-use-after-free-in-halt-reboot-path.patch

file removed

-162

0251-efi-dhcp-fix-some-allocation-error-checking.patch

file removed

-37

0252-efi-http-fix-some-allocation-error-checking.patch

file removed

-39

0253-efi-ip-46-_config.c-fix-some-potential-allocation-ov.patch

file removed

-127

0254-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch

file removed

-49

0255-efi-Fix-use-after-free-in-halt-reboot-path.patch

file removed

-57

0256-linux-loader-avoid-overflow-on-initrd-size-calculati.patch

file removed

-25

0257-linuxefi-fail-kernel-validation-without-shim-protoco.patch

file removed

-130

0258-linux-Fix-integer-overflows-in-initrd-size-handling.patch

file removed

-166

0259-Fix-const-char-pointers-in-grub-core-commands-blscfg.patch

file removed

-43

0260-Fix-const-char-pointers-in-grub-core-net-bootp.c.patch

file removed

-37

0261-Fix-const-char-pointers-in-grub-core-net-efi-ip4_con.patch

file removed

-38

0262-Fix-const-char-pointers-in-grub-core-net-efi-ip6_con.patch

file removed

-28

0263-Fix-const-char-pointers-in-grub-core-net-efi-net.c.patch

file removed

-37

0264-Fix-const-char-pointers-in-grub-core-net-efi-pxe.c.patch

file removed

-46

0265-Fix-const-char-pointers-in-grub-core-net-url.c.patch

file removed

-28

0266-Add-systemd-integration-scripts-to-make-systemctl-re.patch

file removed

-190

0267-systemd-integration.sh-Also-set-old-menu_show_once-g.patch

file removed

-32

0268-tftp-roll-over-block-counter-to-prevent-timeouts-wit.patch

file removed

-51

0269-10_linux.in-Check-if-petitboot-sysfs-has-a-valid-ver.patch

file removed

-67

bootstrap.conf

file modified

+11 -1

gitignore

file modified

+251 -211

grub.macros

file modified

+4 -4

grub.patches

file modified

+186 -259

grub2.spec

file modified

+16 -3

sbat.csv.in

file added

sources

file modified

+2 -2

rpms / grub2

Source Code

bd7cb17 Update to 2.06~rc1 to fix a bunch of CVEs

Authored and Committed by javierm 3 years ago

`bd7cb17` Update to 2.06~rc1 to fix a bunch of CVEs