Changelog for grub2-i386-efi-2.12-150600.5.1.noarch.rpm :

* Wed Mar 27 2024 mchangAATTsuse.com- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
* 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch
* Fri Mar 22 2024 mchangAATTsuse.com- Fix memdisk becomes the default boot entry, resolving no graphic display device error in guest vnc console (bsc#1221779)
* grub2-xen-pv-firmware.cfg
* Thu Feb 22 2024 mchangAATTsuse.com- Fix grub.xen memdisk script doesn\'t look for /boot/grub/grub.cfg (bsc#1219248) (bsc#1181762)
* grub2-xen-pv-firmware.cfg
* 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch
* Sat Feb 17 2024 mchangAATTsuse.com- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to SLE-15-SP2 (bsc#1217102)
* add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
* add 0002-ofdisk-add-early_log-support.patch
* Wed Feb 07 2024 bwiedemannAATTsuse.com- Sort tar file order for reproducible builds
* Tue Feb 06 2024 mchangAATTsuse.com- Fix build error on gcc-14 (bsc#1218949)
* 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
* Mon Jan 29 2024 mchangAATTsuse.com- Remove magic number header field check on arm64 (bsc#1218783)
* 0001-loader-arm64-efi-linux-Remove-magic-number-header-fi.patch
* Tue Jan 23 2024 mchangAATTsuse.com- Reinstate the verification for a non-zero total entry count to skip unmapped data blocks (bsc#1218864)
* 0001-fs-xfs-always-verify-the-total-number-of-entries-is-.patch- Removed temporary fix as reverting it will cause a different XFS parser bug
* 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch
* Sat Jan 20 2024 gcomes.obsAATTgmail.com- allow to boot memtest86 if stored in /usr/lib/memtest86+
* SR#1071109 can then work
* Wed Jan 17 2024 mchangAATTsuse.com- Resolved XFS regression leading to the \"not a correct XFS inode\" error by temporarily reverting the problematic commit (bsc#1218864)
* 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch
* Wed Jan 10 2024 mchangAATTsuse.com- Version bump to 2.12 (PED-5589)
* Added: - grub-2.12.tar.xz - fix_no_extra_deps_in_release_tarball.patch
* Removed: - grub-2.12~rc1.tar.xz
* Patch dropped as it merged into new version: - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch - 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch - 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch - 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch - 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch - 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch - 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch - 0006-fs-ntfs-Make-code-more-readable.patch - 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch - 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch - 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch - 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch - 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch - 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch
* Patch adjusted for the updated base version: - use-grub2-as-a-package-name.patch - grub2-s390x-04-grub2-install.patch - grub2-btrfs-04-grub2-install.patch - grub2-ppc64le-disable-video.patch - 0002-AUDIT-0-http-boot-tracker-bug.patch - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch - 0016-grub-install-support-embedding-x509-certificates.patch - 0021-appended-signatures-documentation.patch - 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch - safe_tpm_pcr_snapshot.patch
* Wed Jan 03 2024 mchangAATTsuse.com- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot installation when secure boot is enabled (bsc#1217761)- Improved check for disk device when looking for PReP partition
* 0004-Introduce-prep_load_env-command.patch
* Thu Nov 30 2023 mchangAATTsuse.com- Fix reproducible build for grub.xen (bsc#1217619)
* 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch
* 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch
* Wed Nov 22 2023 mchangAATTsuse.com- Fix unattended boot with TPM2 allows downgrading kernel and rootfs, also enhancing the overall security posture (bsc#1216680)
* 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
* 0002-Restrict-file-access-on-cryptodisk-print.patch
* 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
* 0004-Key-revocation-on-out-of-bound-file-access.patch
* Tue Nov 21 2023 mchangAATTsuse.com- grub2.spec: Fix openQA test failure in SLE-15-SP6 due to missing font in memdisk
* Thu Nov 16 2023 glinAATTsuse.com- Update the TPM2 patches to skip the persistent SRK handle if not specified and improve the error messages + 0003-protectors-Add-TPM2-Key-Protector.patch + 0005-util-grub-protect-Add-new-tool.patch + 0004-tpm2-Support-authorized-policy.patch
* Tue Nov 14 2023 mchangAATTsuse.com- Fix XFS regression in 2.12~rc1 and support large extent counters
* 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch
* 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch
* 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch
* Mon Oct 30 2023 mchangAATTsuse.com- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
* 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch
* Thu Oct 26 2023 glinAATTsuse.com- Fix a potential error when appending multiple keys into the synthesized initrd
* Fix-the-size-calculation-for-the-synthesized-initrd.patch
* Wed Oct 25 2023 mchangAATTsuse.com- Fix Xen chainloding error of no matching file path found (bsc#1216081)
* grub2-efi-chainload-harder.patch
* Mon Oct 23 2023 mchangAATTsuse.com- Use grub-tpm2 token to unlock keyslots to make the unsealing process more efficient and secure.
* 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch
* Mon Oct 16 2023 mchangAATTsuse.com- Fix detection of encrypted disk\'s uuid in powerpc to cope with logical disks when signed image installation is specified (bsc#1216075)
* 0003-grub-install-support-prep-environment-block.patch- grub2.spec: Add support to unlocking multiple encrypted disks in signed grub.elf image for logical disks
* Fri Oct 06 2023 mchangAATTsuse.com- Fix CVE-2023-4692 (bsc#1215935)- Fix CVE-2023-4693 (bsc#1215936)
* 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
* 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
* 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
* 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
* 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
* 0006-fs-ntfs-Make-code-more-readable.patch- Bump upstream SBAT generation to 4
* Thu Oct 05 2023 fvogtAATTsuse.com- Add patch to fix reading files from btrfs with \"implicit\" holes:
* 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch
* Mon Oct 02 2023 glinAATTsuse.com- Update the TPM 2.0 patches to support more RSA and ECC algorithms
* 0002-tpm2-Add-TPM-Software-Stack-TSS.patch
* 0003-protectors-Add-TPM2-Key-Protector.patch
* 0005-util-grub-protect-Add-new-tool.patch
* Mon Oct 02 2023 mchangAATTsuse.com- Remove build require for gcc-32bit, target platform didn\'t rely on libgcc function shipped with compiler but rather using functions supplied in grub directly.
* Fri Sep 29 2023 fvogtAATTsuse.com- Add BuildIgnore to break cycle with the branding package
* Wed Sep 27 2023 glinAATTsuse.com- Only build with fde-tpm-helper-rpm-macros for the architectures supporting the newer UEFI and TPM 2.0.
* Also correct the location of %fde_tpm_update_requires
* Wed Sep 20 2023 mchangAATTsuse.com- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
* 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch
* Tue Sep 19 2023 glinAATTsuse.com- Add the new BuildRequires for EFI builds for the better FDE support: fde-tpm-helper-rpm-macros + Also add the the macros to %post and %posttrans
* Mon Sep 11 2023 clinAATTsuse.com- Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151)
* arm64-Use-proper-memory-type-for-kernel-allocation.patch
* Thu Aug 31 2023 schwabAATTsuse.de- grub2-mkconfig-riscv64.patch: Handle riscv64 in mkconfig
* Wed Aug 16 2023 glinAATTsuse.com- Implement NV index mode for TPM 2.0 key protector 0001-protectors-Implement-NV-index.patch- Fall back to passphrase mode when the key protector fails to unlock the disk 0002-cryptodisk-Fallback-to-passphrase.patch- Wipe out the cached key cleanly 0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch- Make diskfiler to look up cryptodisk devices first 0004-diskfilter-look-up-cryptodisk-devices-first.patch
* Thu Aug 03 2023 glinAATTsuse.com- Change the bash-completion directory (bsc#1213855)
* grub2-change-bash-completion-dir.patch
* Thu Jul 27 2023 mchangAATTsuse.com- Version bump to 2.12~rc1 (PED-5589)
* Added: - grub-2.12~rc1.tar.xz
* Removed: - grub-2.06.tar.xz
* Patch dropped merged by new version: - grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-efi-chainloader-root.patch - grub2-Fix-incorrect-netmask-on-ppc64.patch - 0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch - 0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch - grub2-s390x-10-keep-network-at-kexec.patch - 0001-Fix-build-error-in-binutils-2.36.patch - 0001-emu-fix-executable-stack-marking.patch - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch - 0001-30_uefi-firmware-fix-printf-format-with-null-byte.patch - 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch - 0001-Filter-out-POSIX-locale-for-translation.patch - 0001-disk-diskfilter-Use-nodes-in-logical-volume-s-segmen.patch - 0001-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock.patch - 0001-fs-btrfs-Make-extent-item-iteration-to-handle-gaps.patch - 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch - 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch - 0002-ieee1275-claim-more-memory.patch - 0003-ieee1275-request-memory-with-ibm-client-architecture.patch - 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - 0001-mkimage-Fix-dangling-pointer-may-be-used-error.patch - 0002-Fix-Werror-array-bounds-array-subscript-0-is-outside.patch - 0003-reed_solomon-Fix-array-subscript-0-is-outside-array-.patch - 0001-powerpc-do-CAS-in-a-more-compatible-way.patch - 0001-libc-config-merge-from-glibc.patch - 0001-video-Remove-trailing-whitespaces.patch - 0002-loader-efi-chainloader-Simplify-the-loader-state.patch - 0003-commands-boot-Add-API-to-pass-context-to-loader.patch - 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch - 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch - 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch - 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch - 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch - 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch - 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch - 0011-video-readers-png-Sanity-check-some-huffman-codes.patch - 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch - 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch - 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch - 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch - 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch - 0017-net-ip-Do-IP-fragment-maths-safely.patch - 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch - 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch - 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch - 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch - 0022-net-tftp-Avoid-a-trivial-UAF.patch - 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch - 0024-net-http-Fix-OOB-write-for-split-http-headers.patch - 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch - 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch - 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch - 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch - 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch - 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch - 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch - 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch - 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch - 0002-cryptodisk-Refactor-to-discard-have_it-global.patch - 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch - 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch - 0005-cryptodisk-Improve-cryptomount-u-error-message.patch - 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch - 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch - 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch - 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch - 0001-crytodisk-fix-cryptodisk-module-looking-up.patch - 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch - 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch - 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch - 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch - 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch - 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch - 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch - efi-set-variable-with-attrs.patch - 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch - 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch - 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch - 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch - 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch - 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch - 0002-mm-Defer-the-disk-cache-invalidation.patch - 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch - 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch - 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch - 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch - 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch - 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch - 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch - 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch - 0004-font-Remove-grub_font_dup_glyph.patch - 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch - 0006-font-Fix-integer-overflow-in-BMP-index.patch - 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch - 0008-fbutil-Fix-integer-overflow.patch - 0009-font-Fix-an-integer-underflow-in-blit_comb.patch - 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch - 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch - 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch - 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch - 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch - 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch - grub2-add-module-for-boot-loader-interface.patch - 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch - 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch - 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch - 0001-loader-linux-Ensure-the-newc-pathname-is-NULL-termin.patch - 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch - 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch - 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch - 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
* Patch modified to new base version: - use-grub2-as-a-package-name.patch - grub2-fix-menu-in-xen-host-server.patch - grub2-secureboot-add-linuxefi.patch - grub2-secureboot-chainloader.patch - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch - grub2-s390x-03-output-7-bit-ascii.patch - grub2-s390x-04-grub2-install.patch - grub2-use-rpmsort-for-version-sorting.patch - grub2-getroot-treat-mdadm-ddf-as-simple-device.patch - grub2-grubenv-in-btrfs-header.patch - grub2-commands-introduce-read_file-subcommand.patch - grub2-efi-chainload-harder.patch - grub2-emu-4-all.patch - grub2-util-30_os-prober-multiple-initrd.patch - grub2-install-fix-not-a-directory-error.patch - grub-install-force-journal-draining-to-ensure-data-i.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-btrfs-04-grub2-install.patch - grub2-btrfs-05-grub2-mkconfig.patch - grub2-btrfs-06-subvol-mount.patch - grub2-efi-xen-chainload.patch - grub2-efi-xen-cmdline.patch - grub2-efi-xen-removable.patch - grub2-suse-remove-linux-root-param.patch - grub2-ppc64le-disable-video.patch - grub2-install-remove-useless-check-PReP-partition-is-empty.patch - 0004-efinet-UEFI-IPv6-PXE-support.patch - 0007-efinet-Setting-network-from-UEFI-device-path.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch - 0001-add-support-for-UEFI-network-protocols.patch - grub2-mkconfig-default-entry-correction.patch - grub2-s390x-11-secureboot.patch - grub2-secureboot-install-signed-grub.patch - grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch - 0002-cmdline-Provide-cmdline-functions-as-module.patch - 0001-efi-linux-provide-linux-command.patch - 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch - 0004-arm-arm64-loader-Better-memory-allocation-and-error-.patch - 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch - 0001-Factor-out-grub_efi_linux_boot.patch - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch - 0015-test_asn1-test-module-for-libtasn1.patch - 0021-appended-signatures-documentation.patch - 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch - 0003-grub-install-support-prep-environment-block.patch - 0004-Introduce-prep_load_env-command.patch - 0001-grub-install-bailout-root-device-probing.patch - 0001-install-fix-software-raid1-on-esp.patch - 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch - 0001-protectors-Add-key-protectors-framework.patch - 0002-tpm2-Add-TPM-Software-Stack-TSS.patch - 0004-cryptodisk-Support-key-protectors.patch - 0008-linuxefi-Use-common-grub_initrd_load.patch - 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch - grub-read-pcr.patch - tpm-record-pcrs.patch - 0001-clean-up-crypttab-and-linux-modules-dependency.patch
* Patch refreshed: - rename-grub-info-file-to-grub2.patch - grub2-linux.patch - grub2-simplefb.patch - grub2-ppc-terminfo.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-linuxefi-fix-boot-params.patch - grub2-s390x-05-grub2-mkconfig.patch - grub2-xen-linux16.patch - grub2-efi-disable-video-cirrus-and-bochus.patch - grub2-vbe-blacklist-preferred-1440x900x32.patch - grub2-mkconfig-aarch64.patch - grub2-menu-unrestricted.patch - grub2-mkconfig-arm.patch - grub2-s390x-06-loadparm.patch - grub2-s390x-07-add-image-param-for-zipl-setup.patch - grub2-s390x-08-workaround-part-to-disk.patch - grub2-diskfilter-support-pv-without-metadatacopies.patch - grub2-getroot-support-nvdimm.patch - grub2-s390x-skip-zfcpdump-image.patch - grub2-btrfs-02-export-subvolume-envvars.patch - grub2-btrfs-03-follow_default.patch - grub2-btrfs-07-subvol-fallback.patch - grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch - grub2-btrfs-09-get-default-subvolume.patch - grub2-btrfs-10-config-directory.patch - grub2-efi-xen-cfg-unquote.patch - grub2-Add-hidden-menu-entries.patch - grub2-SUSE-Add-the-t-hotkey.patch - grub2-ppc64le-memory-map.patch - grub2-ppc64-cas-reboot-support.patch - grub2-ppc64-cas-new-scope.patch - grub2-ppc64-cas-fix-double-free.patch - 0003-bootp-New-net_bootp6-command.patch - 0005-grub.texi-Add-net_bootp6-doument.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0012-tpm-Build-tpm-as-module.patch - 0002-AUDIT-0-http-boot-tracker-bug.patch - grub2-btrfs-help-on-snapper-rollback.patch - grub2-video-limit-the-resolution-for-fixed-bimap-font.patch - 0001-kern-mm.c-Make-grub_calloc-inline.patch - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch - 0002-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch - 0003-Make-grub_error-more-verbose.patch - 0001-ieee1275-Avoiding-many-unecessary-open-close.patch - 0001-Workaround-volatile-efi-boot-variable.patch - 0001-templates-Follow-the-path-of-usr-merged-kernel-confi.patch - 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch - 0005-docs-grub-Document-signing-grub-under-UEFI.patch - 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch - 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch - 0008-pgp-factor-out-rsa_pad.patch - 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch - 0011-libtasn1-import-libtasn1-4.18.0.patch - 0014-libtasn1-compile-into-asn1-module.patch - 0016-grub-install-support-embedding-x509-certificates.patch - 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch - 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch - 0019-appended-signatures-support-verifying-appended-signa.patch - 0020-appended-signatures-verification-tests.patch - 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch - 0002-Add-grub_disk_write_tail-helper-function.patch - 0005-export-environment-at-start-up.patch - 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch - 0003-protectors-Add-TPM2-Key-Protector.patch - 0005-util-grub-protect-Add-new-tool.patch - 0010-templates-import-etc-crypttab-to-grub.cfg.patch - grub-install-record-pcrs.patch - safe_tpm_pcr_snapshot.patch - 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch - 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch - 0002-discard-cached-key-before-entering-grub-shell-and-ed.patch - 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch - 0002-Restrict-cryptsetup-key-file-permission-for-better-s.patch
* New: - 0001-xen_boot-add-missing-grub_arch_efi_linux_load_image_.patch - 0001-font-Try-memdisk-fonts-with-the-same-name.patch - 0001-Make-grub.cfg-compatible-to-old-binaries.patch - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch
* Embedding fonts in the grub.efi to get signed for secure boot
* Wed Jul 26 2023 mchangAATTsuse.com- Fix error message \"unknown command tpm_record_pcrs\" with encrypted boot and no tpm device present (bsc#1213547)
* 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
* Tue May 30 2023 dmuellerAATTsuse.com- add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch, 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch:
* support more featureful extX filesystems (backport from upstream git)
* Thu May 04 2023 mchangAATTsuse.com- grub2-once: Fix \'sh: terminal_output: command not found\' error (bsc#1204563)
* Wed Apr 26 2023 glinAATTsuse.com- Exclude the deprecated EFI location, /usr/lib64/efi/, from Tumbleweed and ALP
* Fri Apr 21 2023 glinAATTsuse.com- Update TPM 2.0 key unsealing patches
* Add the new upstreaming patches 0001-protectors-Add-key-protectors-framework.patch 0002-tpm2-Add-TPM-Software-Stack-TSS.patch 0003-protectors-Add-TPM2-Key-Protector.patch 0004-cryptodisk-Support-key-protectors.patch 0005-util-grub-protect-Add-new-tool.patch
* Add the authorized policy patches based on the upstreaming patches 0001-tpm2-Add-TPM2-types-structures-and-command-constants.patch 0002-tpm2-Add-more-marshal-unmarshal-functions.patch 0003-tpm2-Implement-more-TPM2-commands.patch 0004-tpm2-Support-authorized-policy.patch
* Drop the old patches 0010-protectors-Add-key-protectors-framework.patch 0011-tpm2-Add-TPM-Software-Stack-TSS.patch 0012-protectors-Add-TPM2-Key-Protector.patch 0013-cryptodisk-Support-key-protectors.patch 0014-util-grub-protect-Add-new-tool.patch fix-tpm2-build.patch tpm-protector-dont-measure-sealed-key.patch tpm-protector-export-secret-key.patch grub-unseal-debug.patch 0001-tpm2-adjust-the-input-parameters-of-TPM2_EvictContro.patch 0002-tpm2-declare-the-input-arguments-of-TPM2-functions-a.patch 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch 0004-tpm2-add-new-TPM2-types-structures-and-command-const.patch 0005-tpm2-add-more-marshal-unmarshal-functions.patch 0006-tpm2-check-the-command-parameters-of-TPM2-commands.patch 0007-tpm2-pack-the-missing-authorization-command-for-TPM2.patch 0008-tpm2-allow-some-command-parameters-to-be-NULL.patch 0009-tpm2-remove-the-unnecessary-variables.patch 0010-tpm2-add-TPM2-commands-to-support-authorized-policy.patch 0011-tpm2-make-the-file-reading-unmarshal-functions-gener.patch 0012-tpm2-initialize-the-PCR-selection-list-early.patch 0013-tpm2-support-unsealing-key-with-authorized-policy.patch
* Refresh grub-read-pcr.patch
* Introduce a new build requirement: libtasn1-devel- Only package grub2-protect for the architectures with EFI support
* Fri Apr 21 2023 mchangAATTsuse.com- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
* 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
* 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch
* Tue Apr 18 2023 mchangAATTsuse.com- Fix no prep partition error on non-PReP architectures by making the prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
* 0004-Introduce-prep_load_env-command.patch- Fix the issue of freeing an uninitialized pointer
* 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch- Rediff
* 0005-export-environment-at-start-up.patch
* 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
* Tue Apr 11 2023 mchangAATTsuse.com- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made enhancements to PPC secure boot\'s root device discovery config (bsc#1207230)- Ensure get_devargs and get_devname functions are consistent
* 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch- Fix regex for Open Firmware device specifier with encoded commas
* 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch- Fix regular expression in PPC secure boot config to prevent escaped commas from being treated as delimiters when retrieving partition substrings.- Use prep_load_env in PPC secure boot config to handle unset host-specific environment variables and ensure successful command execution.
* 0004-Introduce-prep_load_env-command.patch- Refreshed
* 0005-export-environment-at-start-up.patch
* Thu Mar 23 2023 mchangAATTsuse.com- Fix aarch64 kiwi image\'s file not found due to \'/AATT\' prepended to path in btrfs filesystem. (bsc#1209165)
* grub2-btrfs-05-grub2-mkconfig.patch
* Mon Mar 20 2023 mchangAATTsuse.com- Restrict cryptsetup key file permission for better security (bsc#1207499)
* 0001-loader-linux-Ensure-the-newc-pathname-is-NULL-termin.patch
* 0002-Restrict-cryptsetup-key-file-permission-for-better-s.patch
* Wed Mar 15 2023 hpjAATTurpla.net- Meanwhile, memtest86+ gained EFI support, but using the grub command line to run it manually is quite tedious... Adapt 20_memtest86+ to provide a proper menu entry. Executing memtest requires to turn security off in BIOS: (Boot Mode: Other OS).
* Mon Mar 13 2023 rwAATTsuse.com- Tolerate kernel moved out of /boot. (bsc#1184804)
* grub2-s390x-12-zipl-setup-usrmerge.patch
* Mon Mar 06 2023 mchangAATTsuse.com- Discard cached key from grub shell and editor mode
* 0001-clean-up-crypttab-and-linux-modules-dependency.patch
* 0002-discard-cached-key-before-entering-grub-shell-and-ed.patch
* Fri Mar 03 2023 mchangAATTsuse.com- Make grub more robust against storage race condition causing system boot failures (bsc#1189036)
* 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch
* Wed Mar 01 2023 mchangAATTsuse.com- Fix riscv64 error for relocation 0x13 is not implemented yet
* 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch
* Wed Feb 22 2023 mchangAATTsuse.com- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
* 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
* 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch- Fix lpar got hung at grub after inactive migration (bsc#1207684)
* 0002-ieee1275-implement-vec5-for-cas-negotiation.patch- Rediff
* safe_tpm_pcr_snapshot.patch- Patch supersceded
* 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
* Wed Feb 15 2023 glinAATTsuse.com- Refresh 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch to handle the TPM2 responseCode correctly.
* Fri Feb 10 2023 valentin.lefebvreAATTsuse.com- Add module for boot loader interface. Needed for load Unified Kernel Image (UKI)
* grub2-add-module-for-boot-loader-interface.patch
* Thu Feb 09 2023 glinAATTsuse.com- Amend the TPM2 stack and add authorized policy mode to tpm2_key_protector
* 0001-tpm2-adjust-the-input-parameters-of-TPM2_EvictContro.patch
* 0002-tpm2-declare-the-input-arguments-of-TPM2-functions-a.patch
* 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch
* 0004-tpm2-add-new-TPM2-types-structures-and-command-const.patch
* 0005-tpm2-add-more-marshal-unmarshal-functions.patch
* 0006-tpm2-check-the-command-parameters-of-TPM2-commands.patch
* 0007-tpm2-pack-the-missing-authorization-command-for-TPM2.patch
* 0008-tpm2-allow-some-command-parameters-to-be-NULL.patch
* 0009-tpm2-remove-the-unnecessary-variables.patch
* 0010-tpm2-add-TPM2-commands-to-support-authorized-policy.patch
* 0011-tpm2-make-the-file-reading-unmarshal-functions-gener.patch
* 0012-tpm2-initialize-the-PCR-selection-list-early.patch
* 0013-tpm2-support-unsealing-key-with-authorized-policy.patch
* Wed Feb 08 2023 mchangAATTsuse.com- Fix nvmf boot device setup (bsc#1207811)
* 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch
* Tue Feb 07 2023 mchangAATTsuse.com- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
* 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
* Sat Feb 04 2023 mchangAATTsuse.com- Fix GCC 13 build failure (bsc#1201089)
* 0002-AUDIT-0-http-boot-tracker-bug.patch
* Tue Jan 03 2023 glinAATTsuse.com- Move unsupported zfs modules into \'extras\' packages (bsc#1205554) (PED-2947)
* Fri Dec 30 2022 mchangAATTsuse.com- Fix inappropriately including commented lines in crypttab (bsc#1206279)
* 0010-templates-import-etc-crypttab-to-grub.cfg.patch
* Fri Dec 23 2022 mchangAATTsuse.com- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)- Removed patch linuxefi
* grub2-secureboot-provide-linuxefi-config.patch
* grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
* grub2-secureboot-use-linuxefi-on-uefi.patch- Rediff
* grub2-btrfs-05-grub2-mkconfig.patch
* grub2-efi-xen-cmdline.patch
* grub2-s390x-05-grub2-mkconfig.patch
* grub2-suse-remove-linux-root-param.patch
* Mon Dec 19 2022 mchangAATTsuse.com- Setup multiple device paths for a nvmf boot device (bsc#1205666)
* 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch
* Fri Dec 16 2022 glinAATTsuse.com- Increase the path buffer in the crypttab command for the long volume name (bsc#1206333)
* grub2-increase-crypttab-path-buffer.patch
* Mon Dec 05 2022 mchangAATTsuse.com- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)- Increase initial heap size from 1/4 to 1/3
* 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch
* Tue Nov 22 2022 mchangAATTsuse.com- Make full utilization of btrfs bootloader area (bsc#1161823)
* 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch
* 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch- Patch removed
* 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch
* Mon Nov 21 2022 mchangAATTsuse.com- Fix regression of reverting back to asking password twice when a keyfile is already used (bsc#1205309)
* 0010-templates-import-etc-crypttab-to-grub.cfg.patch
* Wed Nov 16 2022 mchangAATTsuse.com- Security fixes and hardenings
* 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
* 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch- Fix CVE-2022-2601 (bsc#1205178)
* 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
* 0004-font-Remove-grub_font_dup_glyph.patch
* 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
* 0006-font-Fix-integer-overflow-in-BMP-index.patch
* 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
* 0008-fbutil-Fix-integer-overflow.patch- Fix CVE-2022-3775 (bsc#1205182)
* 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
* 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
* 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
* 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch- Bump upstream SBAT generation to 3
* Mon Nov 14 2022 mchangAATTsuse.com- Removed 0001-linux-fix-efi_relocate_kernel-failure.patch as reported regression in some hardware being stuck in initrd loading (bsc#1205380)
* Mon Nov 14 2022 mchangAATTsuse.com- Fix password asked twice if third field in crypttab not present (bsc#1205312)
* 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
* Fri Oct 28 2022 mchangAATTsuse.com- NVMeoFC support on grub (jsc#PED-996)
* 0001-ieee1275-add-support-for-NVMeoFC.patch
* 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
* 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
* 0004-ofpath-controller-name-update.patch- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
* 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
* 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
* 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
* 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
* 0002-ieee1275-implement-vec5-for-cas-negotiation.patch- Fix efi pcr snapshot related funtion is defined but not used on powerpc platform.
* safe_tpm_pcr_snapshot.patch
* Mon Oct 24 2022 mchangAATTsuse.com- Include loopback into signed grub2 image (jsc#PED-2150)
* Thu Oct 06 2022 mchangAATTsuse.com- Fix firmware oops after disk decrypting failure (bsc#1204037)
* 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
* Fri Sep 23 2022 mchangAATTsuse.com- Add patch to fix kernel relocation error in low memory
* 0001-linux-fix-efi_relocate_kernel-failure.patch
* Mon Sep 19 2022 mchangAATTsuse.com- Add safety measure to pcr snapshot by checking platform and tpm status
* safe_tpm_pcr_snapshot.patch
* Fri Sep 16 2022 mchangAATTsuse.com- Fix installation failure due to unavailable nvram device on ppc64le (bsc#1201361)
* 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch
* Fri Sep 16 2022 glinAATTsuse.com- Add patches to dynamically allocate additional memory regions for EFI systems (bsc#1202438)
* 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch
* 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch
* 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch
* 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch
* 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch- Enlarge the default heap size and defer the disk cache invalidation (bsc#1202438)
* 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch
* 0002-mm-Defer-the-disk-cache-invalidation.patch
* Thu Sep 15 2022 mchangAATTsuse.com- Add patches for ALP FDE support
* 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
* 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
* 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch
* 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch
* 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch
* 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch
* 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch
* 0008-linuxefi-Use-common-grub_initrd_load.patch
* 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
* 0010-templates-import-etc-crypttab-to-grub.cfg.patch
* grub-read-pcr.patch
* efi-set-variable-with-attrs.patch
* tpm-record-pcrs.patch
* tpm-protector-dont-measure-sealed-key.patch
* tpm-protector-export-secret-key.patch
* grub-install-record-pcrs.patch
* grub-unseal-debug.patch
* Mon Aug 29 2022 mchangAATTsuse.com- Fix out of memory error cannot be prevented via disabling tpm (bsc#1202438)
* 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
* Thu Aug 18 2022 mchangAATTsuse.com- Fix tpm error stop tumbleweed from booting (bsc#1202374)
* 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch- Patch Removed
* 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch
* Wed Jun 08 2022 mchangAATTsuse.com- Add tpm, tpm2, luks2 and gcry_sha512 to default grub.efi (bsc#1197625)- Make grub-tpm.efi a symlink to grub.efi
* grub2.spec- Log error when tpm event log is full and continue
* 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch- Patch superseded
* 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
* Wed Jun 08 2022 mchangAATTsuse.com- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
* 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
* 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
* 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
* 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
* 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
* 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
* 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
* 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
* 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
* 0010-protectors-Add-key-protectors-framework.patch
* 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
* 0012-protectors-Add-TPM2-Key-Protector.patch
* 0013-cryptodisk-Support-key-protectors.patch
* 0014-util-grub-protect-Add-new-tool.patch- Fix no disk unlocking happen (bsc#1196668)
* 0001-crytodisk-fix-cryptodisk-module-looking-up.patch- Fix build error
* fix-tpm2-build.patch
* Tue May 31 2022 mchangAATTsuse.com- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
* 0001-video-Remove-trailing-whitespaces.patch
* 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
* 0003-commands-boot-Add-API-to-pass-context-to-loader.patch- Fix CVE-2022-28736 (bsc#1198496)
* 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch- Fix CVE-2022-28735 (bsc#1198495)
* 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
* 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
* 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
* 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch- Fix CVE-2021-3695 (bsc#1191184)
* 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch- Fix CVE-2021-3696 (bsc#1191185)
* 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
* 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
* 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
* 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
* 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch- Fix CVE-2021-3697 (bsc#1191186)
* 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
* 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch- Fix CVE-2022-28733 (bsc#1198460)
* 0017-net-ip-Do-IP-fragment-maths-safely.patch
* 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
* 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
* 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
* 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
* 0022-net-tftp-Avoid-a-trivial-UAF.patch
* 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch- Fix CVE-2022-28734 (bsc#1198493)
* 0024-net-http-Fix-OOB-write-for-split-http-headers.patch- Fix CVE-2022-28734 (bsc#1198493)
* 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
* 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
* 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
* 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
* 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
* 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
* 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
* 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch- Bump grub\'s SBAT generation to 2
* Tue May 31 2022 mchangAATTsuse.com- Use boot disks in OpenFirmware, fixing regression caused by 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when the root LV is completely in the boot LUN (bsc#1197948)
* 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch
* Thu May 26 2022 mchangAATTsuse.com- Fix error message in displaying help on bootable snapshot (bsc#1199609)
* Tue May 17 2022 mchangAATTsuse.com- Fix installation over serial console ends up in infinite boot loop (bsc#1187810) (bsc#1209667) (bsc#1209372)
* 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch- Fix ppc64le build error for new IEEE long double ABI
* 0001-libc-config-merge-from-glibc.patch
* Thu Apr 21 2022 mchangAATTsuse.com- Fix Power10 LPAR error \"The partition fails to activate as partition went into invalid state\" (bsc#1198714)
* 0001-powerpc-do-CAS-in-a-more-compatible-way.patch
* Mon Apr 11 2022 lnusselAATTsuse.de- use common SBAT values (boo#1193282)
* Fri Mar 25 2022 mchangAATTsuse.com- Fix wrong order in kernel sorting of listing rc before final release (bsc#1197376)
* grub2-use-rpmsort-for-version-sorting.patch
* Fri Mar 18 2022 mchangAATTsuse.com- Fix duplicated insmod part_gpt lines in grub.cfg (bsc#1197186)
* 0001-grub-probe-Deduplicate-probed-partmap-output.patch
* Wed Mar 16 2022 mchangAATTsuse.com- Fix GCC 12 build failure (bsc#1196546)
* 0001-mkimage-Fix-dangling-pointer-may-be-used-error.patch
* 0002-Fix-Werror-array-bounds-array-subscript-0-is-outside.patch
* 0003-reed_solomon-Fix-array-subscript-0-is-outside-array-.patch- Revised
* grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
* 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch
* Fri Mar 11 2022 mchangAATTsuse.com- Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204)
* 0001-install-fix-software-raid1-on-esp.patch
* Thu Mar 10 2022 mchangAATTsuse.com- Fix riscv64 build error
* 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch
* Thu Mar 10 2022 mchangAATTsuse.com- Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974)
* 0001-grub-install-bailout-root-device-probing.patch
* Fri Mar 04 2022 mchangAATTsuse.com- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
* 0001-Add-grub_envblk_buf-helper-function.patch
* 0002-Add-grub_disk_write_tail-helper-function.patch
* 0003-grub-install-support-prep-environment-block.patch
* 0004-Introduce-prep_load_env-command.patch
* 0005-export-environment-at-start-up.patch- Use enviroment variable in early boot config to looking up root device
* grub2.spec
* Tue Mar 01 2022 msuchanekAATTsuse.com- Remove obsolete openSUSE 12.2 conditionals in spec file- Clean up powerpc certificate handling.
* Thu Feb 10 2022 bjorn.lieAATTgmail.com- Set grub2-check-default shebang to \"#!/bin/bash\", as the the code uses many instructions which are undefined for a POSIX sh. (boo#1195794).
* Fri Jan 14 2022 mchangAATTsuse.com- Power guest secure boot with static keys: GRUB2 signing portion (jsc#SLE-18271) (bsc#1192764)
* 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch
* Thu Jan 13 2022 mchangAATTsuse.com- Fix wrong default entry when booting snapshot (bsc#1159205)
* grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch
* Tue Jan 11 2022 mchangAATTsuse.com- Power guest secure boot with static keys: GRUB2 signing portion (jsc#SLE-18271) (bsc#1192764)
* grub2.spec- Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144) (bsc#1192686)
* 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch
* 0002-ieee1275-claim-more-memory.patch
* 0003-ieee1275-request-memory-with-ibm-client-architecture.patch
* 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
* 0005-docs-grub-Document-signing-grub-under-UEFI.patch
* 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
* 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
* 0008-pgp-factor-out-rsa_pad.patch
* 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
* 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
* 0011-libtasn1-import-libtasn1-4.18.0.patch
* 0012-libtasn1-disable-code-not-needed-in-grub.patch
* 0013-libtasn1-changes-for-grub-compatibility.patch
* 0014-libtasn1-compile-into-asn1-module.patch
* 0015-test_asn1-test-module-for-libtasn1.patch
* 0016-grub-install-support-embedding-x509-certificates.patch
* 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
* 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
* 0019-appended-signatures-support-verifying-appended-signa.patch
* 0020-appended-signatures-verification-tests.patch
* 0021-appended-signatures-documentation.patch
* 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
* 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch
* Mon Jan 10 2022 mchangAATTsuse.com- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090)
* grub2-systemd-sleep-plugin
* Tue Dec 21 2021 mchangAATTsuse.com- Fix CVE-2021-3981 (bsc#1189644)
* 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch
* Fri Dec 17 2021 mchangAATTsuse.com- Fix can\'t allocate initrd error (bsc#1191378)
* 0001-Factor-out-grub_efi_linux_boot.patch
* 0002-Fix-race-in-EFI-validation.patch
* 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
* 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
* 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
* 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
* 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
* 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
* 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
* 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
* 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch
* Wed Dec 08 2021 msuchanekAATTsuse.com- Add support for simplefb (boo#1193532). + grub2-simplefb.patch
* Mon Dec 06 2021 mchangAATTsuse.com- Fix extent not found when initramfs contains shared extents (bsc#1190982)
* 0001-fs-btrfs-Make-extent-item-iteration-to-handle-gaps.patch
* Thu Nov 11 2021 mchangAATTsuse.com- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
* 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
* 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch
* Thu Oct 21 2021 mchangAATTsuse.com- Remove openSUSE Tumbleweed specific handling for default grub distributor (bsc#1191198)- Use /usr/lib/os-release as fallback (bsc#1191196)
* grub2-default-distributor.patch
* grub2-check-default.sh- VUL-0: grub2: grub2-once uses fixed file name in /var/tmp (bsc#1190474) (CVE-2021-46705)
* grub2-once
* grub2-once.service- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
* 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
* 0001-Filter-out-POSIX-locale-for-translation.patch- Fix error lvmid disk cannot be found after second disk added to the root volume group (bsc#1189874) (bsc#1071559)
* 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch- Fix error in grub installation due to unnecessary requirement to support excessive device for the root logical volume (bsc#1184135)
* 0001-disk-diskfilter-Use-nodes-in-logical-volume-s-segmen.patch- Fix regression in reading xfs v4
* 0001-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock.patch
* Tue Oct 19 2021 fvogtAATTsuse.com- Fix installation on usrmerged s390x
* Wed Sep 22 2021 rwAATTsuse.com- Improve support for SLE Micro 5.1 on s390x. (bsc#1190395)
* amend grub2-s390x-04-grub2-install.patch
* refresh grub2-s390x-11-secureboot.patch
* Tue Sep 07 2021 mchangAATTsuse.com- Follow usr merge for looking up kernel config (bsc#1189782) (bsc#1190061)
* 0001-templates-Follow-the-path-of-usr-merged-kernel-confi.patch
* Wed Sep 01 2021 mchangAATTsuse.com- Add btrfs zstd compression on i386-pc and also make sure it won\'t break existing grub installations (bsc#1161823)
* deleted 0001-btrfs-disable-zstd-support-for-i386-pc.patch
* added 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch
* Tue Aug 31 2021 pvorelAATTsuse.cz- Delete the author list from %description (the %description section is literally for package descriptions (only) these days, encoding was also problematic).- Add %doc AUTHORS to get packaged that info
* Wed Aug 04 2021 seife+obsAATTb1-systems.com- update grub2-systemd-sleep.sh to fix hibernation by avoiding the error \"no kernelfile matching the running kernel found\" on usrmerged setup
* Wed Aug 04 2021 fvogtAATTsuse.com- Use %autosetup
* Thu Jul 22 2021 pvorelAATTsuse.cz- Replace grub2-use-stat-instead-of-udevadm-for-partition-lookup.patch and fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch with upstream backport: 0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch and 0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch.
* Mon Jun 28 2021 mchangAATTsuse.com- Fix error not a btrfs filesystem on s390x (bsc#1187645)
* 80_suse_btrfs_snapshot
* Wed Jun 23 2021 mchangAATTsuse.com- Fix error gfxterm isn\'t found with multiple terminals (bsc#1187565)
* grub2-fix-error-terminal-gfxterm-isn-t-found.patch
* Mon Jun 21 2021 mchangAATTsuse.com- Fix boot failure after kdump due to the content of grub.cfg is not completed with pending modificaton in xfs journal (bsc#1186975)
* grub-install-force-journal-draining-to-ensure-data-i.patch- Patch refreshed
* grub2-mkconfig-default-entry-correction.patch
* Thu Jun 03 2021 mchangAATTsuse.com- Version bump to 2.06
* rediff - 0001-add-support-for-UEFI-network-protocols.patch - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch - 0003-Make-grub_error-more-verbose.patch - 0003-bootp-New-net_bootp6-command.patch - 0005-grub.texi-Add-net_bootp6-doument.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0006-efi-Set-image-base-address-before-jumping-to-the-PE-.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch - grub-install-force-journal-draining-to-ensure-data-i.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-diskfilter-support-pv-without-metadatacopies.patch - grub2-efi-HP-workaround.patch - grub2-efi-xen-cfg-unquote.patch - grub2-efi-xen-chainload.patch - grub2-fix-menu-in-xen-host-server.patch - grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch - grub2-install-remove-useless-check-PReP-partition-is-empty.patch - grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch - grub2-mkconfig-default-entry-correction.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-s390x-03-output-7-bit-ascii.patch - grub2-s390x-04-grub2-install.patch - grub2-secureboot-install-signed-grub.patch - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch - use-grub2-as-a-package-name.patch
* update by patch squashed: - 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch - grub2-efi-chainload-harder.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-secureboot-chainloader.patch - grub2-secureboot-add-linuxefi.patch
* remove squashed patches: - 0008-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch - 0009-squash-Add-support-for-linuxefi.patch - 0041-squash-Add-secureboot-support-on-efi-chainloader.patch - 0042-squash-grub2-efi-chainload-harder.patch - 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch - 0045-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch
* drop upstream patches: - 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch - 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch - 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch - 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch - 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch - 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch - 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch - 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch - 0002-kern-Add-X-option-to-printf-functions.patch - 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch - 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch - 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch - 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch - 0003-normal-main-Search-for-specific-config-files-for-net.patch - 0004-calloc-Use-calloc-at-most-places.patch - 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch - 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch - 0005-Make-linux_arm_kernel_header.hdr_offset-be-at-the-ri.patch - 0005-efi-Add-secure-boot-detection.patch - 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch - 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch - 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch - 0007-font-Do-not-load-more-than-one-NAME-section.patch - 0007-verifiers-Move-verifiers-API-to-kernel-image.patch - 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch - 0008-script-Remove-unused-fields-from-grub_script_functio.patch - 0009-kern-Add-lockdown-support.patch - 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch - 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch - 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch - 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch - 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch - 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch - 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch - 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch - 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch - 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch - 0018-gdb-Restrict-GDB-access-when-locked-down.patch - 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch - 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch - 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch - 0022-lib-arg-Block-repeated-short-options-that-require-an.patch - 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch - 0024-kern-parser-Fix-resource-leak-if-argc-0.patch - 0025-kern-parser-Fix-a-memory-leak.patch - 0026-kern-parser-Introduce-process_char-helper.patch - 0027-kern-parser-Introduce-terminate_arg-helper.patch - 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch - 0029-kern-buffer-Add-variable-sized-heap-buffer.patch - 0030-kern-parser-Fix-a-stack-buffer-overflow.patch - 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch - 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch - 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch - 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch - 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch - 0036-util-mkimage-Improve-data_size-value-calculation.patch - 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch - 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch - 0039-grub-install-common-Add-sbat-option.patch - 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch - grub-install-define-default-platform-for-risc-v.patch - grub2-editenv-add-warning-message.patch - grub2-efi-gop-add-blt.patch - grub2-efi-uga-64bit-fb.patch - grub2-verifiers-fix-system-freeze-if-verify-failed.patch - risc-v-add-clzdi2-symbol.patch - risc-v-fix-computation-of-pc-relative-relocation-offset.patch- Add grub2-instdev-fixup.pl for correcting /etc/default/grub_installdevice to use disk devie if grub has been installed to it- Add 0001-30_uefi-firmware-fix-printf-format-with-null-byte.patch to fix detection of efi fwsetup support
* Mon May 31 2021 mchangAATTsuse.com- Fix running grub2-once leads to failure of starting systemd service in the boot sequence (bsc#1169460)
* grub2-once
* grub2-once.service
* Fri May 28 2021 mchangAATTsuse.com- Fix crash in launching gfxmenu without theme file (bsc#1186481)
* grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
* Tue May 11 2021 mchangAATTsuse.com- Fix plaintext password in grub config didn\'t work to unlock menu entry if enabling secure boot in UEFI (bsc#1181892)
* Fri Apr 23 2021 mchangAATTsuse.com- Fix obsolete syslog in systemd unit file and updating to use journal as StandardOutput (bsc#1185149)
* grub2-once.service
* Mon Apr 19 2021 mchangAATTsuse.com- Fix build error on armv6/armv7 (bsc#1184712)
* 0001-emu-fix-executable-stack-marking.patch
* Thu Apr 08 2021 mchangAATTsuse.com- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
* 0001-Workaround-volatile-efi-boot-variable.patch
* Tue Mar 16 2021 mchangAATTsuse.com- Fix powerpc-ieee1275 lpar takes long time to boot with increasing number of nvme namespace (bsc#1177751) 0001-ieee1275-Avoiding-many-unecessary-open-close.patch
* Thu Mar 11 2021 mchangAATTsuse.com- Fix chainloading windows on dual boot machine (bsc#1183073)
* 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch
* Fri Feb 26 2021 mchangAATTsuse.com- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
* 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
* 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
* 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
* 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
* 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
* 0036-util-mkimage-Improve-data_size-value-calculation.patch
* 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
* 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
* 0039-grub-install-common-Add-sbat-option.patch- Fix CVE-2021-20225 (bsc#1182262)
* 0022-lib-arg-Block-repeated-short-options-that-require-an.patch- Fix CVE-2020-27749 (bsc#1179264)
* 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
* 0025-kern-parser-Fix-a-memory-leak.patch
* 0026-kern-parser-Introduce-process_char-helper.patch
* 0027-kern-parser-Introduce-terminate_arg-helper.patch
* 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
* 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
* 0030-kern-parser-Fix-a-stack-buffer-overflow.patch- Fix CVE-2021-20233 (bsc#1182263)
* 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch- Fix CVE-2020-25647 (bsc#1177883)
* 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch- Fix CVE-2020-25632 (bsc#1176711)
* 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
* 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
* 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
* 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
* 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
* 0005-efi-Add-secure-boot-detection.patch
* 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
* 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
* 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
* 0009-kern-Add-lockdown-support.patch
* 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
* 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
* 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
* 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
* 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
* 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
* 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
* 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
* 0018-gdb-Restrict-GDB-access-when-locked-down.patch
* 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
* 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
* 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
* 0042-squash-grub2-efi-chainload-harder.patch
* 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
* 0044-squash-kern-Add-lockdown-support.patch
* 0045-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch
* 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch- Drop patch supersceded by the new backport
* 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
* 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
* 0007-linuxefi-fail-kernel-validation-without-shim-protoco.patch- Add SBAT metadata section to grub.efi- Drop shim_lock module as it is part of core of grub.efi
* grub2.spec
* Mon Feb 22 2021 mchangAATTsuse.com- Fix build error in binutils 2.36 (bsc#1181741)
* 0001-Fix-build-error-in-binutils-2.36.patch- Fix executable stack in grub-emu (bsc#1181696)
* 0001-emu-fix-executable-stack-marking.patch
* Thu Feb 18 2021 mchangAATTsuse.com- Restore compatibilty sym-links
* grub2.spec- Use rpmlintrc to filter out rpmlint 2.0 error (bsc#1179044)
* grub2.rpmlintrc
* Wed Jan 27 2021 mchangAATTsuse.com- Complete Secure Boot support on aarch64 (jsc#SLE-15020)
* 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch
* 0002-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch
* 0003-Make-grub_error-more-verbose.patch
* 0004-arm-arm64-loader-Better-memory-allocation-and-error-.patch
* 0005-Make-linux_arm_kernel_header.hdr_offset-be-at-the-ri.patch
* 0006-efi-Set-image-base-address-before-jumping-to-the-PE-.patch
* 0007-linuxefi-fail-kernel-validation-without-shim-protoco.patch
* 0008-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch
* 0009-squash-Add-support-for-linuxefi.patch
* Thu Jan 21 2021 mchangAATTsuse.com- Fix rpmlint 2.0 error for having arch specific path in noarch package aiming for compatibility with old package (bsc#1179044)
* grub2.spec- Fix non POSIX sed argument which failed in sed from busybox (bsc#1181091)
* grub2-check-default.sh
* Mon Nov 02 2020 mchangAATTsuse.com- Fix boot failure in blocklist installation (bsc#1178278)
* Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch
* Thu Oct 22 2020 mchangAATTsuse.com- Fix grub2-install error with \"failed to get canonical path of `/boot/grub2/i386-pc\'.\" (bsc#1177957)
* Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch
* Wed Oct 14 2020 mchangAATTsuse.com- Fix https boot interrupted by unrecognised network address error message (bsc#1172952)
* 0001-add-support-for-UEFI-network-protocols.patch
* Tue Oct 13 2020 mchangAATTsuse.com- grub2.spec: Fix bare words used as string in expression which is no longer allowed in rpm 4.16
* Fri Sep 25 2020 mchangAATTsuse.com- Improve the error handling when grub2-install fails with short mbr gap (bsc#1176062)
* 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
* 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch
* Wed Sep 09 2020 mchangAATTsuse.com- Make efi hand off the default entry point of the linux command (bsc#1176134)
* 0001-efi-linux-provide-linux-command.patch
* Thu Aug 27 2020 mchangAATTsuse.com- Fix verification requested but nobody cares error when loading external module in secure boot off (bsc#1175766)
* 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
* Sat Aug 22 2020 mchangAATTsuse.com- Make consistent check to enable relative path on btrfs (bsc#1174567)
* 0001-Unify-the-check-to-enable-btrfs-relative-path.patch
* Fri Aug 21 2020 mchangAATTsuse.com- Add fibre channel device\'s ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745)
* 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
* 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch
* Tue Aug 18 2020 mchangAATTsuse.com- Fix for CVE-2020-15705 (bsc#1174421)
* 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
* 0002-cmdline-Provide-cmdline-functions-as-module.patch
* Thu Aug 13 2020 mchangAATTsuse.com- Make grub-calloc inline to avoid symbol not found error as the system may not use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
* 0001-kern-mm.c-Make-grub_calloc-inline.patch
* Mon Jul 27 2020 mchangAATTsuse.com- Fix for CVE-2020-10713 (bsc#1168994)
* 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812)
* 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
* 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
* 0004-calloc-Use-calloc-at-most-places.patch
* 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
* 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
* 0007-font-Do-not-load-more-than-one-NAME-section.patch- Fix CVE-2020-15706 (bsc#1174463)
* 0008-script-Remove-unused-fields-from-grub_script_functio.patch
* 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch- Fix CVE-2020-15707 (bsc#1174570)
* 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch- Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data- Use grub_calloc for overflow check and return NULL when it would occur
* 0001-add-support-for-UEFI-network-protocols.patch
* 0003-bootp-New-net_bootp6-command.patch
* grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
* grub2-btrfs-09-get-default-subvolume.patch
* grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
* grub2-grubenv-in-btrfs-header.patch
* Thu Jul 16 2020 normandAATTlinux.vnet.ibm.com- No 95_textmode for PowerPC (boo#1174166)
* Mon May 18 2020 mchangAATTsuse.com- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
* grub2-s390x-skip-zfcpdump-image.patch
* Tue May 05 2020 mchangAATTsuse.com- Fix boot failure as journaled data not get drained due to abrupt power off after grub-install (bsc#1167756)
* grub-install-force-journal-draining-to-ensure-data-i.patch
* Thu Apr 16 2020 mchangAATTsuse.com- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
* grub2-btrfs-06-subvol-mount.patch
* Tue Mar 24 2020 mchangAATTsuse.com- Fix GCC 10 build fail (bsc#1158189)
* 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
* 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch
* Fri Mar 20 2020 mchangAATTsuse.com- Backport to support searching for specific config files for netboot (bsc#1166409)
* 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
* 0002-kern-Add-X-option-to-printf-functions.patch
* 0003-normal-main-Search-for-specific-config-files-for-net.patch
* 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch
* Mon Mar 16 2020 lnusselAATTsuse.de- move
*.module files to separate -debug subpackage (boo#1166578)
* Thu Mar 12 2020 fvogtAATTsuse.com- Fix EFI console detection to make it a runtime decision (bsc#1164385)
* grub2-SUSE-Add-the-t-hotkey.patch
* Tue Mar 10 2020 lnusselAATTsuse.de- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)- remove info requirements, file triggers are used now (boo#1152105)
* Fri Feb 28 2020 rwAATTsuse.com- Add secure boot support for s390x. (jsc#SLE-9425)
* grub2-s390x-11-secureboot.patch
* Tue Feb 18 2020 mchangAATTsuse.com- Fix grub hangs after loading rogue image without valid signature for uefi secure boot (bsc#1159102)
* grub2-verifiers-fix-system-freeze-if-verify-failed.patch
* Tue Feb 04 2020 mchangAATTsuse.com- From Stefan Seyfried : Fix grub2-install fails with \"not a directory\" error (boo#1161641, bsc#1162403)
* grub2-install-fix-not-a-directory-error.patch
* Wed Nov 27 2019 olafAATTaepfle.de- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)- Correct linux and initrd handling in 20_linux_xen (bsc#1157912) M grub2-efi-xen-cfg-unquote.patch M grub2-efi-xen-chainload.patch M grub2-efi-xen-cmdline.patch M grub2-efi-xen-removable.patch
* Wed Oct 30 2019 mchangAATTsuse.com- Disable btrfs zstd support for i386-pc to workaround core.img too large to be embedded in btrfs bootloader area or MBR gap (boo#1154809)
* 0001-btrfs-disable-zstd-support-for-i386-pc.patch
* Mon Oct 28 2019 bwiedemannAATTsuse.com- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)
* Tue Oct 22 2019 schwabAATTsuse.de- Enable support for riscv64- Backports from upstream:
* risc-v-fix-computation-of-pc-relative-relocation-offset.patch
* risc-v-add-clzdi2-symbol.patch
* grub-install-define-default-platform-for-risc-v.patch
* Thu Oct 17 2019 mchangAATTsuse.com- Version bump to 2.04
* removed - translations-20170427.tar.xz
* grub2.spec - Make signed grub-tpm.efi specific to x86_64-efi build, the platform currently shipped with tpm module from upstream codebase - Add shim_lock to signed grub.efi in x86_64-efi build - x86_64: linuxefi now depends on linux, both will verify kernel via shim_lock - Remove translation tarball and po file hacks as it\'s been included in upstream tarball
* rediff - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch - grub2-commands-introduce-read_file-subcommand.patch - grub2-secureboot-add-linuxefi.patch - 0001-add-support-for-UEFI-network-protocols.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-install-signed-grub.patch - grub2-linux.patch - use-grub2-as-a-package-name.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-secureboot-use-linuxefi-on-uefi.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-secureboot-provide-linuxefi-config.patch - grub2-secureboot-chainloader.patch - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-s390x-04-grub2-install.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-efi-chainloader-root.patch - grub2-ppc64le-disable-video.patch - grub2-ppc64-cas-reboot-support.patch - grub2-Fix-incorrect-netmask-on-ppc64.patch - 0003-bootp-New-net_bootp6-command.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0012-tpm-Build-tpm-as-module.patch - grub2-emu-4-all.patch - grub2-btrfs-09-get-default-subvolume.patch - grub2-ppc64le-memory-map.patch - grub2-ppc64-cas-fix-double-free.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
* drop upstream patches - grub2-fix-locale-en.mo.gz-not-found-error-message.patch - grub2-fix-build-with-flex-2.6.4.patch - grub2-accept-empty-module.patch - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch - unix-exec-avoid-atexit-handlers-when-child-exits.patch - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch - grub2-binutils2.31.patch - grub2-msdos-fix-overflow.patch - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch - grub2-efi-Move-grub_reboot-into-kernel.patch - grub2-efi-Free-malloc-regions-on-exit.patch - grub2-move-initrd-upper.patch - 0002-Add-Virtual-LAN-support.patch - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch - 0001-tpm-Core-TPM-support.patch - 0002-tpm-Measure-kernel-initrd.patch - 0003-tpm-Add-BIOS-boot-measurement.patch - 0004-tpm-Rework-linux-command.patch - 0005-tpm-Rework-linux16-command.patch - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch - 0007-tpm-Measure-the-kernel-commandline.patch - 0008-tpm-Measure-commands.patch - 0009-tpm-Measure-multiboot-images-and-modules.patch - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch - 0011-tpm-Fix-build-error.patch - 0013-tpm-i386-pc-diskboot-img.patch - grub2-freetype-pkgconfig.patch - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch
* Tue Oct 15 2019 rwAATTsuse.com- Consistently find btrfs snapshots on s390x. (bsc#1136970)
* grub2-s390x-04-grub2-install.patch
* Fri Aug 16 2019 mchangAATTsuse.com- Fix fallback embed doesn\'t work when no post mbr gap at all (boo#1142229)
* Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
* Thu Jul 18 2019 mchangAATTsuse.com- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).
* Mon Jun 24 2019 msuchanekAATTsuse.de- Fix iteration of FCP LUNs (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).
* Refresh grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch
* Mon Jun 17 2019 mchangAATTsuse.com- Use grub2-install to handle signed grub installation for UEFI secure boot and also provide options to override default (bsc#1136601)
* grub2-secureboot-install-signed-grub.patch- Remove arm64 linuxefi patches as it\'s not needed for secure boot
* 0001-efi-refactor-grub_efi_allocate_pages.patch
* 0002-Remove-grub_efi_allocate_pages.patch
* 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
* 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
* 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
* 0006-Add-support-for-EFI-handover-on-ARM64.patch
* Fri Jun 14 2019 mchangAATTsuse.com- Avoid high resolution when trying to keep current mode (bsc#1133842)
* grub2-video-limit-the-resolution-for-fixed-bimap-font.patch- Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592)
* grub2-grubenv-in-btrfs-header.patch
* Fri May 17 2019 rwAATTsuse.com- Check/refresh zipl-kernel before hibernate on s390x. (bsc#940457) (Getting rid of hardcoded \'vmlinuz\', which failed on PPC as well.)
* grub2-systemd-sleep.sh
* Fri May 17 2019 rwAATTsuse.com- Try to refresh zipl-kernel on failed kexec. (bsc#1127293)
* grub2-s390x-04-grub2-install.patch- Fully support \"previous\" zipl-kernel, with \'mem=1G\' being available on dedicated entries. (bsc#928131)
* grub2-s390x-09-improve-zipl-setup.patch- Refresh
* grub2-zipl-setup-fix-btrfs-multipledev.patch
* Fri May 03 2019 mchangAATTsuse.com- Fix GCC 9 build failure (bsc#1121208)
* 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
* 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
* 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
* 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
* 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
* 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
* 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
* 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch
* Tue Mar 19 2019 mchangAATTsuse.com- Use %doc for older products for compatibility, or may end up with unsuccessful build result
* grub2.spec
* Tue Mar 19 2019 mchangAATTsuse.com- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on multipath SAN (bsc#1113702)
* deleted grub2-ieee1275-open-raw-mode.patch- Add exception handling to FCP lun enumeration (bsc#1113702)
* grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch
* Wed Feb 20 2019 mchangAATTsuse.com- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)
* Tue Feb 12 2019 mchangAATTsuse.com- Create compatibility sym-link of grub.xen in the old location to which old VM definition is pointing (bsc#1123942)
* Mon Jan 28 2019 guillaume.gardetAATTopensuse.org- Add patch to fix ARM boot, when kernel become too big:
* grub2-move-initrd-upper.patch (boo#1123350)
* Fri Jan 25 2019 jengelhAATTinai.de- Replace old $RPM_
* shell vars.
* Fri Jan 25 2019 mchangAATTsuse.com- Support long menu entry by scrolling its text left and right through the key stroke ctrl+l and ctrl+r (FATE#325760)
* grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
* Thu Jan 24 2019 mchangAATTsuse.com- Improved hiDPI device support (FATE#326680)
* grub2-video-limit-the-resolution-for-fixed-bimap-font.patch
* Wed Jan 23 2019 rwAATTsuse.com- Build platform-packages \'noarch\' and move to \'/usr/share/efi\' for SUSE Manager. (FATE#326960)
* grub2-efi-xen-chainload.patch (bsc#1122563)
* grub2-efi-xen-removable.patch (refresh)
* Thu Dec 20 2018 mchangAATTsuse.com- Support for UEFI Secure Boot on AArch64 (FATE#326541)
* 0001-efi-refactor-grub_efi_allocate_pages.patch
* 0002-Remove-grub_efi_allocate_pages.patch
* 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch
* 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch
* 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch
* 0006-Add-support-for-EFI-handover-on-ARM64.patch
* Mon Nov 26 2018 mchangAATTsuse.com- Change default tsc calibration method to pmtimer on EFI (bsc#1114754)
* 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
* Fri Oct 19 2018 mchangAATTsuse.com- ieee1275: Fix double free in CAS reboot (bsc#1111955)
* grub2-ppc64-cas-fix-double-free.patch
* Thu Oct 04 2018 glinAATTsuse.com- Support NVDIMM device names (bsc#1110073)
* grub2-getroot-support-nvdimm.patch
* Wed Oct 03 2018 mchangAATTsuse.com- Translate caret back to space as the initrd stanza could use space to delimit multiple files loaded (bsc#1101942)
* grub2-util-30_os-prober-multiple-initrd.patch
* Wed Sep 26 2018 mchangAATTsuse.com- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145)
* grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch
* Thu Sep 13 2018 mchangAATTsuse.com- Fix broken network interface with random address and same name (bsc#1084508)
* 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
* Fri Aug 31 2018 mchangAATTsuse.com- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus return code handling. (bsc#1106381)
* modified grub2-btrfs-10-config-directory.patch
* Thu Aug 23 2018 mchangAATTsuse.com- Fix overflow in sector count calculation (bsc#1105163)
* grub2-msdos-fix-overflow.patch
* Thu Aug 09 2018 mchangAATTsuse.com- Downgrade libburnia-tools to suggest as minimal system can\'t afford pulling in tcl/tk and half of the x11 stack (bsc#1102515)
* modified grub2.spec
* Wed Aug 08 2018 dimstarAATTopensuse.org- Add grub2-binutils2.31.patch: x86-64: Treat R_X86_64_PLT32 as R_X86_64_PC32. Starting from binutils commit bd7ab16b x86-64 assembler generates R_X86_64_PLT32, instead of R_X86_64_PC32, for 32-bit PC-relative branches. Grub2 should treat R_X86_64_PLT32 as R_X86_64_PC32.
* Mon Aug 06 2018 josef.moellersAATTsuse.com- The grubxenarch packages are now architecture-independent. [bsc#953297, grub2.spec, grub2-rpmlintrc]
* Tue Jul 24 2018 mchangAATTsuse.com- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
* grub2-btrfs-10-config-directory.patch- Fix grub2-install --root-directory does not work for /boot/grub2/ on separate btrfs subvolume (boo#1098420)
* grub2-btrfs-06-subvol-mount.patch- Fix setparams doesn\'t work as expected from boot-last-label NVRAM var, after inital CAS reboot on ieee1275 (bsc#1088830)
* grub2-ppc64-cas-new-scope.patch
* Mon Jul 16 2018 mchangAATTsuse.com- Fix install on xfs error (bsc#1101283)
* 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
* Tue Jul 10 2018 jbohacAATTsuse.cz- grub2.spec: change %config to %config(noreplace) Don\'t overwrite user changes to config files on upgrades.
* Wed Jul 04 2018 josef.moellersAATTsuse.com- Marked %{_sysconfdir}/grub.d/40_custom as (noreplace) [bsc#1079332, grub2.spec]
* Wed Jun 27 2018 josef.moellersAATTsuse.com- Replace \"GRUB_DISABLE_LINUX_RECOVERY\" by \"GRUB_DISABLE_RECOVERY\" in /etc/default/grub and remove test from s390x install section in upec file. [bsc#1042433, grub.default, grub2.spec]
* Wed Jun 20 2018 josef.moellersAATTsuse.com- Added \"# needssslcertforbuild\", which got lost somewhere, to spec file [grub2.spec]
* Fri Jun 15 2018 josef.moellersAATTsuse.com- Replace confusing menu on btrfs \"snapper rollback\" by help text. [bsc#1027588, grub2-btrfs-help-on-snapper-rollback.patch]
* Thu May 24 2018 kukukAATTsuse.de- Use %license instead of %doc [bsc#1082318]
* Wed May 16 2018 Thomas.BlumeAATTsuse.com- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
* grub2-s390x-10-keep-network-at-kexec.patch
* Fri May 04 2018 idonmezAATTsuse.com- Add grub2-freetype-pkgconfig.patch to fix build with new freetype use pkgconfig to find Freetype libraries.
* Tue Apr 17 2018 mchangAATTsuse.com- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
* grub2-ieee1275-open-raw-mode.patch
* Thu Apr 12 2018 mchangAATTsuse.com- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
* add grub2-efi-xen-removable.patch
* rediff grub2-suse-remove-linux-root-param.patch
* Tue Apr 10 2018 jdelvareAATTsuse.de- Fix corruption of \"grub2-install --help\" and grub2-install manual page (bsc#1086670)
* unix-exec-avoid-atexit-handlers-when-child-exits.patch
* Mon Apr 02 2018 mchangAATTsuse.com- Fix Nvidia GPU in legacy I/O slot 2 disappears during system startup (bsc#1082914)
* 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
* Fri Mar 30 2018 mchangAATTsuse.com- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
* 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
* Mon Mar 26 2018 msuchanekAATTsuse.com- Fix incorrect netmask on ppc64 (bsc#1085419)
* grub2-Fix-incorrect-netmask-on-ppc64.patch
* Mon Mar 12 2018 mchangAATTsuse.com- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
* 0001-add-support-for-UEFI-network-protocols.patch
* Tue Mar 06 2018 mchangAATTsuse.com- fix wrong command output when default subvolume is toplevel tree with id 5 (bsc#1078775)
* grub2-btrfs-09-get-default-subvolume.patch- insert mdraid modules to support software RAID (bsc#1078775)
* grub2-xen-pv-firmware.cfg
* Thu Mar 01 2018 iforsterAATTsuse.com- Rename grub2-btrfs-workaround-grub2-once.patch to grub2-grubenv-in-btrfs-header.patch- Store GRUB environment variable health_checker_flag in Btrfs header
* Tue Feb 13 2018 mchangAATTsuse.com- Fix incorrect check preventing the script from running (bsc#1078481)
* 80_suse_btrfs_snapshot
* Wed Feb 07 2018 mchangAATTsuse.com- Fix disappeared snapshot menu entry (bsc#1078481)
* 80_suse_btrfs_snapshot
* Tue Feb 06 2018 mchangAATTsuse.com- Fix unquoted string error and add some more checks (bsc#1079330)
* grub2-check-default.sh
* Mon Feb 05 2018 olafAATTaepfle.de- The %prep section applies patches, the %build section builds. Remove mixup of patching and building from %prep for quilt setup Related to bsc#1065703
* Tue Jan 23 2018 mchangAATTsuse.com- Check if default entry need to be corrected for updated distributor version and/or use fallback entry if default kernel entry removed (bsc#1065349)
* grub2-check-default.sh
* grub2-mkconfig-default-entry-correction.patch- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
* grub2-getroot-scan-disk-pv.patch
* Fri Dec 08 2017 mchangAATTsuse.com- Filter out autofs and securityfs from /proc/self/mountinfo to speed up nfsroot test in large number of autofs mounts (bsc#1069094)
* modified grub2-pass-corret-root-for-nfsroot.patch
* Tue Nov 28 2017 mchangAATTsuse.com- Fix http(s) boot security review (bsc#1058090)
* 0002-AUDIT-0-http-boot-tracker-bug.patch
* Tue Nov 14 2017 mchangAATTsuse.com- 0001-add-support-for-UEFI-network-protocols.patch:
* Workaround http data access in firmware
* Fix DNS device path parsing for efinet device
* Relaxed UEFI Protocol requirement
* Support Intel OPA (Omni-Path Architecture) PXE Boot (bsc#1015589)
* Wed Nov 08 2017 olafAATTaepfle.de- grub2-xen-pv-firmware.cfg: remove linemode=1 from cmdline for SUSE installer. openQA expects ncurses interface. (bsc#1066919)
* Mon Nov 06 2017 jmatejekAATTsuse.com- use python3 for autogen.sh (fate#323526)
* Tue Oct 31 2017 msuchanekAATTsuse.com- Do not check that PReP partition does not contain an ELF during installation (bsc#1065738).
* grub2-install-remove-useless-check-PReP-partition-is-empty.patch
* Tue Sep 26 2017 mchangAATTsuse.com- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure in booting on some bogus firmware. To use the TPM image you have to use suse-enable-tpm option of grub2-install (bsc#1052401)
* 0013-tpm-i386-pc-diskboot-img.patch
* Wed Sep 20 2017 mlatimerAATTsuse.com- Use /boot//loader/linux to determine if install media is SUSE instead of /contents file (bsc#1054453)
* Tue Sep 19 2017 mlatimerAATTsuse.com- Use the pvops-enabled default kernel if the traditional xen pv kernel and initrd are not found (bsc#1054453)
* Fri Sep 08 2017 agrafAATTsuse.com- Fix reboot in UEFI environments (bsc#1047331)
* Add grub2-efi-Move-grub_reboot-into-kernel.patch
* Refresh grub2-efi-Free-malloc-regions-on-exit.patch
* Sun Sep 03 2017 mchangAATTsuse.com- Add preliminary patch for UEFI HTTPS and related network protocol support (fate#320130)
* 0001-add-support-for-UEFI-network-protocols.patch
* Sun Sep 03 2017 mchangAATTsuse.com- grub2-s390x-04-grub2-install.patch : remove arybase dependency in grub2-zipl-setup by not referencing to $[ (bsc#1055280)
* Wed Aug 23 2017 rwAATTsuse.com- Fix minor oversights in and the exit value of the grub2-install helper on s390x. (bsc#1055343, fate#323298)
* grub2-s390x-09-improve-zipl-setup.patch
* Mon Jul 24 2017 bwiedemannAATTsuse.com- Make grub2.info build reproducible (boo#1047218)
* Tue Jul 04 2017 arvidjaarAATTgmail.com- add grub2-fix-build-with-flex-2.6.4.patch - fix build with flex 2.6.4+ that removed explicit (void) cast from fprintf call in yy_fatal_error.
* Thu Jun 01 2017 mchangAATTsuse.com- Support LVM physical volume created without metadatacopies (bsc#1027526)
* grub2-diskfilter-support-pv-without-metadatacopies.patch- Fix page fault exception when grub loads with Nvidia cards (bsc#1038533)
* grub2-efi-uga-64bit-fb.patch- Require \'kexec-tools\' for System z. (bsc#944358)
* modified grub2.spec
* Thu May 11 2017 mchangAATTsuse.com- grub2-xen-pv-firmware.cfg: insmod lvm module as it\'s not auto-loaded to support booting from lvm volume (bsc#1004324)- Grub not working correctly with xen and btrfs snapshots (bsc#1026511)
* Add grub2-btrfs-09-get-default-subvolume.patch
* grub2-xen-pv-firmware.cfg : search path in default subvolume
* Thu Apr 27 2017 arvidjaarAATTgmail.com- new upstream version 2.02
* rediff - use-grub2-as-a-package-name.patch
* drop upstream patches - grub2-fix-uninitialized-variable-in-btrfs-with-GCC7.patch - grub2-add-FALLTHROUGH-annotations.patch- update translations
* Sun Mar 26 2017 arvidjaarAATTgmail.com- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry in additional environment block (boo#1031025)
* Wed Mar 22 2017 arvidjaarAATTgmail.com- fix building with GCC (bsc#1030247)
* add grub2-fix-uninitialized-variable-in-btrfs-with-GCC7.patch
* grub2-add-FALLTHROUGH-annotations.patch
* Mon Mar 20 2017 mchangAATTsuse.com- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401)
* grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch- Fix boot failure if /boot is separate btrfs partition (bsc#1023160)
* grub2-btrfs-06-subvol-mount.patch
* Fri Mar 17 2017 mchangAATTsuse.com- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy (bsc#1029187)
* Thu Mar 16 2017 arvidjaarAATTgmail.com- new upstream version 2.02~rc2
* rediff - use-grub2-as-a-package-name.patch - grub2-linguas.sh-no-rsync.patch
* drop upstream patches - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch
* Mon Mar 06 2017 mchangAATTsuse.com- TPM Support (FATE#315831)
* 0001-tpm-Core-TPM-support.patch
* 0002-tpm-Measure-kernel-initrd.patch
* 0003-tpm-Add-BIOS-boot-measurement.patch
* 0004-tpm-Rework-linux-command.patch
* 0005-tpm-Rework-linux16-command.patch
* 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
* 0007-tpm-Measure-the-kernel-commandline.patch
* 0008-tpm-Measure-commands.patch
* 0009-tpm-Measure-multiboot-images-and-modules.patch
* 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
* 0011-tpm-Fix-build-error.patch
* 0012-tpm-Build-tpm-as-module.patch- grub2.spec : Add grub-tpm.efi for Secure Boot
* Fri Mar 03 2017 mchangAATTsuse.com- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting (bsc#900418) (bsc#951748)
* grub2-efi-xen-cfg-unquote.patch- Fix linuxefi erroneously initialize linux\'s boot_params with non-zero values. (bsc#1025563)
* grub2-linuxefi-fix-boot-params.patch- Removed grub2-fix-multi-device-root-kernel-argument.patch as it has regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)
* Wed Mar 01 2017 mchangAATTsuse.com- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344)
* added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch
* removed 0001-Revert-efi-properly-terminate-filepath-with-NULL-in-.patch
* Thu Feb 23 2017 mchangAATTsuse.com- Temporary fix for openQA UEFI USB Boot failure (bsc#1026344)
* 0001-Revert-efi-properly-terminate-filepath-with-NULL-in-.patch
* Fri Feb 17 2017 mchangAATTsuse.com- grub2.spec: fix s390x file list.
* Thu Feb 16 2017 msuchanekAATTsuse.com- require efibootmgr in efi package (boo#1025520)
* Wed Feb 15 2017 mchangAATTsuse.com- Merge changes from SLE12- add grub2-emu-4-all.patch
* Build \'grub2-emu\' wherever possible, to allow a better implementation of that feature.- add grub2-s390x-06-loadparm.patch,- add grub2-commands-introduce-read_file-subcommand.patch:
* allow s390x to telecontrol grub2. (bsc#891946, bsc#892852)- add grub2-s390x-06-loadparm.patch:
* ignore case and fix transliteration of parameter. (bsc#891946)- add grub2-s390x-07-add-image-param-for-zipl-setup.patch
* Add --image switch to force zipl update to specific kernel (bsc#928131)- add grub2-s390x-08-workaround-part-to-disk.patch
* Ignore partition tables on s390x. (bsc#935127)- add grub2-efi-chainload-harder.patch:
* allow XEN to be chain-loaded despite firmware flaws. (bnc#887793)
* Do not use shim lock protocol for reading pe header, it won\'t be available when secure boot disabled (bsc#943380)
* Make firmware flaw condition be more precisely detected and add debug message for the case
* Check msdos header to find PE file header (bsc#954126)- grub2-s390x-04-grub2-install.patch:
* streamline boot to grub menu. (bsc#898198)
* Force \'/usr\' to read-only before calling kexec. (bsc#932951)- grub2-once:
* add \'--enum\' option to enumerate boot-entries in a way actually understood by \'grub2\'. (bsc#892852, bsc#892811)
* Examine variables from grub environment in \'grub2-once\'. (fate#319632)
* Fri Feb 10 2017 arvidjaarAATTgmail.com- new upstream version 2.02~rc1
* rediff - use-grub2-as-a-package-name.patch - grub2-s390x-04-grub2-install.patch - grub2-accept-empty-module.patch - grub2-btrfs-04-grub2-install.patch - grub2-btrfs-06-subvol-mount.patch
* drop upstream patches - 0001-dns-fix-buffer-overflow-for-data-addresses-in-recv_h.patch - 0001-build-Use-AC_HEADER_MAJOR-to-find-device-macros.patch - 0002-configure-fix-check-for-sys-sysmacros.h-under-glibc-.patch - 0001-Fix-fwpath-in-efi-netboot.patch - 0001-arm64-Move-firmware-fdt-search-into-global-function.patch - 0002-arm-efi-Use-fdt-from-firmware-when-available.patch - grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch - 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch - 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch - 0001-xen-make-xen-loader-callable-multiple-times.patch - 0002-xen-avoid-memleaks-on-error.patch - 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch - 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch - 0005-xen-synchronize-xen-header.patch - 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch - 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch - 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch - 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch - 0010-xen-modify-page-table-construction.patch - 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
* add - fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch fix compilation with new glibc
* Thu Feb 09 2017 mchangAATTsuse.com- Fix build error on glibc-2.25
* 0001-build-Use-AC_HEADER_MAJOR-to-find-device-macros.patch
* 0002-configure-fix-check-for-sys-sysmacros.h-under-glibc-.patch- Fix fwpath in efi netboot (fate#321993) (bsc#1022294)
* 0001-Fix-fwpath-in-efi-netboot.patch
* Fri Feb 03 2017 mchangAATTsuse.com- grub2-systemd-sleep.sh: Fix prematurely abort by commands error return code and skip the offending menu entry (bsc#1022880)
* Wed Feb 01 2017 agrafAATTsuse.com- Add support for BLT only EFI GOP adapters (FATE#322332)
* grub2-efi-gop-add-blt.patch
* Wed Jan 25 2017 schwabAATTlinux-m68k.org- info-dir-entry.patch: Update info dir entry to follow renaming to grub2
* Mon Jan 16 2017 matwey.kornilovAATTgmail.com- Add serial module to efi image. Serial terminal is still useful even with EFI Secure Boot
* Wed Jan 11 2017 mchangAATTsuse.com- Support %posttrans with marcos provided by update-bootloader-rpm-macros package (bsc#997317)
* Wed Jan 04 2017 mchangAATTsuse.com- Remove outdated README.openSUSE (bsc#907693)
* Fri Dec 30 2016 sor.alexeiAATTmeowr.ru- 20_memtest86+: avoid adding memtest86+ to the list with UEFI booting.
* Fri Oct 28 2016 mchangAATTsuse.com- Fix new line character in distributor (bsc#1007212)
* modified grub2-default-distributor.patch
* Fri Oct 21 2016 mchangAATTsuse.com- From Juergen Gross : grub-xen: support booting huge pv-domains (bsc#1004398) (bsc#899465)
* 0001-xen-make-xen-loader-callable-multiple-times.patch
* 0002-xen-avoid-memleaks-on-error.patch
* 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch
* 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch
* 0005-xen-synchronize-xen-header.patch
* 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch
* 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch
* 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch
* 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch
* 0010-xen-modify-page-table-construction.patch
* 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch
* Tue Oct 11 2016 dmuellerAATTsuse.com- add support for netboot on arm64-efi platforms (bsc#998097)
* grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch
* Fri Sep 02 2016 mchangAATTsuse.com- use $PRETTY_NAME instead of $NAME $VERSION for $GRUB_DISTRIBUTOR in openSUSE Tumbleweed (bsc#995549)
* modified grub2-default-distributor.patch- grub2.spec: add http module to grub.efi (fate#320129)
* Wed Aug 31 2016 matzAATTsuse.com- binutils 2.27 creates empty modules without a symtab. Add patch grub2-accept-empty-module.patch to not reject them.
* Sat Aug 20 2016 arvidjaarAATTgmail.com- since version 1.7 cryptsetup defaults to SHA256 for LUKS - include gcry_sha256 in signed EFI image
* Fri Aug 12 2016 mchangAATTsuse.com- Workaround default entry in snapshot menu (bsc#956046)
* grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch- grub2.spec: Add true command to grub.efi (bsc#993274)
* Wed Aug 03 2016 mchangAATTsuse.com- grub.default: Empty GRUB_CMDLINE_LINUX_DEFAULT, the value will be fully taken from YaST settings. (bsc#989803)
* Wed Aug 03 2016 mchangAATTsuse.com- Add patches from Roberto Sassu - Fix grub2-10_linux-avoid-multi-device-root-kernel-argument.patch, device path is not tested if GRUB_DISABLE_LINUX_UUID=\"true\" - added grub2-fix-multi-device-root-kernel-argument.patch (bsc#960776)- grub2-zipl-setup: avoid multi-device root= kernel argument
* added grub2-zipl-setup-fix-btrfs-multipledev.patch (bsc#960776)- Add SUSE_REMOVE_LINUX_ROOT_PARAM configuration option to /etc/default/grub, to remove root= and rootflags= from the kernel command line in /boot/grub2/grub.cfg and /boot/zipl/config - added grub2-suse-remove-linux-root-param.patch (bsc#962585)
* Tue Aug 02 2016 mchangAATTsuse.com- Support HTTP Boot IPv4 and IPv6 (fate#320129)
* 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
* 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch
* 0003-bootp-New-net_bootp6-command.patch
* 0004-efinet-UEFI-IPv6-PXE-support.patch
* 0005-grub.texi-Add-net_bootp6-doument.patch
* 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
* 0007-efinet-Setting-network-from-UEFI-device-path.patch
* 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch- Fix heap corruption after dns lookup
* 0001-dns-fix-buffer-overflow-for-data-addresses-in-recv_h.patch
* Mon Jun 27 2016 roAATTsuse.de- fix filelist for s390x
* Tue Jun 21 2016 mchangAATTsuse.com- Fix grub2-editenv error on encrypted lvm installation (bsc#981621)
* modified grub2-btrfs-workaround-grub2-once.patch- Add missing closing bracket in \'grub2-snapper-plugin.sh\'.- Fix snapshot booting on s390x (bsc#955115)
* modified grub2-snapper-plugin.sh- Fallback to old subvol name scheme to support old snapshot config (bsc#953538)
* added grub2-btrfs-07-subvol-fallback.patch
* Thu Jun 02 2016 arvidjaarAATTgmail.com- update grub2-once with patch from Björn Voigt - skip comments in /etc/sysconfig/bootloader (boo#963610)
* Fri May 20 2016 jengelhAATTinai.de- Make sure all systemd unit files are passed to %service_ macros.
* Thu May 19 2016 agrafAATTsuse.com- Add patch to free memory on exit in efi environments (bsc#980739)
* grub2-efi-Free-malloc-regions-on-exit.patch
* Mon May 02 2016 olafAATTaepfle.de- Remove xen-devel from BuildRequires required headers are included in grub-2.0.2
* Thu Apr 28 2016 agrafAATTsuse.com- Add support for \"t\" hotkey to switch to text mode (bsc#976836)
* added grub2-SUSE-Add-the-t-hotkey.patch- Add support for hidden menu entries (bsc#976836)
* added grub2-Add-hidden-menu-entries.patch
* Tue Apr 19 2016 mchangAATTsuse.com- Correct show user defined comments in menu for snapshots (bsc#956698)
* modified grub2-snapper-plugin.sh
* Mon Mar 21 2016 mchangAATTsuse.com- Fix GRUB_DISABLE_LINUX_UUID to be ignore and also fallback kernel device won\'t be used if fs uuid not detected (bsc#971867)
* added 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch
* added 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch
* Tue Mar 01 2016 arvidjaarAATTgmail.com- new upstream version 2.02~beta3
* highlights of user visible changes not yet present in openSUSE package - arm-uboot now generates position independent self relocating image, so single binary should run on all supported systems - loader for Xen on aarch64. grub-mkconfig support was not in time for beta3 yet. - improved ZFS support (extensible_dataset, large_blocks, embedded_data, hole_birth features) - support for IPv6 Router Advertisements - support for persistent memory (we do not overwrite it and pass correct information to OS) - try to display more specific icons for os-prober generated menu entries - grub-install detects EFI bit size and selects correct platform (x86_64-efi or i386-efi) independent of OS bit size; needs kernel 4.0 or higher. - LVM RAID1 support - xnu loader fixes which should make OS X menu entry generated by os-prober work again - key modifiers (Ctrl-X etc) should work on EFI too - ... and lot of fixes over entire tree
* rediff - rename-grub-info-file-to-grub2.patch - use-grub2-as-a-package-name.patch - grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch - grub2-fix-menu-in-xen-host-server.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-chainloader.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-s390x-04-grub2-install.patch - grub2-s390x-05-grub2-mkconfig.patch - grub2-efi-xen-chainload.patch - grub2-mkconfig-aarch64.patch - grub2-btrfs-04-grub2-install.patch - grub2-ppc64-cas-reboot-support.patch - 0002-Add-Virtual-LAN-support.patch
* fix grub2-secureboot-add-linuxefi.patch - use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due to compiler warning)
* drop upstream patches - 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch - 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch - 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch - 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch - 0003-efinet-open-Simple-Network-Protocol-exclusively.patch - 0001-efinet-Check-for-immediate-completition.patch - 0001-efinet-enable-hardware-filters-when-opening-interfac.patch - grub2-xen-legacy-config-device-name.patch - grub2-getroot-support-NVMe-device-names.patch - grub2-netboot-hang.patch - grub2-btrfs-fix-incorrect-address-reference.patch - aarch64-reloc.patch - grub2-glibc-2.20.patch (related code dropped upstream) - grub2-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch - grub2-btrfs-fix-get_root-key-comparison-failures-due-to-en.patch - grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch - grub2-ppc64-qemu.patch - grub2-xfs-Add-helper-for-inode-size.patch - grub2-xfs-Fix-termination-loop-for-directory-iteration.patch - grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch - grub2-xfs-V5-filesystem-format-support.patch - 0001-Add-bootargs-parser-for-open-firmware.patch - grub2-arm64-set-correct-length.patch - grub2-arm64-setjmp-Add-missing-license-macro.patch - grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch - 0001-unix-password-Fix-file-descriptor-leak.patch - 0002-linux-getroot-fix-descriptor-leak.patch - 0003-util-grub-mount-fix-descriptor-leak.patch - 0004-linux-ofpath-fix-descriptor-leak.patch - 0005-grub-fstest-fix-descriptor-leak.patch - ppc64le.patch - libgcc-prereq.patch - libgcc.patch - 0001-Fix-security-issue-when-reading-username-and-passwor.patch - 0001-menu-fix-line-count-calculation-for-long-lines.patch - grub2-arm64-Reduce-timer-event-frequency-by-10.patch - 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch - 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch - 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch - 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch - 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch - 0005-i386-fix-TSC-calibration-using-PIT.patch - biendian.patch - ppc64_opt.patch
* drop workarounds for gdb_grub and grub.chrp, they are now installed under fixed name
* do not patch docs/Makefile.in, it is regenerated anyway
* Tue Mar 01 2016 agrafAATTsuse.com- Make mkconfig search for zImage on arm
* grub2-mkconfig-arm.patch
* Sun Feb 28 2016 agrafAATTsuse.com- Add support to directly pass an EFI FDT table to a kernel on 32bit arm
* 0001-arm64-Move-firmware-fdt-search-into-global-function.patch
* 0002-arm-efi-Use-fdt-from-firmware-when-available.patch
* Fri Jan 29 2016 mchangAATTsuse.com- Add config option to set efi xen loader command line option (bsc#957383)
* added grub2-efi-xen-cmdline.patch
* Thu Jan 28 2016 dvaleevAATTsuse.com- Drop ppc64le patches. Build stage1 as BE for Power Droped patches: - grub2-ppc64le-01-Add-Little-Endian-support-for-Power64-to-the-build.patch - grub2-ppc64le-02-Build-grub-as-O1-until-we-add-savegpr-and-restgpr-ro.patch - grub2-ppc64le-03-disable-creation-of-vsx-and-altivec-instructions.patch - grub2-ppc64le-04-powerpc64-LE-s-linker-knows-how-to-handle-the-undefi.patch - grub2-ppc64le-05-grub-install-can-now-recognize-and-install-a-LE-grub.patch - grub2-ppc64le-06-set-the-ABI-version-to-0x02-in-the-e_flag-of-the-PPC.patch - grub2-ppc64le-07-Add-IEEE1275_ADDR-helper.patch - grub2-ppc64le-08-Fix-some-more-warnings-when-casting.patch - grub2-ppc64le-09-Add-powerpc64-types.patch - grub2-ppc64le-10-powerpc64-is-not-necessarily-BigEndian-anymore.patch - grub2-ppc64le-11-Fix-warnings-when-building-powerpc-linux-loader-64bi.patch - grub2-ppc64le-12-GRUB_ELF_R_PPC_-processing-is-applicable-only-for-32.patch - grub2-ppc64le-13-Fix-powerpc-setjmp-longjmp-64bit-issues.patch - grub2-ppc64le-14-Add-powerpc64-ieee1275-trampoline.patch - grub2-ppc64le-15-Add-64bit-support-to-powerpc-startup-code.patch - grub2-ppc64le-16-Add-grub_dl_find_section_addr.patch - grub2-ppc64le-17-Add-ppc64-relocations.patch - grub2-ppc64le-18-ppc64-doesn-t-need-libgcc-routines.patch - grub2-ppc64le-19-Use-FUNC_START-FUNC_END-for-powerpc-function-definit.patch - grub2-ppc64le-20-.TOC.-symbol-is-special-in-ppc64le-.-It-maps-to-the-.patch - grub2-ppc64le-21-the-.toc-section-in-powerpc64le-modules-are-sometime.patch - grub2-ppc64le-22-all-parameter-to-firmware-calls-should-to-be-BigEndi.patch - grub2-ppc64le-fix-64bit-trampoline-in-dyn-linker.patch - grub2-ppc64le-timeout.patch - grub2-ppc64-build-ppc64-32bit.patch- Added patches: - biendian.patch - grub2-ppc64-cas-reboot-support.patch - libgcc-prereq.patch - libgcc.patch - ppc64_opt.patch - ppc64le.patch
* Wed Jan 20 2016 mchangAATTsuse.com- Backport upstream patches for HyperV gen2 TSC timer calbration without RTC (bsc#904647)
* added 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch
* added 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch
* added 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch
* added 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch
* added 0005-i386-fix-TSC-calibration-using-PIT.patch
* Mon Dec 28 2015 arvidjaarAATTgmail.com- Add 0001-menu-fix-line-count-calculation-for-long-lines.patch (bsc#943585)
* Thu Dec 17 2015 olafAATTaepfle.de- grub2-xen-pv-firmware.cfg: fix hd boot (boo#926795)
* Wed Dec 16 2015 arvidjaarAATTgmail.com- Add 0001-Fix-security-issue-when-reading-username-and-passwor.patch Fix for CVE-2015-8370 [boo#956631]
* Wed Dec 09 2015 arvidjaarAATTgmail.com- Update grub2-efi-xen-chainload.patch - fix copying of Linux kernel and initrd to ESP (boo#958193)
* Mon Dec 07 2015 olafAATTaepfle.de- Rename grub2-xen.cfg to grub2-xen-pv-firmware.cfg (boo#926795)
* Fri Dec 04 2015 olafAATTaepfle.de- grub2-xen.cfg: to handle grub1 menu.lst in PV guest (boo#926795)
* Thu Nov 26 2015 mchangAATTsuse.com- Expand list of grub.cfg search path in PV Xen guest for systems installed to btrfs snapshot. (bsc#946148) (bsc#952539)
* modified grub2-xen.cfg- drop grub2-fix-Grub2-with-SUSE-Xen-package-install.patch (bsc#774666)
* Wed Nov 18 2015 arvidjaarAATTgmail.com- Add 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty, e.g. when called from Xfce menu (boo#954519)
* Sun Nov 01 2015 arvidjaarAATTgmail.com- Modify grub2-linguas.sh-no-rsync.patch to re-enable enAATTquot catalog (boo#953022). Other autogenerated catalogs still fail to build due to missing C.UTF-8 locale.
* Fri Oct 30 2015 mchangAATTsuse.com- Allow to execute menuentry unrestricted as default (fate#318574)
* added grub2-menu-unrestricted.patch
* Thu Oct 29 2015 mchangAATTsuse.com- Add missing quoting for linuxefi (bsc#951962)
* modified grub2-secureboot-use-linuxefi-on-uefi.patch
* refreshed grub2-secureboot-provide-linuxefi-config.patch
* Sun Oct 18 2015 eichAATTsuse.com- Include custom.cfg into the files scanned by grub2-once. Allows to chose manually added entries as well (FATE#319632).
* Wed Oct 07 2015 mchangAATTsuse.com- Upstream patches for fixing file descriptor leakage (bsc#943784)
* added 0001-unix-password-Fix-file-descriptor-leak.patch
* added 0002-linux-getroot-fix-descriptor-leak.patch
* added 0003-util-grub-mount-fix-descriptor-leak.patch
* added 0004-linux-ofpath-fix-descriptor-leak.patch
* added 0005-grub-fstest-fix-descriptor-leak.patch
* Tue Oct 06 2015 mchangAATTsuse.com- Do not force ro option in linuxefi patch (bsc#948555)
* modified grub2-secureboot-use-linuxefi-on-uefi.patch
* refrehed grub2-secureboot-provide-linuxefi-config.patch
* Wed Sep 23 2015 dmuellerAATTsuse.com- add 0001-efinet-Check-for-immediate-completition.patch, 0001-efinet-enable-hardware-filters-when-opening-interfac.patch, grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch (bsc#947203)
* Mon Sep 14 2015 mchangAATTsuse.com- Set default GRUB_DISTRIBUTOR from /etc/os-release if it is empty or not set by user (bsc#942519)
* added grub2-default-distributor.patch
* modified grub.default
* Tue Aug 18 2015 mchangAATTsuse.com- add systemd-sleep-plugin subpackage (bsc#941758)- evaluate the menu entry\'s title string by printf
* modified grub2-once
* added grub2-systemd-sleep.sh
* Fri Jul 31 2015 mchangAATTsuse.com- fix for \'rollback\' hint (bsc#901487)
* modified grub2-btrfs-05-grub2-mkconfig.patch:
* Fri Jul 17 2015 mchangAATTsuse.com- Replace 12.1 with 12 SP1 for the list of snapshots (bsc#934252)
* modified grub2-snapper-plugin.sh
* Thu Jun 18 2015 mchangAATTsuse.com- Fix btrfs subvol detection on BigEndian systems (bsc#933541)
* modified grub2-btrfs-06-subvol-mount.patch- Fix grub2-mkrelpath outputs wrong path on BigEndian system
* added grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch
* Fri Jun 12 2015 mchangAATTsuse.com- If we have a post entry and the description field is empty, we should use the \"Pre\" number and add that description to the post entry. (fate#317972)- Show user defined comments in grub2 menu for snapshots (fate#318101)
* modified grub2-snapper-plugin.sh
* Sun Jun 07 2015 arvidjaarAATTgmail.com- add 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch make sure firmware path starts with \'/\' (boo#902982)
* Fri Jun 05 2015 mchangAATTsuse.com- Fix btrfs patch on BigEndian systems (bsc#933541)
* modified grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
* modified grub2-btrfs-06-subvol-mount.patch
* Wed Jun 03 2015 agrafAATTsuse.com- Fix license for setjmp module
* added grub2-arm64-setjmp-Add-missing-license-macro.patch
* Thu May 21 2015 mchangAATTsuse.com- Fix install into snapper controlled btrfs subvolume and can\'t load grub modules from separate subvolume (fate#318392)
* added grub2-btrfs-06-subvol-mount.patch
* grub2-snapper-plugin.sh: use absolute subvol name
* Tue May 19 2015 arvidjaarAATTgmail.com- also Recommends mtools for grub2-mkrescue (used to create EFI boot image) in addition to libburnia-tools.
* Mon May 11 2015 mchangAATTsuse.com- Support booting opensuse installer as PV DomU (boo#926795)
* added grub2-xen.cfg for tracking default pvgrub2 xen configs rather than generating it from spec file
* grub2-xen.cfg: from Olaf Hering
* Sun May 10 2015 arvidjaarAATTgmail.com- replace grub2-efinet-reopen-SNP-protocol-for-exclusive-use-by-grub.patch with upstream version:
* 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch
* 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch
* 0003-efinet-open-Simple-Network-Protocol-exclusively.patch Fixes EFI network boot in some QEMU configurations.
* Wed Apr 29 2015 dmuellerAATTsuse.com- fix grub2-mkconfig-aarch64.patch: fix arch detection broken by malformed patch rediffing
* Wed Apr 15 2015 mchangAATTsuse.com- Cleanup patch not applied
* remove grub2-enable-theme-for-terminal-window.patch
* grub2.rpmlintrc: remove addFilter(\"patch-not-applied\")
* Thu Apr 02 2015 mchangAATTsuse.com- Merge changes from SLE12- Do not pass root= when root is on nfs (bnc#894374)
* modified grub2-pass-corret-root-for-nfsroot.patch
* modified grub2-secureboot-provide-linuxefi-config.patch
* modified grub2-secureboot-use-linuxefi-on-uefi.patch- Fix xen pvops kernel not appear on menu (bnc#895286)
* modified grub2-fix-menu-in-xen-host-server.patch- Workaround grub2-once (bnc#892358)
* added grub2-btrfs-workaround-grub2-once.patch
* added grub2-once.service
* modified grub2-once- Fix busy-loop and hang while network booting (bnc#870613)
* added grub2-netboot-hang.patch- Add warning in grubenv file about editing it directly (bnc#887008)
* added grub2-editenv-add-warning-message.patch- Fix broken graphics with efifb on QEMU/KVM and nomodeset (bnc#884558)
* added grub2-efi-disable-video-cirrus-and-bochus.patch- Disable video support on Power (bnc#877142)
* added grub2-ppc64le-disable-video.patch- Track occupied memory so it can be released on exit (bnc#885026)
* added grub2-ppc64le-memory-map.patch- Fix grub.xen config searching path on boot partition (bnc#884828)- Add linux16 and initrd16 to grub.xen (bnc#884830)
* added grub2-xen-linux16.patch- VLAN tag support (fate#315753)
* added 0001-Add-bootargs-parser-for-open-firmware.patch
* added 0002-Add-Virtual-LAN-support.patch- Use chainloader to boot xen.efi under UEFI (bnc#871857)
* added grub2-efi-xen-chainload.patch- Use device part of chainloader target, if present (bnc#871857)
* added grub2-efi-chainloader-root.patch- Create only hypervisor pointed by /boot/xen.gz symlink (bnc#877040)
* modified grub2-fix-Grub2-with-SUSE-Xen-package-install.patch- Fix xen and native entries differ in grub.cfg (bnc#872014)
* modified grub2-linux.patch- Fix install error on ddf md device (bnc#872360)
* added grub2-getroot-treat-mdadm-ddf-as-simple-device.patch- Fix booting from NVMe device (bnc#873132)
* added grub2-getroot-support-NVMe-device-names.patch- Document peculiarities of s390 terminals
* added README.ibm3215- Grub2 for System z (fate#314213)
* added grub2-s390x-02-kexec-module-added-to-emu.patch
* added grub2-s390x-03-output-7-bit-ascii.patch
* added grub2-s390x-04-grub2-install.patch
* added grub2-s390x-05-grub2-mkconfig.patch
* Mon Mar 16 2015 schwabAATTsuse.de- grub2-arm64-set-correct-length.patch: arm64: set correct length of device path end entry
* Wed Mar 04 2015 mchangAATTsuse.com- grub2-efi-HP-workaround.patch:
* try to read config from all-uppercase prefix as last resort. (bnc#872503) (boo#902982)
* Mon Feb 16 2015 arvidjaarAATTgmail.com- add luks, gcry_rijndael, gcry_sha1 to signed EFI image to support LUKS partition in default setup (boo#917427)
* Thu Feb 05 2015 mchangAATTsuse.com- enable i386-xen (boo#891043)
* Wed Feb 04 2015 mchangAATTsuse.com- Downgrade os-prober dependency to Recommends (boo#898610)
* Thu Dec 25 2014 mchangAATTsuse.com- grub2-snapper-plugin.sh: cleanup grub-snapshot.cfg not referring to any snapshot (boo#909359)
* Thu Dec 25 2014 mpluskalAATTsuse.com- Require efibootmgr also on i586
* Tue Dec 16 2014 schwabAATTsuse.de- Require efibootmgr also on aarch64
* Thu Dec 11 2014 schwabAATTsuse.de- grub2-snapper-plugin.sh: fix use of printf without format string; fix quoting
* Wed Dec 10 2014 schwabAATTsuse.de- grub2-arm64-Reduce-timer-event-frequency-by-10.patch: fix periodic timer on arm64
* Thu Dec 04 2014 agrafAATTsuse.com- enable 32bit arm targets for uboot and efi
* Sat Nov 29 2014 ledestAATTgmail.com- Replace \'echo -e\' command in grub2-snapper-plugin.sh script to \'printf\' command. \'-e\' option of \'echo\' command may be unsupported in some POSIX-complete shells.
* Fri Nov 14 2014 ledestAATTgmail.com- fix bashism in post script
* Thu Oct 30 2014 jdelvareAATTsuse.de- grub2.spec: Fix conditional construct which wasn\'t supported by older versions of rpmbuild (caused error message \"parseExpressionBoolean returns -1\".)
* Thu Oct 30 2014 mchangAATTsuse.com- fix errors when boot is btrfs with Windows partition scheme. The first partition is created on cylinder boundary that can\'t offer enough room for core.img and also the installation has to be in logical paritition which made MBR the only location to install. (bnc#841247)
* add grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch