linux/poky.git/meta/recipes-bsp/grub, branch yocto-4.0.14

grub: submit determinism.patch upstream

2023-07-12T15:11:38+00:00

(From OE-Core rev: 846d8097fed9498fab7120ed61a962ff2c15746a) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie (cherry picked from commit 61947762e410c685f667e0af6440fb8a33cd6777) Signed-off-by: Steve Sakoman

grub: backport patches to fix CVE-2022-28736

2022-12-13T15:23:34+00:00

(From OE-Core rev: 01be69264e4bf66cd1cb5acf949263d955171fc4) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub2: backport patch to fix CVE-2022-2601 CVE-2022-3775

2022-12-07T15:02:45+00:00

Backport patch from upstream to solve CVE-2022-2601 CVE-2022-3775 dependency: font: Fix size overflow in grub_font_get_glyph_internal() (https://git.savannah.gnu.org/cgit/grub.git/commit/?id=9c76ec09ae08155df27cd237eaea150b4f02f532) Backport patch from upstream to fix following CVEs: CVE-2022-2601: font: Fix several integer overflows in grub_font_construct_glyph() (https://git.savannah.gnu.org/cgit/grub.git/commit/?id=768e1ef2fc159f6e14e7246e4be09363708ac39e) CVE-2022-3775: font: Fix an integer underflow in blit_comb() (https://git.savannah.gnu.org/cgit/grub.git/commit/?id=992c06191babc1e109caf40d6a07ec6fdef427af) (From OE-Core rev: 0fc6693ab4f2f4b231b80c9675acea4e54b973f0) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub2: fix several CVEs

2022-08-28T06:51:29+00:00

Backport CVE patches from upstream to fix: CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735 Backport the following 5 patches to make CVE patches be applied smoothly. video-Remove-trailing-whitespaces.patch video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch (From OE-Core rev: 5e99aaaa4f36aacaf005d9721c3b6cd7c9526943) Signed-off-by: Yongxin Liu Signed-off-by: Richard Purdie (cherry picked from commit db43401a3a4c201f02f4128fa4bac8ce993bfec0) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

grub: ignore CVE-2021-46705

2022-03-29T14:59:29+00:00

This is specific to SUSE Linux. (From OE-Core rev: 594baef3b08d40fbbf1899f4cadeb9931c035c1a) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

grub-efi: Add option to include all available modules

2022-03-12T09:20:03+00:00

Include all available modules If 'all' is present in GRUB_BUILDIN variable. To achieve this we need to search for all .mod files in ${B}/grub-core/ and pass them to grub-mkimage command. Also, add the verbose option to grub-mkimage. (From OE-Core rev: ed1bf9aa0af8c12905cf8332bbbb212ab158fe3c) Signed-off-by: Diego Sueiro Signed-off-by: Richard Purdie

meta/scripts: Automated conversion of OE renamed variables

2022-02-21T23:37:27+00:00

(From OE-Core rev: aa52af4518604b5bf13f3c5e885113bf868d6c81) Signed-off-by: Richard Purdie

grub: Fix build with bintutils 2.38 on riscv

2022-02-20T16:45:25+00:00

(From OE-Core rev: d42596457628f41baa5729545e2932c6692f73ee) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

grub-efi: Add xen_boot support when 'xen' is in DISTRO_FEATURES for aarch64

2022-01-14T09:25:31+00:00

'xen-boot' module is available only for aarch64. (From OE-Core rev: bfabc6d4f8742cc1fdeb49c180b0f78faf5739a2) Signed-off-by: Kamil Dziezyk Signed-off-by: Richard Purdie