CBL-Mariner/SPECS/grub2
Christopher Co 0d3b213f0a
Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841)
TPM Event log does not appear to be passed to the kernel when Secure Boot is enforcing. To restore this critical functionality, revert back to our previous 2.06 grub2 which has this support and all SBAT-related CVEs patched.

This reverts commit 26d9bca
2024-07-16 10:01:44 -07:00
..
0001-Add-support-for-Linux-EFI-stub-loading.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0002-Rework-linux-command.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0003-Rework-linux16-command.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0004-Add-secureboot-support-on-efi-chainloader.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0005-Make-any-of-the-loaders-that-link-in-efi-mode-honor-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0006-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0017-Pass-x-hex-hex-straight-through-unmolested.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0037-Replace-a-lot-of-man-pages-with-slightly-nicer-ones.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0052-Make-our-info-pages-say-grub2-where-appropriate.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0069-Make-pmtimer-tsc-calibration-not-take-51-seconds-to-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0104-Rework-how-the-fdt-command-builds.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0112-Try-to-pick-better-locations-for-kernel-and-initrd.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0115-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0116-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0117-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0118-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0148-efi-Set-image-base-address-before-jumping-to-the-PE-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0149-tpm-Don-t-propagate-TPM-measurement-errors-to-the-ve.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0150-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0156-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0157-linuxefi-fail-kernel-validation-without-shim-protoco.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0166-grub-install-disable-support-for-EFI-platforms.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0167-restore-umask-for-grub-config.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0170-fix-memory-alloc-errno-reset.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0173-loader-efi-chainloader-Simplify-the-loader-state.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0174-commands-boot-Add-API-to-pass-context-to-loader.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0175-loader-efi-chainloader-Use-grub_loader_set_ex.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0176-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0177-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0178-video-readers-png-Abort-sooner-if-a-read-operation-f.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0179-video-readers-png-Refuse-to-handle-multiple-image-he.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0180-video-readers-png-Drop-greyscale-support-to-fix-heap.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0181-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0182-video-readers-png-Sanity-check-some-huffman-codes.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0183-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0184-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0185-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0186-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0187-normal-charset-Fix-array-out-of-bounds-formatting-un.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0188-net-ip-Do-IP-fragment-maths-safely.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0189-net-netbuff-Block-overly-large-netbuff-allocs.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0190-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0191-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0192-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0193-net-tftp-Avoid-a-trivial-UAF.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0194-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0195-net-http-Fix-OOB-write-for-split-http-headers.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0196-net-http-Error-out-on-headers-with-LF-without-CR.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0197-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0198-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0199-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0200-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0201-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
0202-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-10713.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-14308.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-14309.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-14310.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-14311.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-14372.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-25632.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-25647.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-27749.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2020-27779.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2021-3418.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2021-20225.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2021-20233.nopatch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2022-2601.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
CVE-2022-3775.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
disable-checksum-code-optimization.patch [grub] Disable code optimization for ip frame checksum calculation. (#9391) 2024-06-14 10:56:59 -07:00
grub2.signatures.json Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
grub2.spec Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
macros.grub2 feat: Enable grub2-mkconfig generation of grub config (#5989) 2023-09-25 12:56:58 -07:00
sbat-3-0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0004-font-Remove-grub_font_dup_glyph.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0005-font-Fix-integer-overflow-in-ensure_comb_space.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0006-font-Fix-integer-overflow-in-BMP-index.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0008-kern-efi-sb-Enforce-verification-of-font-files.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0009-fbutil-Fix-integer-overflow.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0011-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0012-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-3-0013-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-4-0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-4-0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-4-0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-4-0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-4-0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat-4-0006-fs-ntfs-Make-code-more-readable.patch Revert "Upgrade grub2 from 2.06 to 2.12 (#9407)" (#9841) 2024-07-16 10:01:44 -07:00
sbat.csv.in grub2: update grub to sbat level 4 2024-04-15 12:43:12 -04:00