Package: grub2 / 2.14~git20250718.0e36779-2

Metadata

Package Version Patches format
grub2 2.14~git20250718.0e36779-2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
upstream/fs xfs Handle root inode read failure in grub_xfs_mount.patch | (download)

grub-core/fs/xfs.c | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 fs/xfs: handle root inode read failure in grub_xfs_mount

Signed-off-by: Egor Ignatov <egori@altlinux.org>

upstream/zfs fix LINUX_ROOT_DEVICE when grub probe fails.patch | (download)

util/grub.d/10_linux.in | 2 1 + 1 - 0 !
util/grub.d/20_linux_xen.in | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

 zfs: fix linux_root_device when grub-probe fails

When grub-probe fails, the current code is to just stuff an empty result
in which causes the user to not knowingly have a system that no longer
boots. grub-probe can fail because the ZFS pool that contains the root
filesystem might have features that grub does not yet support which is a
common configuration for people with a rpool and a bpool. This behavior
uses the zdb utility to dump the same value as the filesystem label
would print.

Signed-off-by: Doug Goldstein <cardoe@cardoe.com>

upstream/Add noescape argument to cmdline creation.patch | (download)

grub-core/lib/cmdline.c | 40 24 + 16 - 0 !
grub-core/loader/arm/linux.c | 4 2 + 2 - 0 !
grub-core/loader/arm64/xen_boot.c | 4 2 + 2 - 0 !
grub-core/loader/efi/linux.c | 4 2 + 2 - 0 !
grub-core/loader/i386/linux.c | 2 1 + 1 - 0 !
grub-core/loader/i386/multiboot_mbi.c | 8 4 + 4 - 0 !
grub-core/loader/i386/pc/linux.c | 2 1 + 1 - 0 !
grub-core/loader/i386/xen.c | 6 3 + 3 - 0 !
grub-core/loader/mips/linux.c | 4 2 + 2 - 0 !
grub-core/loader/multiboot_mbi2.c | 8 4 + 4 - 0 !
grub-core/loader/powerpc/ieee1275/linux.c | 4 2 + 2 - 0 !
grub-core/loader/sparc64/ieee1275/linux.c | 4 2 + 2 - 0 !
include/grub/lib/cmdline.h | 5 3 + 2 - 0 !
13 files changed, 52 insertions(+), 43 deletions(-)

 add "noescape" argument to cmdline creation

upstream/Check out missing distfiles from upstream git branch.patch | (download)

grub-core/lib/libgcrypt-patches/01_md.patch | 124 124 + 0 - 0 !
grub-core/lib/libgcrypt-patches/02_keccak_sse.patch | 25 25 + 0 - 0 !
grub-core/lib/libgcrypt-patches/03_mpiutil_alloc.patch | 18 18 + 0 - 0 !
grub-core/lib/libgcrypt-patches/03_sexp_free.patch | 35 35 + 0 - 0 !
grub-core/lib/libgcrypt-patches/04_aria.patch | 22 22 + 0 - 0 !
grub-core/lib/libgcrypt-patches/05_disable_rsa_shake.patch | 36 36 + 0 - 0 !
grub-core/lib/libgcrypt-patches/06_blake.patch | 80 80 + 0 - 0 !
grub-core/lib/libgcrypt-patches/07_disable_64div.patch | 15 15 + 0 - 0 !
grub-core/lib/libgcrypt-patches/08_sexp_leak.patch | 21 21 + 0 - 0 !
grub-core/lib/libtasn1-patches/0001-libtasn1-disable-code-not-needed-in-grub.patch | 320 320 + 0 - 0 !
grub-core/lib/libtasn1-patches/0002-libtasn1-replace-strcat-with-strcpy-in-_asn1_str_cat.patch | 33 33 + 0 - 0 !
grub-core/lib/libtasn1-patches/0003-libtasn1-replace-strcat-with-_asn1_str_cat.patch | 71 71 + 0 - 0 !
grub-core/lib/libtasn1-patches/0004-libtasn1-adjust-the-header-paths-in-libtasn1.h.patch | 39 39 + 0 - 0 !
grub-core/lib/libtasn1-patches/0005-libtasn1-Use-grub_divmod64-for-division.patch | 31 31 + 0 - 0 !
grub-core/lib/libtasn1-patches/0006-libtasn1-fix-the-potential-buffer-overrun.patch | 36 36 + 0 - 0 !
grub-core/lib/libtasn1-patches/0007-asn1_test-include-asn1_test.h-only.patch | 164 164 + 0 - 0 !
grub-core/lib/libtasn1-patches/0008-asn1_test-rename-the-main-functions-to-the-test-name.patch | 129 129 + 0 - 0 !
grub-core/lib/libtasn1-patches/0009-asn1_test-return-either-0-or-1-to-reflect-the-result.patch | 78 78 + 0 - 0 !
grub-core/lib/libtasn1-patches/0010-asn1_test-remove-verbose-and-the-unnecessary-printf.patch | 173 173 + 0 - 0 !
grub-core/lib/libtasn1-patches/0011-asn1_test-print-the-error-messages-with-grub_printf.patch | 485 485 + 0 - 0 !
grub-core/lib/libtasn1-patches/0012-asn1_test-use-the-grub-specific-functions-and-types.patch | 263 263 + 0 - 0 !
grub-core/lib/libtasn1-patches/0013-asn1_test-enable-the-testcase-only-when-GRUB_LONG_MA.patch | 48 48 + 0 - 0 !
grub-core/lib/libtasn1/COPYING | 16 16 + 0 - 0 !
grub-core/lib/libtasn1/README.md | 98 98 + 0 - 0 !
grub-core/lib/libtasn1/lib/coding.c | 1425 1425 + 0 - 0 !
grub-core/lib/libtasn1/lib/decoding.c | 2501 2501 + 0 - 0 !
grub-core/lib/libtasn1/lib/element.c | 1109 1109 + 0 - 0 !
grub-core/lib/libtasn1/lib/errors.c | 100 100 + 0 - 0 !
grub-core/lib/libtasn1/lib/gstr.c | 74 74 + 0 - 0 !
grub-core/lib/libtasn1/lib/parser_aux.c | 1178 1178 + 0 - 0 !
grub-core/lib/libtasn1/lib/structure.c | 1225 1225 + 0 - 0 !
grub-core/lib/libtasn1/tests/CVE-2018-1000654.c | 72 72 + 0 - 0 !
grub-core/lib/libtasn1/tests/Test_overflow.c | 168 168 + 0 - 0 !
grub-core/lib/libtasn1/tests/Test_simple.c | 226 226 + 0 - 0 !
grub-core/lib/libtasn1/tests/Test_strings.c | 156 156 + 0 - 0 !
grub-core/lib/libtasn1/tests/object-id-decoding.c | 121 121 + 0 - 0 !
grub-core/lib/libtasn1/tests/object-id-encoding.c | 133 133 + 0 - 0 !
grub-core/lib/libtasn1/tests/octet-string.c | 230 230 + 0 - 0 !
grub-core/lib/libtasn1/tests/reproducers.c | 90 90 + 0 - 0 !
util/import_gcrypt_inth.sed | 17 17 + 0 - 0 !
40 files changed, 11185 insertions(+)

 check out missing distfiles from upstream git branch

These files are missing from the release tarball due to upstream
Makefile mistakes.

Should be fixed by the real 2.14 release, so this is just a temporary
workaround that we will drop.

install signed.patch | (download)

util/grub-install.c | 220 155 + 65 - 0 !
1 file changed, 155 insertions(+), 65 deletions(-)

 install signed images if uefi secure boot is enabled
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

grub install extra removable.patch | (download)

util/grub-install.c | 110 108 + 2 - 0 !
1 file changed, 108 insertions(+), 2 deletions(-)

 add support for forcing efi installation to the removable media path

Add an extra option to grub-install "--force-extra-removable". On EFI
platforms, this will cause an extra copy of the grub-efi image to be
written to the appropriate removable media patch
/boot/efi/EFI/BOOT/BOOT$ARCH.EFI as well. This will help with broken
UEFI implementations where the firmware does not work when configured
with new boot paths.

Signed-off-by: Steve McIntyre <93sam@debian.org>

Bug-Debian: https://bugs.debian.org/767037 https://bugs.debian.org/773092
grub install removable shim.patch | (download)

util/grub-install.c | 84 67 + 17 - 0 !
1 file changed, 67 insertions(+), 17 deletions(-)

 deal with --force-extra-removable with signed shim too

In this case, we need both the signed shim as /EFI/BOOT/BOOTXXX.EFI
and signed Grub as /EFI/BOOT/grubXXX.efi.

Also install the BOOTXXX.CSV into /EFI/debian, and FBXXX.EFI into
/EFI/BOOT/ so that it can work when needed (*iff* we're updating the
NVRAM).

[cjwatson: Refactored also_install_removable somewhat for brevity and so
that we're using consistent case-insensitive logic.]

Bug-Debian: https://bugs.debian.org/930531
upstream/util bash completion.d Makefile.am s mkrescure mkrescue g.patch | (download)

util/bash-completion.d/Makefile.am | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 util/bash-completion.d/makefile.am: s/mkrescure/mkrescue/g

This is a typo that was stopping this bash-completion from being
installed.

Signed-off-by: Mate Kukri <mate.kukri@canonical.com>