Commit Graph

26 Commits

Author SHA1 Message Date
Leo Sandoval
d8b3b9c701 Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set
There's no point on executing the script if GRUB_ENABLE_BLSCFG has already
been set.

Commit taken (see below) and modified from rhel-10-branch but adopted for
rhel-8-main branch.

   298aa12e * Only execute grub2-switch-to-blscfg if GRUB_ENABLE_BLSCFG isn't set

Resolves: #RHEL-86913

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-04-24 13:18:14 -06:00
Nicolas Frayer
c0ec7d36c1 fs/ext2: Rework of OOB read patch
Resolves: #RHEL-86553
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-04-17 17:25:59 +02:00
Leo Sandoval
fddd5ed615 Bump NVR to sign the build
Resolves: #RHEL-85627
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2025-04-04 12:38:40 -06:00
Nicolas Frayer
53fd3180dd fs/xfs: Sync with latest xfs upstream
Resolves: #RHEL-85627
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-04-03 13:05:08 -06:00
Nicolas Frayer
d0ace491b9 ieee1275/ofnet: Fix grub_malloc() removed after added safe
Remove 'fs/ntfs: Implement attribute verification' patch

Related: #RHEL-79837
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-03-25 17:38:21 +01:00
Leo Sandoval
b209619f5b Add Several CVE fixes
Resolves CVE-2024-45775 CVE-2025-0624
Resolves: #RHEL-75735
Resolves: #RHEL-79837

Signed-off-by: Leo Sandoval <lsandova@redhat.com>
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2025-02-18 12:01:18 -06:00
Michal Sekletar
b0d914e092 Remove BLS fake config on kernel removal
Resolves: #RHEL-4316

Reviewed-by: Leo Sandoval <lsandova@redhat.com>
Reviewed-by: Marta Lewandowska <mlewando@redhat.com>
Signed-off-by: Michal Sekletar <msekleta@redhat.com>
2024-11-14 13:40:11 -06:00
Marta Lewandowska
5b940b00df Fix default behavior when GRUB_ENABLE_BLSCFG is not present
Currently on a kernel update, if GRUB_ENABLE_BLSCFG variable is not defined,
grub2-mkconfig is not executed but it should. Also RHEL 8 has two
grub.cfg stubs depending on how the system boots: /boot/grub2/grub.cfg for BIOS
and /efi/EFI/redhat/grub.cfg for UEFI. The following change fixes both issues.

Resolves: #RHEL-4319

Signed-off-by: Marta Lewandowska <mlewando@redhat.com>
Reviewed-by: Leo Sandoval <lsandova@redhat.com>
2024-11-13 10:57:07 -06:00
Leo Sandoval
6baa4881ea grub-mkconfig.in: turn off executable owner bit
Resolves: #RHEL-58835
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2024-09-19 10:48:25 -06:00
Leo Sandoval
3f9a8de27e 20-grub.install: fix SELinux security type context for BLS
Resolves: #RHEL-4395
Signed-off-by: Leo Sandoval <lsandova@redhat.com>
2024-08-15 09:15:59 -06:00
Nicolas Frayer
6fdedb71d8 fs/ntfs: OOB write fix
(CVE-2023-4692)

Resolves: #RHEL-11566
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-02-20 14:38:47 +01:00
Nicolas Frayer
165857bcf5 grub-set-bootflag: Fix for CVE-2024-1048 (CVE-2024-1048)
Resolves: #RHEL-20746
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2024-02-08 19:36:57 +01:00
Nicolas Frayer
9b255cc407 util: Missing install script for previous commit
Related: #RHEL-4343

Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-11-27 17:19:50 +01:00
Nicolas Frayer
acd0af7a88 util: Enable default kernel for updates
Resolves: #RHEL-4343

Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-11-24 10:51:53 +01:00
Nicolas Frayer
2c4092ba33 kern/ieee1275/init: ppc64: Restrict high memory in presence
of fadump

Resolves: #RHEL-14283
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-10-20 01:18:49 +02:00
Nicolas Frayer
7a35ff39a8 util: Regenerate kernelopts if missing on ppc
Resolves: #2051889
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-08-29 09:39:47 +02:00
Nicolas Frayer
69724fcb9f kern/ieee1275/init: sync vec5 patchset with upstream
Resolves: #2172111
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-06-16 15:35:29 +02:00
Nicolas Frayer
c00bc8d415 efi/http: Change uint32_t to uintn_t for grub_efi_http_message_t
Resolves #2178388
Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
2023-06-15 11:34:43 +02:00
Troy Dawson
f3c8c7e75b Bring rpminspect.yaml over from Brew dist-git
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2023-03-10 10:42:39 -08:00
Troy Dawson
2e1f948a3e Bring gating.yaml over from Brew dist-git
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2023-03-10 10:42:38 -08:00
James Antill
5683d5a632 Import rpm: c8s 2023-02-27 13:27:23 -05:00
CentOS Sources
c508a3579a Auto sync2gitlab import of grub2-2.02-148.el8.src.rpm 2023-02-08 14:14:25 +00:00
CentOS Sources
da1d97bb6a Auto sync2gitlab import of grub2-2.02-147.el8.src.rpm 2023-01-19 08:10:29 +00:00
CentOS Sources
e61bc9c867 Auto sync2gitlab import of grub2-2.02-142.el8.src.rpm 2022-09-14 08:11:38 +00:00
CentOS Sources
d16b713864 Auto sync2gitlab import of grub2-2.02-138.el8.src.rpm 2022-08-11 18:14:14 +00:00
James Antill
a88708866a Initial c8s branch. 2022-05-26 09:14:28 -04:00