Commit Graph

219 Commits

Author SHA1 Message Date
Nicolas Frayer
e6a061bdb0 ieee1275/powerpc: implements fibre channel discovery for ofpathname
Resolves: #RHEL-102160
Resolves: #RHEL-102161

Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2026-07-02 15:39:28 +02:00
Rolv Apneseth
1a232b2bbf ppc64le: fix issues with RAID1 metadata 1.0 partition detection
Resolves: #RHEL-184859
Signed-off-by: Rolv Apneseth <rapneset@redhat.com>
2026-06-23 09:09:32 +01:00
Josue Hernandez
bcd77cd054 Change login error message
Login error message shows the line of code where it was called
which is not user friendly, This proposal adds better and more
human log messages when authentication fails

Resolves: #RHEL-179058

Signed-off-by: Josue Hernandez <josherna@redhat.com>
2026-06-02 11:44:02 -06:00
Leo Sandoval
8152db0a79 New package grub2-efi-x64-cc for confidential computing workloads
Resolves: #RHEL-127909

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2026-04-01 12:47:17 +02:00
Josue Hernandez
49610f868a kern/efi/mm: Change to keep track of map allocation size
Resolves: #RHEL-148309

Signed-off-by: Josue Hernandez <josherna@redhat.com>
2026-03-09 13:30:51 -06:00
Nicolas Frayer
41169fff59 ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
Related: #RHEL-24510
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2026-02-13 12:21:11 +01:00
Leo Sandoval
42e451646d commands/search.c: check possible NULL pointer before dereference
Resolves: #RHEL-146317

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2026-02-11 15:19:24 -06:00
Nicolas Frayer
76413fedc9 Fix several security issues about module unloading and file handling
Resolves: #RHEL-141581
Resolves: #CVE-2025-54770 #CVE-2025-54771 #CVE-2025-61661
Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2026-02-05 10:39:34 +01:00
Leo Sandoval
9674908a86 Include upstream blsuki related patches
Resolves: #RHEL-119685
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2026-01-26 14:06:34 -06:00
Nicolas Frayer
d5ce85e0f9 mkimage/appendedsig: Fix grub-mkimage with an unaligned appended signature size
Related: #RHEL-24510
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-12-03 11:18:30 +01:00
Nicolas Frayer
17ffd9b3e0 powerpc: Add appended signature feature
Resolves: #RHEL-24510
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-11-27 14:40:11 +01:00
Leo Sandoval
f4f7a97672 Include license into grub-set-password util
Resolves: #RHEL-120704
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-11-06 11:32:17 -06:00
Leo Sandoval
2ba9cee552 Fix the fallback mechanism when menu entries fail to boot
Resolves: RHEL-113024
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-09-08 14:10:24 -06:00
Leo Sandoval
76e12e1b3d Remove strong stack protector on target CFLAGS
Related: #RHEL-89464
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-08-21 09:52:12 -06:00
Leo Sandoval
e041fb0c9b Enable strong stack protector and annobin section
Besides enabling the strong stack protector flag, it also removes the
sed empty replacements for annobin, so now most binaries include the
annobin section, required by the CI annocheck tool.

Resolves: #RHEL-89464

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-08-07 12:15:35 -06:00
Leo Sandoval
33ce16660b Set correctly the memory attributes for the kernel PE sections
Resolves: #RHEL-97086

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-07-28 13:16:55 -06:00
Leo Sandoval
78ed8c744d mm: do not update mem attrs even if EFI protocol is present
A temporal workaround while a real fix is being elaborated.

Resolves: #RHEL-97086

Signed-off-by: Gerd Hoffman <ghoffman@redhat.com>
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-07-15 14:43:49 -06:00
Leo Sandoval
2be0734e9b Handle special kernel parameter characters properly
Resolves: #RHEL-94342
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-06-02 16:20:19 -06:00
Andrea Bolognani
bdb6399fe8 Fix riscv64 build
Resolves: RHEL-85987

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2025-04-17 01:32:52 +02:00
Nicolas Frayer
d002e804dd ppc/mkimage: SBAT support on powerpc
Resolves: #RHEL-87420
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-04-15 15:54:33 +02:00
Nicolas Frayer
d23765b1e8 ieee1275/ofnet: Fix grub_malloc() removed after added safe
Related: #RHEL-80073
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-03-25 14:49:31 +01:00
Nicolas Frayer
5f77cf3173 powerpc: increase MIN RMA size for CAS negotiation
Resolves: #RHEL-76429
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-03-18 14:43:02 +01:00
Leo Sandoval
95e08eb027 Remove NTFS attribute verification patch
The removed patch was part of the CVE patches ported recently into RHEL but
is causing segfaults on dual boot (Windows & RHEL) systems when generating the
grub configuration with the grub2-mkconfig tool. At some point the same patch
will come back with the corresponding fix but for the time being, it is removed.

Related: RHEL-80686

Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-03-11 10:29:02 -06:00
Nicolas Frayer
0f8974ea55 fs/ext2: Rework out-of-bounds read for inline and external extents
Related: #RHEL-80686
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-02-26 12:19:46 +01:00
Leo Sandoval
b9f070c2f2 Add Several CVE fixes
Resolves: CVE-2024-45781 CVE-2024-45783 CVE-2024-45778
Resolves: CVE-2024-45775 CVE-2024-45780 CVE-2024-45774
Resolves: CVE-2025-0690 CVE-2025-1118 CVE-2024-45782
Resolves: CVE-2025-0624 CVE-2024-45779 CVE-2024-45776
Resolves: CVE-2025-0622 CVE-2025-0677
Resolves: #RHEL-80691
Resolves: #RHEL-80690
Resolves: #RHEL-80689
Resolves: #RHEL-80687
Resolves: #RHEL-80686

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-02-25 11:59:31 -06:00
Leo Sandoval
c17ad7254d fix pending SAST issues
Resolves: #RHEL-50504

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-01-22 17:05:40 -06:00
Leo Sandoval
ff6d9c809c term/ns8250-spcr: return if redirection is disabled
Compared to previous commit, this is a better approach to handle SPCR null base
address indicating no redirection, doing the null check on the caller instead of
the callee.

Resolves: #RHEL-68622
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-01-17 11:25:47 -06:00
Leo Sandoval
4052952894 term/ns8250: return in case of a null SPCR base addresses
Resolves: #RHEL-68622
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-01-13 12:04:13 -06:00
Nicolas Frayer
6f919c8415 fs/xfs: fix large extent counters incompat feature support
Resolves: #RHEL-68390
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-01-09 17:52:49 +01:00
Leo Sandoval
8812e31e42 acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()
Resolves: #RHEL-68690
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2024-12-09 10:06:32 -06:00
Leo Sandoval
adaa841fca 10_linux.in: escape semicolon and ampersand on BLS upddate
Resolves: #RHEL-68531
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2024-11-21 12:48:34 -06:00
Leo Sandoval
f9ffaac36e Rebased to release grub-2.12
Resolves: #RHEL-15032

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2024-11-07 09:45:00 -06:00
Nicolas Frayer
6fd4bccf50 Sync with rhel9 for critical patches
Resolves: #RHEL-56733
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-08-30 12:04:21 +02:00
Nicolas Frayer
7e8f0f0dcf grub-mkconfig dont overwrite BLS cmdline if BLSCFG
Resolves: #RHEL-53848
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-08-28 12:51:29 +02:00
Nicolas Frayer
824f4e8aa6 grub2-mkconfig: Remove mountpoint check
Related: #RHEL-32099
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-08-05 22:26:37 +02:00
72310e515d grub2-mkconfig: Simplify os_name detection 2024-07-31 17:05:13 +00:00
Nicolas Frayer
9c6e5cf6c8 grub2-mkconfig: Prevent mkconfig from overwriting grub cfg stub
Resolves: #RHEL-32099
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-07-16 11:36:09 +02:00
Leo Sandoval
29406ad333 xfs: include directory extent parsing patch
Patch is required to boot XFS-formatted partitions created with
xfsprogs 6.5.0

Resolves: #2259266
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2024-01-23 12:02:27 -06:00
Nicolas Frayer
6cc927e76b Compiler flags: ignore incompatible types for now as it prevents
CI builds

Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-01-18 15:22:45 +01:00
Nicolas Frayer
d2d9f6012b grub-core/commands: add flag to only search root dev
Resolves: #2223437
Resolves: #2224951
Resolves: #2258096
Resolves: CVE-2023-4001
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-01-18 15:22:34 +01:00
Nicolas Frayer
ebd311ec52 xfs: Remove directory extent parsing patch
Some bios systems can't boot with one of
the xfs upstream patches

Resolves: #2254370
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-01-17 15:23:37 +01:00
Nicolas Frayer
d11c8385d6 normal: fix prefix when loading modules
Resolves: #2209435
Resolves: #2173015
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-01-04 11:29:35 +01:00
Leo Sandoval
4562b72afc chainloader: remove device path debug message
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2023-12-14 09:31:59 -06:00
Nicolas Frayer
c4a49e5c9a fs/xfs: Add several fixes/improvements to xfs fs from upstream
Resolves: #2247926
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-12-01 10:31:36 +01:00
Nicolas Frayer
88924af554 Remove [Install] section from aux systemd units
Related: #2247635
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-11-14 17:29:09 +01:00
Nicolas Frayer
8a9297c431 util: grub-install on EFI if forced
Resolves: #1917213
Resolves: #2240994
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-11-06 18:10:09 +01:00
Nicolas Frayer
07412b4a97 kern/ieee1275/init: ppc64: Restrict high memory in presence
of fadump

Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-10-20 18:11:41 +02:00
Nicolas Frayer
aa936e7b0c ofdisk: Fix missing #include in ofdisk.c
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-09-29 18:06:49 +02:00
Nicolas Frayer
52d23fe6f6 arm64: Use proper memory type for kernel allocation
Resolves: #2149020
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-09-14 18:26:26 +02:00
Nicolas Frayer
d161705351 spec: Use systemd presets and macros for units in tools package
Resolves: #2230575

Signed-off-by: Christian Glombek <cglombek@redhat.com>
2023-09-14 18:26:07 +02:00