Group :: System/Kernel and hardware
RPM: grub
Navigation
Main Changelog Spec Patches Sources Download Gear Bugs and FR Repocop
6 september 2023 Egor Ignatov <egori at altlinux.org> 2.06-alt16
- 39_memtest: fix grub.cfg generation on i586 (closes: #47471)
- 39_memtest: add uefi support (closes: #47244)
- add f2fs, exfat, ntfs, ntfscomp modules to efi image (closes: #47257)
- change repo structure
+ get rid of git subtree
+ keep patches in a separate git branch
+ move alt-specific files to the 'altlinux' directory - post efi: probe quietly both efivars and efivarfs (closes: #46660)
- switch to the vendored gnulib of the required version
+ this makes it easier to port grub to other branches
- os-alt patch: change GRUB_VMLINUZ_SYMLINKS default behavior to yes (closes: #44406)
- Introduced the grub-efi-checkinstall subpackage for automatic EFI
signature verification (glebfm@)
- grub2-sysconfig: change default option to GRUB_VMLINUZ_SYMLINKS=yes (closes: #44406)
- add upstream-0061-net-ip-Do-IP-fragment-maths-safely patch (fixes: CVE-2022-28733)
- bump grub.altlinux SBAT level to 2 after closing CVE missed in the previous release
- fix os-alt patch: replace obsolete variable gone long ago (nickel@) (closes: #44387)
- remove translation for 'Change language (press F2)' (closes: #45437)
- remove rhboot SecureBoot patches; use upstream shim_lock and lockdown verifiers
- update fedora-Rework-how-the-fdt-command-builds patch
- add upstream security patch set 2022-06-07:
(fixes: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28734)
(fixes: CVE-2022-28734, CVE-2022-28735, CVE-2022-28736) - add upstream security patch set 2022-11-15:
(fixes: CVE-2022-2601, CVE-2022-3775) - bump sbat global generation number from 1 to 3
- fix FTBFS with new gnulib (upstream patchset)
- grub(-efi): switch from 'egrep' to 'grep -E' in filetriggers (closes: #43329)
- update os-alt patch: switch from 'fgrep' to 'grep -F'
- add alt-util-grub.d-switch-from-fgrep-to-grep-F patch
- grub-efi: improve RPM filetrigger and post install script to skip all
actions in case of being invoked at package installing stage by OS installer
(closes: #42025) - 30_uefi-firmware.in: Fix for zero supported indications (closes: #41970)
- pack 41_custom as there appear to be users of it (closes: #41832)
- add basic clean looking, blinkless boot support based on fedora patch set
- add upstream-grub-mkconfig-Restore-umask-for-the-grub.cfg patch
(fixes: CVE-2021-3981)
- add upstream-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock patch
(closes: #40878)
- new version
- update debian-install_signed patch
- update debian-grub-install-extra-removable patch
- update debian-grub-install-removable-shim patch
- update fedora-Revert-templates-Properly-disable-the-os-prober-by-d patch
- spec: disable LTO due to modules' build system incompatibility
- add fedora patch to add blscfg command (keremet@) (closes: #40512)
- add alt-gfxterm-backspace-workaround patch (egori@)
- new version
+ includes fixes for BootHole vulnerabilities so drop corresponding patches
+ includes fixes for SB Bypass 2021 vulnerabilities
(fixes: CVE-2020-14372, CVE-2020-25632, CVE-2020-25647, CVE-2020-27749)
(fixes: CVE-2020-27779, CVE-2021-20225, CVE-2021-20233, CVE-2021-3418) - update os-alt-xen patch
- remove upstreamed ubuntu-efi-setup patch
- update fedora SB patch set
- update fedora-Rework-how-the-fdt-command-builds patch
- add fedora patches to revert os-prober disabling in SB
- switch default graphics mode from "800x600" to "auto" (closes: #39948)
- grub-efi-autoupdate: fix --removable installations were not updated
- update alt-add-strings-and-translation-for-OS-ALT patch (antohami@)
- add alt-fix-build-with-new-gnulib patch (egori@)
- grub-efi-autoupdate: fix grub update rendering system unbootable
- grub-efi.filetrigger: add to ensure grub reinstall during shim-signed update
- provide OS ALT installer messages Russian translation
+ add add-strings-and-translation-for-OS-ALT patch (underwit@, antohami@) - update grub messages Russian translation
+ add alt-update-russian-translation patch (underwit@) - spec: prepare grub-efi to be buildable on RISCV64 (arei@)
- spec: fix AARCH64 EFI binary suffix
- grub-install: add workaround for malformed EFI-firmware implementations
(closes: #39432)
+ add debian-grub-install-removable-shim patch
+ add debian-grub-install-extra-removable patch
+ add alt-grub-install-no-fallback-for-removable patch - grub-efi-autoupdate: use grub-install --force-extra-removable by default
- new version
+ update and thin out ALT patches
+ replace fedora SB patch set
+ spec: add gnulib to BR:
+ spec: don't use linuxefi module name while assembling a EFI binary - add upstream patch set and adapt it to fix BootHole & Co. vulnerabilities
+ (fixes: CVE-2020-10713, CVE-2020-14308, CVE-2020-14309, CVE-2020-14310)
+ (fixes: CVE-2020-14311, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707)
- disallow kernels with unsigned EFI stub to be run by grub in SB mode
+ remove alt-relaxed-kernel-sign-check patch
- spec: add tftp module into EFI image (closes: #38681)
- sort kernels by mtime instead of ctime (ptrnine@)
- apply subvol option substitution into GRUB_CMDLINE_LINUX_DEFAULT
- add fedora-efi-chainloader-truncate-relocation patch (closes: #37112)
- spec: add echo and regexp modules into EFI image
+ echo fixes env vars passing to kernel cmdline in SB mode
- improve grub-2.02-alt-os-prober-compat patch
- introduce compatibility with os-prober 1.77 (closes: #36624)
+ remove grub-2.00-debian-uefi-os-prober patch
+ add alt-os-prober-compat patch
+ spec: add libfuse-devel to BR to support grub-mount feature - spec: replace deprecated PreReq with Requires(pre) for efibootmgr
- spec: add even more crypto modules to enable boot time encrypted
password feature operation in SB mode on some UEFI firmwares
- fix debian-install_signed patch (closes: #37664)
- spec: remove useless pesigning from install section
+ fix license
+ move rpm-macros-uefi to BR(pre):
- spec: add crypto modules into EFI binary images to support LUKS encrypted
partition booting without dedicated unenctypted /boot partition alongside
(closes: #37663)
- improve third-party customizer programs compatibility
+ grub2-sysconfig: add GRUB_BACKGROUND definition
+ rework altlinux-theme patch for conditional default colors application - spec: sed autogen.sh to choose python3 interpreter explicitly
- grub-ieee1275: added R: powerpc-utils. (glebfm@)
- add xfs-sparse-inodes patch (closes: #37394)
- add extcmd and keystatus modules to EFI images (closes: #36722)
- Refactored %build and %install sections;
- Added grub-ieee1275 support for ppc64le architecture;
- %ix86: renamed efi image files to grubia32{,sb}.efi ;
- spec:
+ removed unpackaged files;
+ added ExclusiveArch tag to skip build on unsupported architectures.
- grub-entries script: variables initialization added
- add rhboot/grub2 SB patch set to prevent unauthorized code execution at boot time when SB is enabled
- add grub-entries script by klark@ for list grub menu (closes: #36048)
- add patch preventing boot failure for unsigned kernel in SB environment
+ add an optional patch application flag for convenience
- added patch from upstream with changes for default pit time source to ptimer
- fix FTBFS by adding suse-fix-build-with-gcc8 patch
- fix FTBFS by adding fix-binutils-break-grub-efi-build patch
- remove ubt
- add ia32 EFI binary to x86_64 package
- add a patch adopted from fedora one introducing linuxefi/initrdefi commands
- add ia32 grub modules to package
+ add embedded config into ia32 EFI coreimage
+ rename x64 EFI binary to grubx64.efi
+ add grub-efi-autoupdate ia32 EFI compatibility
- LVM+LUKS fixes:
+ write UUID to grub.cfg after installation
+ don't skip devices under /dev/mapper/
- removed xxd requires from efi firmware setup script
- fixed config generation errors on EFI platform (closes: #34852)
- write to read-only grub device problem fixed.
- LVM+LUKS fixes:
+ write UUID to grub.cfg after installation
+ fix empty root parameter after update-grub
- revert back the LVM+LUKS fixes from alt6
- add ubt for backporting
- more grub-efi modules enabled by default:
part_apple part_msdos xfs squash4 search_fs_file search_label sleep test syslinuxcfg video
gfxterm_background lvm lsefi efifwsetup cat gzio iso9660 loadenv loopback mdraid09 mdraid1x
png jpeg - added patch from ubuntu for efi setup menu entry (closes: #34467)
- filetrigger and configs moved from pc/efi packages to common part
- interaction between the user and the shift key at boot time interrupts the grub wait timeout (closes: #33655)
- fixed sysconfig/grub2 usage in grub-efi post script (closes: #34258)
- fixed Xen menu entry (closes: #32811)
- renamed from grub2 to grub
- added strong requires to efibootmgr >= 15
- add ubt for backporting process
- 2.02 released
- 2.02 beta3
- CVE-2015-8370: those who have set up GRUB passwords MUST
upgrade or find their use of this "protection" inefficient:
http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
(closes: #31631) - added fedora patch to piggyback --unrestricted through CLASS
thus changing the default for password-protected menuentry items
to request password only when an attempt to change boot parameters
is made (but to let the system boot by default); see also
http://altlinux.org/grub#password - added upstream texinfo patch to fix FTBFS
- explicit BR: texinfo
- updated pesign macros use, reworked binaries installation
- prepare for production signing
- rebuilt with current gnu-efi
- pesign with ALT key
- adapted debian patch to accept os-prober output for EFI binaries
(see also RH#972355, RH#873207, deb#698914)
- updated grub-2.00-os-alt.patch for 2.00 (closes: #29583)
- 39_memtest: warning goes to stderr now and not into grub.cfg
- 39_memtest: support separate /boot properly (closes: #29460)
- efi: try loading efivars.ko just in case, no harm and no use otherwise
- firsttime: dropped (closes: #28966)
- better UEFI boot label support (mind the sysconfig fixes)
- dropped patch8 (irrelevant)
- revert patch suggested in #28218 (results in black-on-black text menu)
- firsttime: i18n support
- make grub less bold with its noisy opinions (closes: #25778)
- cas@: updated 05_altlinux_theme (closes: #28218)
- skip memtest in EFI mode
- changed default font from dejavu sans mono to univga
- whoops, actually added grub-efi-autoupdate script (closes: #28485)
- tweaked both grub-autoupdate and posttrans filetrigger
to be almost quiet in EFI case
- efi subpackage is signed by default on x86_64
- introduced efi-unsigned subpackage with a clean copy
- initial grub-2.00-install-uefi-signed.patch based on
ubuntu_install_signed.patch from 2.00-11ubuntu1 package - initial efi postinstall update script
- introduced efi-signed subpackage (x86_64 only)
- use rpm-macros-uefi
- dropped patch4 (see also #28181)
- cas@ fixed wrong path in theme patch (closes: #28176)
- introduced /etc/default/grub "compat" symlink
- dropped /boot/efi/* due to complete lack of applicability
- maintenance release:
+ fixed filetrigger lapse (thanks crux@, see also #27916)
+ grub2-common is now aware of grub-0.9x symlink (closes: #27935)
- initial EFI support merge
- NB: grub2-pc package got split into -pc and -common,
please double-check that things went well
- try harder to warn that the configuration is not complete
for automated grub upgrades thus needs to be updated manually
(closes: #27916) - adapted update-grub(8) from debian
- applied upstream patch to revert broken fix resulting in wrong
assessment of core.img size and a failure to install grub:
http://bzr.savannah.gnu.org/lh/grub/trunk/grub/revision/4586
(closes: #25666)
- 2.00 (closes: #27803)
- updated patches
+ fixed 05_altlinux_theme (closes: #27642) - built with devmapper support
+ alterator-grub needs one-line fix to work again on mdraid though - updated an Url: (closes: #26901)
- added a redundant but compatible unicode.pf2 font file
(might be split off to a separate subpackage soonish)
- fix build with automake >= 1.11.2
- rename to grub2-pc
- fix build
- force grub config update on grub update
- increase probability of race winning during install on evms device
(ALT #25628) again
- shaba@ (ALT #25666):
build with -Os optimization
add LZMA support - shaba@: add man pages
- remove 'with Linux' within linux-only entries
- fix adding failsafe options to non-failsave cmdline (ALT #25676)
- change 'splash=silent' to 'splash' in default sysconfig
- disable floppies handling (ALT #24974)
- 1.99
- fix absolute pathnames during install (ALT #25444)
- fix grub-1.98-evms-crap-alt.patch for /dev/vd* devices (ALT #25497)
- remove buggy brain which sets gfxpayload=keep in 10_linux
- mention timeout features in sysconfig
- mention GRUB_PRELOAD_MODULES in sysconfig
- add options to /ets/sysconfig/grub2:
GRUB_AUTOUPDATE_CFG,GRUB_AUTOUPDATE_CFGNAME to control automatic config
update
GRUB_VMLINUZ_SYMLINKS to control symlinks handling in /boot/vmlinuz*
GRUB_VMLINUZ_FAILSAFE to control failsafe entries - temporary remove ntldr-img from grub-extras
- place default font in /boot/grub (ALT #24446)
- fix initrd finding (ALT #24442)
- fix this unhappy firsttime script
- use UUIDs for flavoured entries
- firsttime script added
- add GRUB_AUTOUPDATE_DEVICE and GRUB_AUTOUPDATE_FORCE options for
automatic grub update (ALT #24114)
- update grub-1.98-evms-crap-alt.patch (evms/lvm2)
- make grub menu look tuneable with /etc/sysconfig/grub2
- hackaround: update evms-crap-alt.patch (strip devmapper for el-smp kernel)
- 20100804 snapshot
- add gettext to Requires (ALT #23845)
- update grub menu in filetrigger (ALT #23332)
- fix memtest finding
- add space before (failsafe mode) (ALT #23361)
- fix default xen initrd name
- add memtest and xen detection
- set localedir
- do not provide grub
- fix for evms/lvm device probing
- add 904_disable_floppies.patch from debian
- mark /etc/grub.d/40_custom as config(noreplace)
- add Provides/Obsoletes for grub
- add 950-quick-boot.patch from debian
- enable savedefault feature by default
- remove evms crap in one more place
- make evms-crap-alt patch more common
- rewrite stupid evms-crap-alt patch
- remove evms crap (for installer)
- fix bug in default menuentries
- boot default (/boot/vmlinuz) kernel first
- change default font to 8x13
- 1.98
- 1.97.2
- add patches from fedora (initramfs,os name)
- remove buggy grub2-helper-10_altlinux
- make /etc/sysconfig/grub2 useful
- 1.97
- Fixed #20475
- Initial build for Sisyphus