linux/poky.git/meta/recipes-bsp/grub, branch master

The poky repository master branch is no longer being updated.

2025-11-07T13:31:53+00:00

You can either: a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs b) use the new bitbake-setup You can find information about either approach in our documentation: https://docs.yoctoproject.org/ Note that "poky" the distro setting is still available in meta-yocto as before and we continue to use and maintain that. Long live Poky! Some further information on the background of this change can be found in: https://lists.openembedded.org/g/openembedded-architecture/message/2179 Signed-off-by: Richard Purdie

grub,grub-efi: Always use BFD linker with clang

2025-09-11T10:31:57+00:00

LLD 21+ is erroring on text address being lower than the default segment address for binaries. Erroring during configure e.g. cannot link at address 0x2000 With LLD 21, -Ttext, only moves the .text section it does not change the image base and LLD 21 errors out if any section VMA is below the image base and the segment (image) base still defaults to 0x400000 when using LLD, hence the error LLD support in Grub needs to be done properly, it will need to adjust how linker options are constructed in configure. We default to use BFD linker always when using clang for now. (From OE-Core rev: d1194c1a42fc7877a0c99c77e5291216a11ea5dc) Signed-off-by: Khem Raj Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub2: fix CVE-2024-56738

2025-09-11T10:31:56+00:00

Backport an algorithmic change to grub_crypto_memcmp() so that it completes in constant time and thus isn't susceptible to side-channel attacks. (From OE-Core rev: 30a1cc225a2bd5d044bf608d863a67df3f9c03be) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub2: mark CVE-2024-2312 as not applicable

2025-09-11T10:31:56+00:00

This issue is specific to the peimage module that Ubuntu add, and is not an upstream issue. (From OE-Core rev: 8d2fe3f403e6435e1ffe122a6776381090752d8a) Signed-off-by: Ross Burton Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

meta: set S from UNPACKDIR in recipes that use only local files

2025-06-20T11:07:26+00:00

There is no need to have two assignments; also setting S from UNPACKDIR (and not vice versa) is more logical as unpack task comes first, and tasks that come after unpack use S to access unpack results. Also adjust reference test data in selftest/recipeutils to reflect changes in test recipes. (From OE-Core rev: f64b7e5fb3181734c8dde87b27e872a026261a74) Signed-off-by: Alexander Kanavin Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

meta: set S to be in UNPACKDIR in recipes that explicitly set S

2025-06-20T11:07:26+00:00

(From OE-Core rev: 7321cc17ae5483f17fe9cdffea7b62acd9d9c3a2) Signed-off-by: Alexander Kanavin Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub,grub-efi: Pin to using gcc on aarch64

2025-05-22T13:36:49+00:00

It needs porting to work with clang (From OE-Core rev: 18ebddf859c9baa4048601ebd968f6b8b02881ed) Signed-off-by: Khem Raj Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub2: Add GRUB_MKIMAGE_OPTS for configurable grub-mkimage options

2025-03-24T17:29:16+00:00

Introduce the GRUB_MKIMAGE_OPTS variable to allow additional options to be passed to grub-mkimage, making its behavior more configurable. (for example, this allows disabling shim lock when necessary). Update do_mkimage to use ${GRUB_MKIMAGE_OPTS}. This change reduce the need for hardcoded modifications and makes future adjustments easier. (From OE-Core rev: a6147adefcba7aae3f4eb8ed76d6a94315cafe61) Signed-off-by: Valeria Petrov Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub: patch CVE-2025-0678 and CVE-2025-1125

2025-03-13T11:00:36+00:00

Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 9d0422bfb97c01e4326dcad59a1fe8842d4cec90) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

grub: patch CVE-2025-0677, CVE-2025-0684, CVE-2025-0685, CVE-2025-0686 and CVE-2025-0689

2025-03-13T11:00:36+00:00

Cherry-pick patch mentioning these CVEs. (From OE-Core rev: 0fa593382a01d1dbeb6c697d422c1a186027f573) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie