代码拉取完成，页面将自动刷新
%undefine _hardened_build
%global tarversion 2.12
%if "0%{?product_family}" == "0"
%define efi_vendor %{_vendor}
%else
%define efi_vendor %{product_family}
%endif
%undefine _missing_build_ids_terminate_build
%global _configure_gnuconfig_hack 0
%global gnulibversion fixes
Name: grub2
Epoch: 1
Version: 2.12
Release: 11
Summary: Bootloader with support for Linux, Multiboot and more
License: GPLv3+
URL: http://www.gnu.org/software/grub/
Source0: https://ftp.gnu.org/gnu/grub/grub-%{tarversion}.tar.xz
Source1: grub.macros
Source2: grub.patches
Source4: http://unifoundry.com/pub/unifont/unifont-13.0.06/font-builds/unifont-13.0.06.pcf.gz
Source5: theme.tar.bz2
Source6: gitignore
Source7: 99-grub-mkconfig.install
Source8: gnulib-%{gnulibversion}.tar.gz
Source9: strtoull_test.c
Source10: 20-grub.install
Source11: bootstrap
Source12: bootstrap.conf
Source13: sbat.csv.in
Source14: config_for_secure
%include %{SOURCE1}
%include %{SOURCE2}
BuildRequires: gcc efi-srpm-macros flex bison binutils python3 ncurses-devel xz-devel
BuildRequires: freetype-devel libusb-devel bzip2-devel rpm-devel rpm-libs
BuildRequires: autoconf automake device-mapper-devel freetype-devel git
BuildRequires: texinfo gettext-devel dejavu-sans-fonts help2man systemd fuse-devel
BuildRequires: libtasn1-devel
%ifarch %{golang_arches}
BuildRequires: pesign >= 0.99-8
%endif
%if %{?_with_ccache: 1}%{?!_with_ccache: 0}
BuildRequires: ccache
%endif
Obsoletes: %{name} <= %{evr}
%if 0%{with_legacy_arch}
Requires: %{name}-%{legacy_package_arch} = %{evr}
%else
Requires: %{name}-%{package_arch} = %{evr}
%endif
%{nil}
%description
GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand
Unified Bootloader, which was originally designed and implemented by
Erich Stefan Boleyn.
Briefly, a boot loader is the first software program that runs when a
computer starts. It is responsible for loading and transferring control
to the operating system kernel software (such as the Hurd or Linux). The
kernel, in turn, initializes the rest of the operating system (e.g. GNU).
%package common
Summary: common package for grub2
BuildArch: noarch
Conflicts: grubby < 8.40-18
%description common
Common package for grub2.
%package tools
Summary: tools package for grub2
Obsoletes: %{name}-tools < %{evr}
Requires: %{name}-common = %{epoch}:%{version}-%{release}
Requires: gettext os-prober which file
Requires(pre): dracut
Requires(post): dracut
%description tools
tools package for grub2.
%package tools-minimal
Summary: Support tools for GRUB.
Requires: gettext %{name}-common = %{epoch}:%{version}-%{release}
Obsoletes: %{name}-tools < %{evr}
%description tools-minimal
Support tools for GRUB.
%package tools-extra
Summary: Support tools for GRUB.
Requires: gettext os-prober which file
Requires: %{name}-tools-minimal = %{epoch}:%{version}-%{release}
Requires: %{name}-common = %{epoch}:%{version}-%{release}
Obsoletes: %{name}-tools < %{evr}
%description tools-extra
Support tools for GRUB.
%ifarch x86_64
%package tools-efi
Summary: efi packages for grub2-tools
Requires: grub2-common = %{epoch}:%{version}-%{release}
Requires: gettext os-prober which file
Obsoletes: grub2-tools < %{evr}
%description tools-efi
Efi packages for grub2-tools.
%endif
%if 0%{with_efi_arch}
%{expand:%define_efi_variant %%{package_arch} -o}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%define_efi_variant %%{alt_package_arch}}
%endif
%if 0%{with_legacy_arch}
%{expand:%define_legacy_variant %%{legacy_package_arch}}
%endif
%if 0%{with_emu_arch}
%package emu
Summary: GRUB user-space emulation.
Requires: %{name}-tools-minimal = %{epoch}:%{version}-%{release}
%description emu
This subpackage provides the GRUB user-space emulation support of all platforms.
%package emu-modules
Summary: GRUB user-space emulation modules.
Requires: %{name}-tools-minimal = %{epoch}:%{version}-%{release}
%description emu-modules
This subpackage provides the GRUB user-space emulation modules.
%endif
%package_help
%prep
%do_common_setup
%if 0%{with_efi_arch}
mkdir grub-%{grubefiarch}-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-%{grubefiarch}-%{tarversion}/.gitignore
cp %{SOURCE4} grub-%{grubefiarch}-%{tarversion}/unifont.pcf.gz
sed -e "s,@@VERSION@@,%{version},g" -e "s,@@VERSION_RELEASE@@,%{version}-%{release},g" \
%{SOURCE13} > grub-%{grubefiarch}-%{tarversion}/sbat.csv
git add grub-%{grubefiarch}-%{tarversion}
%endif
%if 0%{with_alt_efi_arch}
mkdir grub-%{grubaltefiarch}-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-%{grubaltefiarch}-%{tarversion}/.gitignore
cp %{SOURCE4} grub-%{grubaltefiarch}-%{tarversion}/unifont.pcf.gz
git add grub-%{grubaltefiarch}-%{tarversion}
%endif
%if 0%{with_legacy_arch}
mkdir grub-%{grublegacyarch}-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-%{grublegacyarch}-%{tarversion}/.gitignore
cp %{SOURCE4} grub-%{grublegacyarch}-%{tarversion}/unifont.pcf.gz
git add grub-%{grublegacyarch}-%{tarversion}
%endif
%if 0%{with_emu_arch}
mkdir grub-emu-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-emu-%{tarversion}/.gitignore
cp %{SOURCE4} grub-emu-%{tarversion}/unifont.pcf.gz
git add grub-emu-%{tarversion}
%endif
git commit -m "After making subdirs"
sed -i '/videotest_checksum/d' grub-core/tests/lib/functional_test.c
sed -i '/gfxterm_menu/d' grub-core/tests/lib/functional_test.c
sed -i '/cmdline_cat_test/d' grub-core/tests/lib/functional_test.c
git add grub-core/tests/lib/functional_test.c
git commit -m "Disable partial grub_func_test cases"
%build
%if 0%{with_efi_arch}
%{expand:%do_primary_efi_build %%{grubefiarch} %%{grubefiname} %%{grubeficdname} %%{_target_platform} %%{efi_target_cflags} %%{efi_host_cflags}}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%do_alt_efi_build %%{grubaltefiarch} %%{grubaltefiname} %%{grubalteficdname} %%{_alt_target_platform} %%{alt_efi_target_cflags} %%{alt_efi_host_cflags}}
%endif
%if 0%{with_legacy_arch}
%{expand:%do_legacy_build %%{grublegacyarch}}
%endif
%if 0%{with_emu_arch}
%{expand:%do_emu_build}
%endif
makeinfo --info --no-split -I docs -o docs/grub-dev.info docs/grub-dev.texi
makeinfo --info --no-split -I docs -o docs/grub.info docs/grub.texi
makeinfo --html --no-split -I docs -o docs/grub-dev.html docs/grub-dev.texi
makeinfo --html --no-split -I docs -o docs/grub.html docs/grub.texi
%if 0%{?openEuler_sign_rsa}
sh /usr/lib/rpm/brp-ebs-sign --efi %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubefiname} || [ $? -eq 2 ] && echo "failed to sign, skip signature."
sh /usr/lib/rpm/brp-ebs-sign --efi %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubeficdname} || [ $? -eq 2 ] && echo "failed to sign, skip signature."
mv %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubefiname}.sig %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubefiname} ||:
mv %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubeficdname}.sig %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubeficdname} ||:
%endif
%check
pushd %{_builddir}/%{?buildsubdir}/grub-%{grubefiarch}-%{tarversion}/grub-core
make check
popd
%install
set -e
%do_common_install
%if 0%{with_efi_arch}
%{expand:%do_efi_install %%{grubefiarch} %%{grubefiname} %%{grubeficdname}}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%do_alt_efi_install %%{grubaltefiarch} %%{grubaltefiname} %%{grubalteficdname}}
%endif
%if 0%{with_legacy_arch}
%{expand:%do_legacy_install %%{grublegacyarch} %%{alt_grub_target_name} 0%{with_efi_arch}}
%endif
%if 0%{with_emu_arch}
%{expand:%do_emu_install %%{package_arch}}
%endif
rm -f $RPM_BUILD_ROOT%{_infodir}/dir
ln -s %{name}-set-password ${RPM_BUILD_ROOT}/%{_sbindir}/%{name}-setpassword
echo '.so man8/%{name}-set-password.8' > ${RPM_BUILD_ROOT}/%{_datadir}/man/man8/%{name}-setpassword.8
%ifnarch x86_64
rm -vf ${RPM_BUILD_ROOT}/%{_bindir}/%{name}-render-label
rm -vf ${RPM_BUILD_ROOT}/%{_sbindir}/%{name}-bios-setup
rm -vf ${RPM_BUILD_ROOT}/%{_sbindir}/%{name}-macbless
%else
pushd %{buildroot}/usr/lib/grub/i386-pc/
strip kernel.exec
strip lnxboot.image
popd
%endif
%{expand:%%do_install_protected_file %{name}-tools-minimal}
%find_lang grub
mkdir -p %{buildroot}%{_datadir}/grub/themes
install -d -m 0755 %{buildroot}%{_prefix}/lib/kernel/install.d/
install -m 0755 %{SOURCE10} %{buildroot}%{_prefix}/lib/kernel/install.d
install -m 0755 %{SOURCE7} %{buildroot}%{_prefix}/lib/kernel/install.d
install -d -m 0755 %{buildroot}%{_sysconfdir}/kernel/install.d/
install -m 0644 /dev/null %{buildroot}%{_sysconfdir}/kernel/install.d/20-grubby.install
install -m 0644 /dev/null %{buildroot}%{_sysconfdir}/kernel/install.d/90-loaderentry.install
#install -d -m 0755 %{buildroot}%{_userunitdir}/timers.target.wants
#install -m 0644 docs/grub-boot-success.timer %{buildroot}%{_userunitdir}
#install -m 0644 docs/grub-boot-success.service %{buildroot}%{_userunitdir}
#install -d -m 0755 %{buildroot}%{_unitdir}/system-update.target.wants
#install -m 0644 docs/grub-boot-indeterminate.service %{buildroot}%{_unitdir}
#ln -s ../grub-boot-indeterminate.service %{buildroot}%{_unitdir}/system-update.target.wants
#find %{buildroot}%{_unitdir}/ -type f -exec chmod a-x {} \;
mkdir %{buildroot}%{_sysconfdir}/default/grub.d
%global finddebugroot "%{_builddir}/%{?buildsubdir}/debug"
%global dip RPM_BUILD_ROOT=%{finddebugroot} %{__debug_install_post}
%define __debug_install_post ( \
install -m 0755 -d %{finddebugroot}/usr \
mv %{buildroot}%{_bindir} %{finddebugroot}%{_bindir} \
mv %{buildroot}%{_sbindir} %{finddebugroot}%{_sbindir} \
%{dip} \
install -m 0755 -d %{buildroot}/usr/lib/ %{buildroot}/usr/src/ \
cp -al %{finddebugroot}/usr/lib/debug/ \\\
%{buildroot}/usr/lib/debug/ \
cp -al %{finddebugroot}/usr/src/debug/ \\\
%{buildroot}/usr/src/debug/ ) \
mv %{finddebugroot}%{_bindir} %{buildroot}%{_bindir} \
mv %{finddebugroot}%{_sbindir} %{buildroot}%{_sbindir} \
%{nil}
%undefine buildsubdir
%pre tools
if [ -f /boot/grub2/user.cfg ]; then
if grep -q '^GRUB_PASSWORD=' /boot/grub2/user.cfg ; then
sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' /boot/grub2/user.cfg
fi
elif [ -f %{efi_esp_dir}/user.cfg ]; then
if grep -q '^GRUB_PASSWORD=' %{efi_esp_dir}/user.cfg ; then
sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' \
%{efi_esp_dir}/user.cfg
fi
elif [ -f /etc/grub.d/01_users ] && \
grep -q '^password_pbkdf2 root' /etc/grub.d/01_users ; then
if [ -f %{efi_esp_dir}/grub.cfg ]; then
# on EFI we don't get permissions on the file, but
# the directory is protected.
grep '^password_pbkdf2 root' /etc/grub.d/01_users | \
sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \
> %{efi_esp_dir}/user.cfg
fi
if [ -f /boot/grub2/grub.cfg ]; then
install -m 0600 /dev/null /boot/grub2/user.cfg
chmod 0600 /boot/grub2/user.cfg
grep '^password_pbkdf2 root' /etc/grub.d/01_users | \
sed 's/^password_pbkdf2 root \(.*\)$/GRUB2_PASSWORD=\1/' \
> /boot/grub2/user.cfg
fi
fi
%posttrans tools
if [ -f /etc/default/grub ]; then
if grep -q '^GRUB_ENABLE_BLSCFG=.*' /etc/default/grub; then
sed -i '/GRUB_ENABLE_BLSCFG=/d' /etc/default/grub
fi
fi
%files common -f grub.lang
%defattr(-,root,root)
%license COPYING
%dir /boot/grub2/themes/system
%attr(0700,root,root) %dir /boot/grub2
%ghost %config(noreplace) /boot/grub2/grubenv
%exclude /boot/grub2/*
%dir %{_libdir}/grub/
%{_datarootdir}/grub/themes/
%attr(0700,root,root) %dir %{_sysconfdir}/grub.d
%{_prefix}/lib/kernel/install.d/20-grub.install
%{_prefix}/lib/kernel/install.d/99-grub-mkconfig.install
%{_sysconfdir}/kernel/install.d/*.install
%dir %attr(0700,root,root) %{efi_esp_dir}
%{_datadir}/locale/*
%files tools
%defattr(-,root,root)
%{_sbindir}/%{name}-mkconfig
#%{_sbindir}/%{name}-switch-to-blscfg
#%{_sbindir}/%{name}-rpm-sort
%{_sbindir}/%{name}-reboot
%{_sbindir}/%{name}-install
%{_sbindir}/%{name}-sparc64-setup
%{_sbindir}/%{name}-ofpathname
%{_sbindir}/%{name}-probe
%{_bindir}/%{name}-glue-efi
%{_bindir}/%{name}-file
%{_bindir}/%{name}-menulst2cfg
%{_bindir}/%{name}-mkimage
%{_bindir}/%{name}-mkrelpath
%{_bindir}/%{name}-script-check
#%{_libexecdir}/%{name}
%config %{_sysconfdir}/grub.d/??_*
#%exclude %{_sysconfdir}/grub.d/01_fallback_counting
%attr(0644,root,root) %ghost %config(noreplace) %{_sysconfdir}/default/grub
%dir %config(noreplace) %{_sysconfdir}/default/grub.d
%{_sysconfdir}/grub.d/README
#%{_userunitdir}/*
#%{_unitdir}/grub-boot-indeterminate.service
#%{_unitdir}/system-update.target.wants
#%attr(0644,root,root) %{_unitdir}/%{name}-systemd-integration.service
#%dir %{_unitdir}/systemd-logind.service.d
#%attr(0644,root,root) %{_unitdir}/systemd-logind.service.d/*
%{_datarootdir}/grub/*
%{_datarootdir}/bash-completion/completions/grub
%exclude %{_datarootdir}/grub/themes
%exclude %{_datarootdir}/grub/*.h
%{_infodir}/%{name}*
%if %{with_legacy_arch}
%{_sbindir}/grub2-install
%ifarch x86_64
%{_sbindir}/grub2-bios-setup
%else
%exclude %{_sbindir}/%{name}-bios-setup
%endif
%ifarch %{sparc}
%{_sbindir}/grub2-sparc64-setup
%{_sbindir}/grub2-ofpathname
%else
%exclude %{_sbindir}/grub2-sparc64-setup
%exclude %{_sbindir}/grub2-ofpathname
%endif
%endif
%files tools-minimal
%defattr(-,root,root)
#%attr(4755, root, root) %{_sbindir}/%{name}-set-bootflag
%{_sbindir}/%{name}-get-kernel-settings
%{_sbindir}/%{name}-set*password
%{_sbindir}/%{name}-set-default
%{_bindir}/%{name}-editenv
%{_bindir}/%{name}-mkpasswd-pbkdf2
%{_bindir}/%{name}-mount
%attr(0644,root,root) %config(noreplace) /etc/dnf/protected.d/%{name}-tools-minimal.conf
%files tools-extra
%defattr(-,root,root)
%{_sysconfdir}/sysconfig/grub
%{_bindir}/%{name}-fstest
%{_bindir}/%{name}-kbdcomp
%{_bindir}/%{name}-mkfont
%{_bindir}/%{name}-mklayout
%{_bindir}/%{name}-mknetdir
%{_bindir}/%{name}-mkstandalone
%{_bindir}/%{name}-syslinux2cfg
%ifnarch %{sparc}
%{_bindir}/grub2-mkrescue
%endif
%ifarch x86_64
%files tools-efi
%defattr(-,root,root)
%{_sbindir}/%{name}-macbless
%{_bindir}/%{name}-render-label
%endif
%if 0%{with_efi_arch}
%{expand:%define_efi_variant_files %%{package_arch} %%{grubefiname} %%{grubeficdname} %%{grubefiarch} %%{target_cpu_name} %%{grub_target_name}}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%define_efi_variant_files %%{alt_package_arch} %%{grubaltefiname} %%{grubalteficdname} %%{grubaltefiarch} %%{alt_target_cpu_name} %%{alt_grub_target_name}}
%endif
%if 0%{with_legacy_arch}
%{expand:%define_legacy_variant_files %%{legacy_package_arch} %%{grublegacyarch}}
%endif
%if 0%{with_emu_arch}
%files emu
%{_bindir}/%{name}-emu*
%files emu-modules
%{_libdir}/grub/%{emuarch}-emu/*
%exclude %{_libdir}/grub/%{emuarch}-emu/*.module
%endif
%files help
%defattr(-,root,root)
%doc INSTALL NEWS README THANKS TODO docs/grub.html docs/grub-dev.html docs/font_char_metrics.png
%{_datadir}/man/man*
%changelog
* Sat May 11 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-11
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch64: fix GRUB_EFI_MAX_ALLOCATION_ADDRESS undeclared
* Sat May 11 2024 xiaozai <xiaozai@kylinos.cn> - 1:2.12-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Handle non-continuous data blocks in directory extents
* Tue May 7 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-9
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ignore signing failure
Revert "templates: Disable the os-prober by default"
Revert "templates: Properly disable the os-prober by default"
Add grub-get-kernel-settings and use it in 10_linux
Replace a lot of man pages with slightly nicer ones
* Tue Apr 9 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-8
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support TPM2.0
use default timestamp
* Mon Apr 8 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-7
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed
* Fri Mar 22 2024 jinlun <jinlun@huawei.com> - 1:2.12-6
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Interface for replacing the EFI signature
* Thu Mar 21 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-5
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
* Mon Mar 11 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-4
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't require a password to boot entries generated by grub-mkconfig
* Fri Mar 8 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-3
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:look for grub.cfg on efi where the app was found
* Thu Mar 7 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-2
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify klist in 10_linux.in
* Mon Mar 4 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-1
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update to 2.12
* Mon Dec 25 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-43
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations
* Wed Dec 20 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-42
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg
* Tue Nov 28 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-41
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng
* Wed Nov 22 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-40
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel
* Thu Nov 16 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-39
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:support openEuler signature
* Sat Oct 7 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
fs/ntfs: Fix an OOB read when parsing a volume label
fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file
* Wed Sep 13 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
lib/relocator: Fix OOB write when initializing lo->freebytes[]
util/grub-mount: Fix memory leak in fuse_getattr()
* Fri Sep 1 2023 ouuleilei <wangliu@iscas.ac.cn> - 1:2.06-36
add a patch to fix build error
* Thu Aug 17 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
kern/efi/mm: Fix use-after-free in finish boot services
util/grub-install-common: Fix the key of the --core-compress option
net/dns: Fix lookup error when no IPv6 is returned
net/dns: Simplify error handling of recv_hook() function
net/dns: Fix removal of DNS server
* Mon Aug 7 2023 mengyingkun <mengyingkun@loongson.com> - 1:2.06-34
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing
* Mon Jul 24 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-33
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst
* Mon Jul 17 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-32
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks
* Mon Jul 3 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
commands/acpi: Use xsdt_addrifpresent
* Thu Jun 15 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-30
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE
* Sun Apr 23 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-29
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub
* Mon Apr 10 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
net/bootp: Fix unchecked return value
fs/iso9660: Avoid reading past the entry boundary
fs/iso9660: Incorrect check for entry boundary
fs/iso9660: Prevent skipping CE or ST at start of continuation area
fs/iso9660: Prevent read past the end of system use area
fs/iso9660: Add check to prevent infinite loop
gentpl.py: Remove .interp section from .img files
kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
font: Reject fonts with negative max_char_width or max_char_height
font: Assign null_font to unknown_glyph
font: Check return value of grub_malloc() in ascii_glyph_lookup()
* Wed Mar 22 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-27
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation
* Sat Mar 18 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-26
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment
* Sat Mar 11 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-25
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort
* Fri Mar 10 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-24
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID
* Mon Feb 13 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-23
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface
* Wed Feb 8 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-22
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support
* Mon Feb 6 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-21
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
kern/buffer: Handle NULL input pointer in grub_buffer_free()
disk/diskfilter: Don't make a RAID array with more than 1024 disks
loader/multiboot_elfxx: Fix memory leak
loader/linux: Ensure the newc pathname is NULL-terminated
term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
normal/cmdline: Fix two related integer underflows
fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
fs/xfs: Fix memory leaks in XFS module
kern/file: Fix error handling in grub_file_open()
* Thu Feb 2 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory
* Thu Feb 2 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-19
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems
* Tue Jan 10 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-18
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support
* Mon Dec 19 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
in grub2-tools to 644
* Mon Dec 12 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options
* Fri Nov 18 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-15
- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775
* Fri Nov 4 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-14
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure
* Sun Oct 23 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-13
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream
* Tue Aug 30 2022 wanglu <wanglu210@huawei.com> - 1:2.06-12
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
disk/efi/efidisk: Pass buffers with higher alignment
* Sat Jul 23 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-11
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed
* Wed Jun 29 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-10
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add tpm in efi_modules of aarch64
* Tue Jun 21 2022 sunhai <sunhai10@huawei.com> - 1:2.06-9
- Type:CVE
- CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
- SUG:NA
- DESC:adapts to the open source code for log printing
libgcrypt: Avoid -Wsign-compare in rijndael do_setkey()
disk/ldm: Fix resource leak
io/gzio: Fix possible use of uninitialized variable in huft_build()
fs/zfs/zfs: Fix possible insecure use of chunk size in zap_leaf_array_get()
util/grub-mkfont: Fix memory leak in write_font_pf2()
util/grub-fstest: Fix resource leaks in cmd_cmp()
util/grub-mkrescue: Fix memory leak in write_part()
util/grub-install-common: Fix memory leak in copy_all()
osdep/linux: Fix md array device enumeration
double grub x86_64-efi mm pool
net: fix null pointer dereference when parsing ICMP6_ROUTER_ADVERTISE messages
efinet:Correct closing of SNP protocol
configure:Fix misspelled variable BUILD_LDFAGS -> BUILD_LDFLAGS
fix partmap_test failure
UEFI mode uses /boot/efi/EFI/euleros/user.cfg as password
util/resolve: Do not read past the end of the array in read_dep_list()
fs/affs: Fix resource leaks
Revert iee1275/datetime: Fix off-by-1 error
commands/search: Fix bug stopping iteration when --no-floppy is used
mm: Temporarily disable grub_mm_debug while calling grub_vprintf() in grub_printf()
net: Check against nb->tail in grub_netbuff_pull()
kern/rescue_parser: Ensure that parser allocated memory is not leaked
net/net: Fix uninitialized scalar variable
net/arp: Fix uninitialized scalar variable
loader/i386/pc/linux: Fix uninitialized scalar variable
net/bootp: Fix uninitialized scalar variable
fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
* Thu May 05 2022 sunhai <sunhai10@huawei.com> - 1:2.06-8
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix PXE boot in IPv6 network when paring ICMP6_ROUTE_ADVERTISE messages
* Sun Apr 24 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-7
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the file permissions of grub-boot-indeterminate.service and
10-grub2-logind-service.conf to 644
* Thu Apr 21 2022 lvxiaoqian<xiaoqian@nj.iscas.ac.cn> - 2.06-6
- update grub.macros for riscv
* Thu Apr 14 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-5
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix grub2 password setting does not take effect
* Fri Mar 25 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-4
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable sbat and don't verify kernels twice
* Thu Mar 24 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-3
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove 08_fallback_counting.in apply grubby
* Tue Mar 22 2022 fengtao <fengtao40@huawei.com> - 2.06-2
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix setupmode not available in some machine
* Tue Mar 22 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-1
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to version 2.06
disable partial grub_func_test cases because they are not supported
* Mon Feb 28 2022 fengtao <fengtao40@huawei.com> - 2.04-24
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix arm64 kernel image not aligned on 64k boundary
fix grub.patches file format to unix
* Sat Feb 26 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-23
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable grub-boot-success.service
* Fri Nov 26 2021 xihaochen<xihaochen@huawei.com> - 2.04-22
- Type:bugfix
- ID:NA
- SUG:NA
DESC:grub2 set password prompts to enter the current pass
support TPM2.0
use default timestamp
* Tue Nov 16 2021 fengtao <fengtao40@huawei.com> - 2.04-21
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix bad test on GRUB_DISABLE_SUBMENU
* Mon Sep 27 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-20
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:verifiers: Fix calling uninitialized function pointer
* Mon Aug 02 2021 gaihuiying <gaihuiying1@huawei.com> - 2.04-19
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify git config parameters
* Tue May 25 2021 yanan <yanan@huawei.com> - 2.04-18
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete the Symbolic Link of grubenv in grub2-efi-x64 and grub-efi-aa64 packages
* Tue May 18 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-17
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete the Symbolic Link of grubenv in grub2-efi-x64 and grub-efi-aa64 packages
* Tue Mar 30 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-16
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some patches from upstream community and fix incorrect
author names in patches
* Mon Mar 29 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-15
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the patches that upstream community released on
March 2, 2021
* Mon Mar 29 2021 renmingshuai <renmingshuai@huawei.com> - 2.04-14
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add efi_vendor for vendor
* Sun Mar 21 2021 orange-snn <songnannan2@huawei.com> - 2.04-13
- fix postun error in grub2-efi-x64
* Thu Mar 18 2021 yanglu <yanglu60@huawei.com> - 2.04-12
- Type:cves
- ID:CVE-2020-27779 CVE-2020-14372
- SUG:NA
- DESC:fix CVE-2020-27779 CVE-2020-14372
* Wed Mar 17 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-11
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix the installation failure of grub2-efi-x64/grub-efi-aa64 packages on
the /boot partition of VFAT file system.
* Tue Mar 16 2021 hanhui <hanhui15@huawei.com> - 2.04-11
- Type:cves
- Id:CVE-2020-27779 CVE-2020-14372
- SUG:NA
- DESC:fix CVE-2020-27779 CVE-2020-14372
* Fri Mar 12 2021 yanglu <yanglu60@huawei.com> - 2.04-10
- Type:cves
- Id:CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233
- SUG:NA
- DESC:fix CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233
* Sat Feb 27 2021 fengtao <fengtao40@huawei.com> - 2.04-9
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:tftp roll over block counter to prevent timeouts with
data packets
* Mon Feb 22 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-8
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix kernel not found because grub.cfg using BLS format
* Mon Nov 16 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-7
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove duplicate rpm-devel in BuildRequires
* Sat Nov 14 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-6
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove 08_fallback_counting.in apply grubby
* Thu Oct 29 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-5
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove grub2-emu and grub2-emu-lite in grub2-tools
* Thu Oct 29 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-4
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split tools-extra and tools-minimal from tools
* Fri Aug 7 2020 hanzhijun <hanzhijun1@huawei.com> - 2.04-3
- Type:cves
- Id:CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707
- SUG:NA
- DESC:fix CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707
* Mon Aug 3 2020 hanzhijun <hanzhijun1@huawei.com> - 2.04-2
- add CPPFLAGS
* Sat Aug 1 2020 hanzhijun <hanzhijun1@huawei.com> - 2.04-1
- update to 2.0.4
* Fri Jul 17 2020 chenyaqiang <chenyaqiang@huawei.com> - 2.02-75
- remove repeated buildrequest packge “rpm-devel” in grub2.spec
* Fri Apr 24 2020 fengtao <fengtao40@huawei.com> - 2.02-74
- exclude two cmd in grub2-tools
* Tue Mar 3 2020 songnannan <songnannan2@huawei.com> - 2.02-73
- delete java-1.8.0-openjdk in buildrequires
* Thu Feb 20 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.02-72
- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add make check function
* Sat Dec 21 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-71
- Type:cves
- Id:NA
- SUG:NA
- DESC:add cve patches
* Tue Dec 10 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-70
- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add the path for themes
* Tue Dec 3 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-69- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add config_for_secure file for gcc_secure
* Sat Sep 28 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-68
- Type:bugfix
- Id:NA
- SUG:NA
- DESC:rename the 20-grub.install file to 20-grubby.install
* Wed Sep 25 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-67
- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix grub2-setpassword error for openeuler
* Wed Sep 18 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-66
- Package init
此处可能存在不合适展示的内容，页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容，可点击提交进行申诉，我们将尽快为您处理。