File _service:obs_scm:grub2.spec of Package grub2

# This package calls binutils components directly and would need to pass
# in flags to enable the LTO plugins
# Disable LTO
%global _lto_cflags %{nil}

%undefine _hardened_build

%global tarversion 2.12
%if "0%{?product_family}" == "0"
%define efi_vendor %{_vendor}
%else
%define efi_vendor %{product_family}
%endif
%undefine _missing_build_ids_terminate_build
%global _configure_gnuconfig_hack 0

%global gnulibversion fixes

Name:		grub2
Epoch:		1
Version:	2.12
Release:	25
Summary:	Bootloader with support for Linux, Multiboot and more
License:	GPLv3+
URL:		http://www.gnu.org/software/grub/
Source0:	https://ftp.gnu.org/gnu/grub/grub-%{tarversion}.tar.xz
Source1:	grub.macros
Source2:	grub.patches
Source4:	http://unifoundry.com/pub/unifont/unifont-13.0.06/font-builds/unifont-13.0.06.pcf.gz
Source5:	theme.tar.bz2
Source6:	gitignore
Source7:	99-grub-mkconfig.install
Source8:	gnulib-%{gnulibversion}.tar.gz
Source9:	strtoull_test.c
Source10:	20-grub.install
Source11:	bootstrap
Source12:	bootstrap.conf
Source13:	sbat.csv.in
Source14:	config_for_secure

%include %{SOURCE1}
%include %{SOURCE2}

BuildRequires:  gcc efi-srpm-macros flex bison binutils python3 ncurses-devel xz-devel
BuildRequires:  freetype-devel libusb-devel bzip2-devel rpm-devel rpm-libs
BuildRequires:  autoconf automake device-mapper-devel freetype-devel git
BuildRequires:  texinfo gettext-devel dejavu-sans-fonts help2man systemd fuse-devel
BuildRequires:  libtasn1-devel

%ifarch %{golang_arches}
%ifnarch ppc64le
BuildRequires:	pesign >= 0.99-8
%endif
%endif
%if %{?_with_ccache: 1}%{?!_with_ccache: 0}
BuildRequires:	ccache
%endif

Obsoletes:	%{name} <= %{evr}

%if 0%{with_legacy_arch}
Requires:	%{name}-%{legacy_package_arch} = %{evr}
%else
Requires:	%{name}-%{package_arch} = %{evr}
%endif

%{nil}

%description
GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand
Unified Bootloader, which was originally designed and implemented by
Erich Stefan Boleyn.

Briefly, a boot loader is the first software program that runs when a
computer starts. It is responsible for loading and transferring control
to the operating system kernel software (such as the Hurd or Linux). The
kernel, in turn, initializes the rest of the operating system (e.g. GNU).

%package common
Summary:	common package for grub2
BuildArch:	noarch
Conflicts:	grubby < 8.40-18

%description common
Common package for grub2.

%package        tools
Summary:    tools package for grub2
Obsoletes:	%{name}-tools < %{evr}
Requires:   %{name}-common = %{epoch}:%{version}-%{release}
Requires:   gettext os-prober which file
Requires(pre):  dracut
Requires(post): dracut

%description    tools
tools package for grub2.

%package     tools-minimal
Summary:     Support tools for GRUB.
Requires:    gettext %{name}-common = %{epoch}:%{version}-%{release}
Obsoletes:   %{name}-tools < %{evr}

%description tools-minimal
Support tools for GRUB.

%package     tools-extra
Summary:     Support tools for GRUB.
Requires:    gettext os-prober which file
Requires:    %{name}-tools-minimal = %{epoch}:%{version}-%{release}
Requires:    %{name}-common = %{epoch}:%{version}-%{release}
Obsoletes:   %{name}-tools < %{evr}

%description tools-extra
Support tools for GRUB.

%ifarch x86_64
%package        tools-efi
Summary:        efi packages for grub2-tools
Requires:   grub2-common = %{epoch}:%{version}-%{release}
Requires:   gettext os-prober which file
Obsoletes:  grub2-tools < %{evr}

%description    tools-efi
Efi packages for grub2-tools.
%endif

%if 0%{with_efi_arch}
%{expand:%define_efi_variant %%{package_arch} -o}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%define_efi_variant %%{alt_package_arch}}
%endif
%if 0%{with_legacy_arch}
%{expand:%define_legacy_variant %%{legacy_package_arch}}
%endif

%if 0%{with_emu_arch}
%package emu
Summary:	GRUB user-space emulation.
Requires:	%{name}-tools-minimal = %{epoch}:%{version}-%{release}

%description emu
This subpackage provides the GRUB user-space emulation support of all platforms.

%package emu-modules
Summary:	GRUB user-space emulation modules.
Requires:	%{name}-tools-minimal = %{epoch}:%{version}-%{release}

%description emu-modules
This subpackage provides the GRUB user-space emulation modules.
%endif

%package_help

%prep
%do_common_setup
%if 0%{with_efi_arch}
mkdir grub-%{grubefiarch}-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-%{grubefiarch}-%{tarversion}/.gitignore
cp %{SOURCE4} grub-%{grubefiarch}-%{tarversion}/unifont.pcf.gz
sed -e "s,@@VERSION@@,%{version},g" -e "s,@@VERSION_RELEASE@@,%{version}-%{release},g" \
    %{SOURCE13} > grub-%{grubefiarch}-%{tarversion}/sbat.csv
git add grub-%{grubefiarch}-%{tarversion}
%endif
%if 0%{with_alt_efi_arch}
mkdir grub-%{grubaltefiarch}-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-%{grubaltefiarch}-%{tarversion}/.gitignore
cp %{SOURCE4} grub-%{grubaltefiarch}-%{tarversion}/unifont.pcf.gz
git add grub-%{grubaltefiarch}-%{tarversion}
%endif
%if 0%{with_legacy_arch}
mkdir grub-%{grublegacyarch}-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-%{grublegacyarch}-%{tarversion}/.gitignore
cp %{SOURCE4} grub-%{grublegacyarch}-%{tarversion}/unifont.pcf.gz
git add grub-%{grublegacyarch}-%{tarversion}
%endif
%if 0%{with_emu_arch}
mkdir grub-emu-%{tarversion}
grep -A100000 '# stuff "make" creates' .gitignore > grub-emu-%{tarversion}/.gitignore
cp %{SOURCE4} grub-emu-%{tarversion}/unifont.pcf.gz
git add grub-emu-%{tarversion}
%endif
git commit -m "After making subdirs"
sed -i '/videotest_checksum/d' grub-core/tests/lib/functional_test.c
sed -i '/gfxterm_menu/d' grub-core/tests/lib/functional_test.c
sed -i '/cmdline_cat_test/d' grub-core/tests/lib/functional_test.c
git add grub-core/tests/lib/functional_test.c
git commit -m "Disable partial grub_func_test cases"

%build
%ifarch ppc64le
export CFLAGS="$CFLAGS -fno-stack-protector"
%endif

%if 0%{with_efi_arch}
%{expand:%do_primary_efi_build %%{grubefiarch} %%{grubefiname} %%{grubeficdname} %%{_target_platform} %%{efi_target_cflags} %%{efi_host_cflags}}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%do_alt_efi_build %%{grubaltefiarch} %%{grubaltefiname} %%{grubalteficdname} %%{_alt_target_platform} %%{alt_efi_target_cflags} %%{alt_efi_host_cflags}}
%endif
%if 0%{with_legacy_arch}
%{expand:%do_legacy_build %%{grublegacyarch}}
%endif
%if 0%{with_emu_arch}
%{expand:%do_emu_build}
%endif
makeinfo --info --no-split -I docs -o docs/grub-dev.info docs/grub-dev.texi
makeinfo --info --no-split -I docs -o docs/grub.info docs/grub.texi
makeinfo --html --no-split -I docs -o docs/grub-dev.html docs/grub-dev.texi
makeinfo --html --no-split -I docs -o docs/grub.html docs/grub.texi
%if 0%{?openEuler_sign_rsa}
sh /usr/lib/rpm/brp-ebs-sign --efi %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubefiname} || [ $? -eq 2 ] && echo "failed to sign, skip signature."
sh /usr/lib/rpm/brp-ebs-sign --efi %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubeficdname} || [ $? -eq 2 ] && echo "failed to sign, skip signature."
mv %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubefiname}.sig %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubefiname} ||:
mv %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubeficdname}.sig %{_builddir}/grub-%{version}/grub-%{grubefiarch}-%{tarversion}/%{grubeficdname} ||:
%endif

%check
%ifarch ppc64le
%global grubefiarch powerpc-ieee1275
%endif
pushd %{_builddir}/%{?buildsubdir}/grub-%{grubefiarch}-%{tarversion}/grub-core
make check
popd

%install
set -e

%do_common_install
%if 0%{with_efi_arch}
%{expand:%do_efi_install %%{grubefiarch} %%{grubefiname} %%{grubeficdname}}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%do_alt_efi_install %%{grubaltefiarch} %%{grubaltefiname} %%{grubalteficdname}}
%endif
%if 0%{with_legacy_arch}
%{expand:%do_legacy_install %%{grublegacyarch} %%{alt_grub_target_name} 0%{with_efi_arch}}
%endif
%if 0%{with_emu_arch}
%{expand:%do_emu_install %%{package_arch}}
%endif
rm -f $RPM_BUILD_ROOT%{_infodir}/dir
ln -s %{name}-set-password ${RPM_BUILD_ROOT}/%{_sbindir}/%{name}-setpassword
echo '.so man8/%{name}-set-password.8' > ${RPM_BUILD_ROOT}/%{_datadir}/man/man8/%{name}-setpassword.8

%ifnarch x86_64
rm -vf ${RPM_BUILD_ROOT}/%{_bindir}/%{name}-render-label
rm -vf ${RPM_BUILD_ROOT}/%{_sbindir}/%{name}-bios-setup
rm -vf ${RPM_BUILD_ROOT}/%{_sbindir}/%{name}-macbless
%else
pushd %{buildroot}/usr/lib/grub/i386-pc/
strip kernel.exec
strip lnxboot.image
popd
%endif
%{expand:%%do_install_protected_file %{name}-tools-minimal}

%find_lang grub

mkdir -p %{buildroot}%{_datadir}/grub/themes

install -d -m 0755 %{buildroot}%{_prefix}/lib/kernel/install.d/
install -m 0755 %{SOURCE10} %{buildroot}%{_prefix}/lib/kernel/install.d
install -m 0755 %{SOURCE7} %{buildroot}%{_prefix}/lib/kernel/install.d

install -d -m 0755 %{buildroot}%{_sysconfdir}/kernel/install.d/
install -m 0644 /dev/null %{buildroot}%{_sysconfdir}/kernel/install.d/20-grubby.install
install -m 0644 /dev/null %{buildroot}%{_sysconfdir}/kernel/install.d/90-loaderentry.install

#install -d -m 0755 %{buildroot}%{_userunitdir}/timers.target.wants
#install -m 0644 docs/grub-boot-success.timer %{buildroot}%{_userunitdir}
#install -m 0644 docs/grub-boot-success.service %{buildroot}%{_userunitdir}

#install -d -m 0755 %{buildroot}%{_unitdir}/system-update.target.wants
#install -m 0644 docs/grub-boot-indeterminate.service %{buildroot}%{_unitdir}
#ln -s ../grub-boot-indeterminate.service %{buildroot}%{_unitdir}/system-update.target.wants

#find %{buildroot}%{_unitdir}/ -type f -exec chmod a-x {} \;
mkdir %{buildroot}%{_sysconfdir}/default/grub.d

%global finddebugroot "%{_builddir}/%{?buildsubdir}/debug"

%global dip RPM_BUILD_ROOT=%{finddebugroot} %{__debug_install_post}
%define __debug_install_post (                      \
    install -m 0755 -d %{finddebugroot}/usr             \
    mv %{buildroot}%{_bindir} %{finddebugroot}%{_bindir}        \
    mv %{buildroot}%{_sbindir} %{finddebugroot}%{_sbindir}      \
    %{dip}                              \
    install -m 0755 -d %{buildroot}/usr/lib/ %{buildroot}/usr/src/  \
    cp -al %{finddebugroot}/usr/lib/debug/              \\\
        %{buildroot}/usr/lib/debug/             \
    cp -al %{finddebugroot}/usr/src/debug/              \\\
        %{buildroot}/usr/src/debug/ )               \
    mv %{finddebugroot}%{_bindir} %{buildroot}%{_bindir}        \
    mv %{finddebugroot}%{_sbindir} %{buildroot}%{_sbindir}      \
    %{nil}

%undefine buildsubdir

%pre tools
if [ -f /boot/grub2/user.cfg ]; then
    if grep -q '^GRUB_PASSWORD=' /boot/grub2/user.cfg ; then
	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' /boot/grub2/user.cfg
    fi
elif [ -f %{efi_esp_dir}/user.cfg ]; then
    if grep -q '^GRUB_PASSWORD=' %{efi_esp_dir}/user.cfg ; then
	sed -i 's/^GRUB_PASSWORD=/GRUB2_PASSWORD=/' \
	    %{efi_esp_dir}/user.cfg
    fi
elif [ -f /etc/grub.d/01_users ] && \
	grep -q '^password_pbkdf2 root' /etc/grub.d/01_users ; then
    if [ -f %{efi_esp_dir}/grub.cfg ]; then
	# on EFI we don't get permissions on the file, but
	# the directory is protected.
	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \
		sed 's/^password_pbkdf2 root $.*$$/GRUB2_PASSWORD=\1/' \
	    > %{efi_esp_dir}/user.cfg
    fi
    if [ -f /boot/grub2/grub.cfg ]; then
	install -m 0600 /dev/null /boot/grub2/user.cfg
	chmod 0600 /boot/grub2/user.cfg
	grep '^password_pbkdf2 root' /etc/grub.d/01_users | \
		sed 's/^password_pbkdf2 root $.*$$/GRUB2_PASSWORD=\1/' \
	    > /boot/grub2/user.cfg
    fi
fi

%posttrans tools

if [ -f /etc/default/grub ]; then
    if grep -q '^GRUB_ENABLE_BLSCFG=.*' /etc/default/grub; then
      sed -i '/GRUB_ENABLE_BLSCFG=/d' /etc/default/grub
    fi
fi

%files common -f grub.lang
%defattr(-,root,root)
%license COPYING
%dir /boot/grub2/themes/system
%attr(0700,root,root) %dir /boot/grub2
%ghost %config(noreplace) /boot/grub2/grubenv
%exclude /boot/grub2/*
%dir %{_libdir}/grub/
%{_datarootdir}/grub/themes/
%attr(0700,root,root) %dir %{_sysconfdir}/grub.d
%{_prefix}/lib/kernel/install.d/20-grub.install
%{_prefix}/lib/kernel/install.d/99-grub-mkconfig.install
%{_sysconfdir}/kernel/install.d/*.install
%dir %attr(0700,root,root) %{efi_esp_dir}
%{_datadir}/locale/*

%files tools
%defattr(-,root,root)
%{_sbindir}/%{name}-mkconfig
%{_sbindir}/%{name}-switch-to-blscfg
#%{_sbindir}/%{name}-rpm-sort
%{_sbindir}/%{name}-reboot
%{_sbindir}/%{name}-install
%{_sbindir}/%{name}-sparc64-setup
%{_sbindir}/%{name}-ofpathname
%{_sbindir}/%{name}-probe
%{_bindir}/%{name}-glue-efi
%{_bindir}/%{name}-file
%{_bindir}/%{name}-menulst2cfg
%{_bindir}/%{name}-mkimage
%{_bindir}/%{name}-mkrelpath
%{_bindir}/%{name}-script-check
#%{_libexecdir}/%{name}

%config %{_sysconfdir}/grub.d/??_*
#%exclude %{_sysconfdir}/grub.d/01_fallback_counting
%attr(0644,root,root) %ghost %config(noreplace) %{_sysconfdir}/default/grub
%dir %config(noreplace) %{_sysconfdir}/default/grub.d
%{_sysconfdir}/grub.d/README
#%{_userunitdir}/*
#%{_unitdir}/grub-boot-indeterminate.service
#%{_unitdir}/system-update.target.wants
#%attr(0644,root,root) %{_unitdir}/%{name}-systemd-integration.service
#%dir %{_unitdir}/systemd-logind.service.d
#%attr(0644,root,root) %{_unitdir}/systemd-logind.service.d/*
%{_datarootdir}/grub/*
%{_datarootdir}/bash-completion/completions/grub
%exclude %{_datarootdir}/grub/themes
%exclude %{_datarootdir}/grub/*.h
%{_infodir}/%{name}*

%if %{with_legacy_arch}
%{_sbindir}/grub2-install
%ifarch x86_64
%{_sbindir}/grub2-bios-setup
%else
%exclude %{_sbindir}/%{name}-bios-setup
%endif
%ifarch %{sparc}
%{_sbindir}/grub2-sparc64-setup
%{_sbindir}/grub2-ofpathname
%else
%exclude %{_sbindir}/grub2-sparc64-setup
%exclude %{_sbindir}/grub2-ofpathname
%endif
%endif

%files tools-minimal
%defattr(-,root,root)
#%attr(4755, root, root) %{_sbindir}/%{name}-set-bootflag
%{_sbindir}/%{name}-get-kernel-settings
%{_sbindir}/%{name}-set*password
%{_sbindir}/%{name}-set-default
%{_bindir}/%{name}-editenv
%{_bindir}/%{name}-mkpasswd-pbkdf2
%{_bindir}/%{name}-mount
%attr(0644,root,root) %config(noreplace) /etc/dnf/protected.d/%{name}-tools-minimal.conf

%files tools-extra
%defattr(-,root,root)
%{_sysconfdir}/sysconfig/grub
%{_bindir}/%{name}-fstest
%{_bindir}/%{name}-kbdcomp
%{_bindir}/%{name}-mkfont
%{_bindir}/%{name}-mklayout
%{_bindir}/%{name}-mknetdir
%{_bindir}/%{name}-mkstandalone
%{_bindir}/%{name}-syslinux2cfg
%ifnarch %{sparc}
%{_bindir}/grub2-mkrescue
%endif

%ifarch x86_64
%files tools-efi
%defattr(-,root,root)
%{_sbindir}/%{name}-macbless
%{_bindir}/%{name}-render-label
%endif

%if 0%{with_efi_arch}
%{expand:%define_efi_variant_files %%{package_arch} %%{grubefiname} %%{grubeficdname} %%{grubefiarch} %%{target_cpu_name} %%{grub_target_name}}
%endif
%if 0%{with_alt_efi_arch}
%{expand:%define_efi_variant_files %%{alt_package_arch} %%{grubaltefiname} %%{grubalteficdname} %%{grubaltefiarch} %%{alt_target_cpu_name} %%{alt_grub_target_name}}
%endif
%if 0%{with_legacy_arch}
%{expand:%define_legacy_variant_files %%{legacy_package_arch} %%{grublegacyarch}}
%endif

%if 0%{with_emu_arch}
%files emu
%{_bindir}/%{name}-emu*

%files emu-modules
%{_libdir}/grub/%{emuarch}-emu/*
%exclude %{_libdir}/grub/%{emuarch}-emu/*.module
%endif

%files           help
%defattr(-,root,root)
%doc INSTALL NEWS README THANKS TODO docs/grub.html docs/grub-dev.html docs/font_char_metrics.png
%{_datadir}/man/man*

%changelog
* Thu Oct 10 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-25
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:10_linux: fix missing "ro" in kernel boot parameters
       Disable LTO

* Fri Aug 2 2024 chench <chench@hygon.cn>  - 1:2.12-24
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add support for hygon tpcm

* Wed Jul 24 2024 wangyueliang <wangyueliang@kylinos.cn> - 1:2.12-23
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Inherit 'Add BLS Support' patch from grub-2.06

* Mon Jul 15 2024 peng.zou <peng.zou@shingroup.cn> - 1:2.12-22
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove BuildRequires:pesign >= 0.99-8 and fix bug about petitboot doesn't ignore EFI entries for ppc64le

* Fri Jun 28 2024 yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-21
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Export all variables from the initial context when creating a submenu

* Tue Jun 25 2024 peng.zou <peng.zou@shingroup.cn> - 1:2.12-20
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le

* Mon Jun 24 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-19
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng module again

* Wed Jun 19 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-18
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng module

* Wed Jun 19 2024 yueyuankun <yueyuankun@kylinos.cn> - 1:2.12-17
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Add gfxterm_background and serial modules to grub.efi

* Mon Jun 17 2024 wangziliang <wangziliang@kylinos.cn> - 1:2.12-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/mdraid1x_linux: Prevent infinite recursion

* Wed Jun 5 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-15
- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check

* Tue May 28 2024 liuxue <liuxue@loongson.cn> - 1:2.12-14
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix that patch233 introduced old code

* Sat May 25 2024 liuxue <liuxue@loongson.cn> - 1:2.12-13
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch64: Add back-compatibility for linux kernel

* Fri May 24 2024 Ouuleilei <wangliu@iscas.ac.cn> - 1:2.12-12
- Add sophgo's patch to support risc-v machine SG2042

* Sat May 11 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-11
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch64: fix GRUB_EFI_MAX_ALLOCATION_ADDRESS undeclared

* Sat May 11 2024 xiaozai <xiaozai@kylinos.cn> - 1:2.12-10
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Handle non-continuous data blocks in directory extents

* Tue May 7 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-9
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ignore signing failure
       Revert "templates: Disable the os-prober by default"
       Revert "templates: Properly disable the os-prober by default"
       Add grub-get-kernel-settings and use it in 10_linux
       Replace a lot of man pages with slightly nicer ones

* Tue Apr 9 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-8
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:support TPM2.0
       use default timestamp

* Mon Apr 8 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-7
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed

* Fri Mar 22 2024 jinlun <jinlun@huawei.com> - 1:2.12-6
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Interface for replacing the EFI signature

* Thu Mar 21 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-5
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel

* Mon Mar 11 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-4
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Don't require a password to boot entries generated by grub-mkconfig

* Fri Mar 8 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-3
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:look for grub.cfg on efi where the app was found

* Thu Mar 7 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-2
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify klist in 10_linux.in

* Mon Mar 4 2024 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.12-1
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:update to 2.12

* Mon Dec 25 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-43
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations

* Wed Dec 20 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-42
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg

* Tue Nov 28 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-41
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng

* Wed Nov 22 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-40
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add TPCM support with ipmi channel

* Thu Nov 16 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-39
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:support openEuler signature

* Sat Oct 7 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-38
- Type:CVE
- CVE:CVE-2023-4692 CVE-2023-4693
- SUG:NA
- DESC:fs/ntfs: Make code more readable
       fs/ntfs: Fix an OOB read when parsing a volume label
       fs/ntfs: Fix an OOB read when parsing bitmaps for index attributes
       fs/ntfs: Fix an OOB read when parsing directory entries from resident and non-resident index attributes
       fs/ntfs: Fix an OOB read when reading data from the resident $DATA attribute
       fs/ntfs: Fix an OOB write when parsing the $ATTRIBUTE_LIST attribute for the $MFT file

* Wed Sep 13 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-37
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fs/udf: Fix out of bounds access
       lib/relocator: Fix OOB write when initializing lo->freebytes[]
       util/grub-mount: Fix memory leak in fuse_getattr()

* Fri Sep 1 2023 ouuleilei <wangliu@iscas.ac.cn> - 1:2.06-36
add a patch to fix build error

* Thu Aug 17 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-35
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern: Check for NULL when closing devices and disks
       kern/efi/mm: Fix use-after-free in finish boot services
       util/grub-install-common: Fix the key of the --core-compress option
       net/dns: Fix lookup error when no IPv6 is returned
       net/dns: Simplify error handling of recv_hook() function
       net/dns: Fix removal of DNS server

* Mon Aug 7 2023 mengyingkun <mengyingkun@loongson.com> - 1:2.06-34
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Fix initrd parameter passing

* Mon Jul 24 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-33
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove the items of unsupported filesystems in fs.lst

* Mon Jul 17 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-32
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Override the linker and force noexecstack stacks

* Mon Jul 3 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-31
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:kern/acpi: Use xsdt_addr if present
       commands/acpi: Use xsdt_addrifpresent

* Thu Jun 15 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-30
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Revert "EFI: allocate kernel in EFI_RUNTIME_SERVICES_CODE

* Sun Apr 23 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-29
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:Read /etc/default/grub.d/*.cfg after /etc/default/grub

* Mon Apr 10 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-28
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:osdep/linux/hostdisk: Modify sector by sysfs as disk sector
       net/bootp: Fix unchecked return value
       fs/iso9660: Avoid reading past the entry boundary
       fs/iso9660: Incorrect check for entry boundary
       fs/iso9660: Prevent skipping CE or ST at start of continuation area
       fs/iso9660: Prevent read past the end of system use area
       fs/iso9660: Add check to prevent infinite loop
       gentpl.py: Remove .interp section from .img files
       kern/fs: Fix possible integer overflow in i386-pc mode with large partitions
       font: Reject fonts with negative max_char_width or max_char_height
       font: Assign null_font to unknown_glyph
       font: Check return value of grub_malloc() in ascii_glyph_lookup()

* Wed Mar 22 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-27
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Implement cache synchronization operation

* Sat Mar 18 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-26
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Force initrd load address 64KiB alignment

* Sat Mar 11 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-25
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix missing declaration of strchrnul in rpm-sort

* Fri Mar 10 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-24
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for new EFI screen info GUID

* Mon Feb 13 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-23
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add support for v4.0 interface

* Wed Feb 8 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-22
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch: Add EFI frame buffer support

* Mon Feb 6 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-21
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disk/diskfilter: Check calloc() result for NULL
       kern/buffer: Handle NULL input pointer in grub_buffer_free()
       disk/diskfilter: Don't make a RAID array with more than 1024 disks
       loader/multiboot_elfxx: Fix memory leak
       loader/linux: Ensure the newc pathname is NULL-terminated
       term/i386/pc/vga_text: Prevent out-of-bounds writes to VGA text buffer
       normal/cmdline: Fix two related integer underflows
       fs/iso9660: Fix memory leaks in grub_iso9660_susp_iterate()
       fs/squash4: Fix memory leaks in grub_squash_iterate_dir()
       fs/xfs: Fix memory leaks in XFS module
       kern/file: Fix error handling in grub_file_open()

* Thu Feb 2 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-20
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:loongarch modify the location where initrd is loaded into memory

* Thu Feb 2 2023 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-19
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable some unsupported filesystems

* Tue Jan 10 2023 mengyingkun <mengyingkun@loongson.cn> - 1:2.06-18
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add loongarch support

* Mon Dec 19 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-17
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the permissions of the files which under /usr/lib/systemd/system directory
       in grub2-tools to 644

* Mon Dec 12 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-16
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable -fPIE compilation options

* Fri Nov 18 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-15
- Type:bugfix
- CVE:CVE-2022-2601 CVE-2022-3775
- SUG:NA
- DESC:fix CVE-2022-2601 and CVE-2022-3775

* Fri Nov 4 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-14
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add the source file of config_for_secure

* Sun Oct 23 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-13
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport some patches from upstream

* Tue Aug 30 2022 wanglu <wanglu210@huawei.com> - 1:2.06-12
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tests: Disable blkid cache usage
       disk/efi/efidisk: Pass buffers with higher alignment

* Sat Jul 23 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-11
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix compressed kernel verification failed

* Wed Jun 29 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 1:2.06-10
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add tpm in efi_modules of aarch64

* Tue Jun 21 2022 sunhai <sunhai10@huawei.com> - 1:2.06-9
- Type:CVE
- CVE:CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696
- SUG:NA
- DESC:adapts to the open source code for log printing
       libgcrypt: Avoid -Wsign-compare in rijndael do_setkey()
       disk/ldm: Fix resource leak
       io/gzio: Fix possible use of uninitialized variable in huft_build()
       fs/zfs/zfs: Fix possible insecure use of chunk size in zap_leaf_array_get()
       util/grub-mkfont: Fix memory leak in write_font_pf2()
       util/grub-fstest: Fix resource leaks in cmd_cmp()
       util/grub-mkrescue: Fix memory leak in write_part()
       util/grub-install-common: Fix memory leak in copy_all()
       osdep/linux: Fix md array device enumeration
       double grub x86_64-efi mm pool
       net: fix null pointer dereference when parsing ICMP6_ROUTER_ADVERTISE messages
       efinet:Correct closing of SNP protocol
       configure:Fix misspelled variable BUILD_LDFAGS -> BUILD_LDFLAGS
       fix partmap_test failure
       UEFI mode uses /boot/efi/EFI/euleros/user.cfg as password
       util/resolve: Do not read past the end of the array in read_dep_list()
       fs/affs: Fix resource leaks
       Revert iee1275/datetime: Fix off-by-1 error
       commands/search: Fix bug stopping iteration when --no-floppy is used
       mm: Temporarily disable grub_mm_debug while calling grub_vprintf() in grub_printf()
       net: Check against nb->tail in grub_netbuff_pull()
       kern/rescue_parser: Ensure that parser allocated memory is not leaked
       net/net: Fix uninitialized scalar variable
       net/arp: Fix uninitialized scalar variable
       loader/i386/pc/linux: Fix uninitialized scalar variable
       net/bootp: Fix uninitialized scalar variable
       fix CVE-2021-3697 CVE-2022-28735 CVE-2022-28736 CVE-2022-28734 CVE-2022-28733 CVE-2021-3695 CVE-2021-3696

* Thu May 05 2022 sunhai <sunhai10@huawei.com> - 1:2.06-8
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix PXE boot in IPv6 network when paring ICMP6_ROUTE_ADVERTISE messages

* Sun Apr 24 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-7
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify the file permissions of grub-boot-indeterminate.service and
       10-grub2-logind-service.conf to 644

* Thu Apr 21 2022 lvxiaoqian<xiaoqian@nj.iscas.ac.cn> - 2.06-6
- update grub.macros for riscv
	
* Thu Apr 14 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-5
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix grub2 password setting does not take effect

* Fri Mar 25 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-4
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:enable sbat and don't verify kernels twice

* Thu Mar 24 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-3
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove 08_fallback_counting.in apply grubby

* Tue Mar 22 2022 fengtao <fengtao40@huawei.com> - 2.06-2
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix setupmode not available in some machine

* Tue Mar 22 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.06-1
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:update to version 2.06
       disable partial grub_func_test cases because they are not supported

* Mon Feb 28 2022 fengtao <fengtao40@huawei.com> - 2.04-24
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix arm64 kernel image not aligned on 64k boundary
       fix grub.patches file format to unix

* Sat Feb 26 2022 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-23
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable grub-boot-success.service

* Fri Nov 26 2021 xihaochen<xihaochen@huawei.com> - 2.04-22
- Type:bugfix
- ID:NA
- SUG:NA
  DESC:grub2 set password prompts to enter the current pass
       support TPM2.0
       use default timestamp

* Tue Nov 16 2021 fengtao <fengtao40@huawei.com> - 2.04-21
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix bad test on GRUB_DISABLE_SUBMENU

* Mon Sep 27 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-20
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:verifiers: Fix calling uninitialized function pointer

* Mon Aug 02 2021 gaihuiying <gaihuiying1@huawei.com> - 2.04-19
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:modify git config parameters

* Tue May 25 2021 yanan <yanan@huawei.com> - 2.04-18
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete the Symbolic Link of grubenv in grub2-efi-x64 and grub-efi-aa64 packages

* Tue May 18 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-17
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete the Symbolic Link of grubenv in grub2-efi-x64 and grub-efi-aa64 packages

* Tue Mar 30 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-16
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport some patches from upstream community and fix incorrect
       author names in patches

* Mon Mar 29 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-15
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the patches that upstream community released on
       March 2, 2021

* Mon Mar 29 2021 renmingshuai <renmingshuai@huawei.com> - 2.04-14
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add efi_vendor for vendor

* Sun Mar 21 2021 orange-snn <songnannan2@huawei.com> - 2.04-13
- fix postun error in grub2-efi-x64

* Thu Mar 18 2021 yanglu <yanglu60@huawei.com> - 2.04-12
- Type:cves
- ID:CVE-2020-27779 CVE-2020-14372
- SUG:NA
- DESC:fix CVE-2020-27779 CVE-2020-14372

* Wed Mar 17 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-11
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix the installation failure of grub2-efi-x64/grub-efi-aa64 packages on
       the /boot partition of VFAT file system.

* Tue Mar 16 2021 hanhui <hanhui15@huawei.com> - 2.04-11
- Type:cves
- Id:CVE-2020-27779 CVE-2020-14372
- SUG:NA
- DESC:fix CVE-2020-27779 CVE-2020-14372

* Fri Mar 12 2021 yanglu <yanglu60@huawei.com> - 2.04-10
- Type:cves
- Id:CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233
- SUG:NA
- DESC:fix CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2021-20225 CVE-2021-20233

* Sat Feb 27 2021 fengtao <fengtao40@huawei.com> - 2.04-9
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:tftp roll over block counter to prevent timeouts with
       data packets

* Mon Feb 22 2021 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-8
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix kernel not found because grub.cfg using BLS format

* Mon Nov 16 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-7
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove duplicate rpm-devel in BuildRequires

* Sat Nov 14 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-6
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove 08_fallback_counting.in apply grubby

* Thu Oct 29 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-5
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove grub2-emu and grub2-emu-lite in grub2-tools

* Thu Oct 29 2020 zhangqiumiao <zhangqiumiao1@huawei.com> - 2.04-4
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:split tools-extra and tools-minimal from tools

* Fri Aug 7 2020 hanzhijun <hanzhijun1@huawei.com> - 2.04-3
- Type:cves
- Id:CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707
- SUG:NA
- DESC:fix CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707

* Mon Aug 3 2020 hanzhijun <hanzhijun1@huawei.com> - 2.04-2
- add CPPFLAGS

* Sat Aug 1 2020 hanzhijun <hanzhijun1@huawei.com> - 2.04-1
- update to 2.0.4 
 
* Fri Jul 17 2020 chenyaqiang <chenyaqiang@huawei.com> - 2.02-75
- remove repeated buildrequest packge “rpm-devel” in grub2.spec

* Fri Apr 24 2020 fengtao <fengtao40@huawei.com> - 2.02-74
- exclude two cmd in grub2-tools

* Tue Mar 3 2020 songnannan <songnannan2@huawei.com> - 2.02-73
- delete java-1.8.0-openjdk in buildrequires

* Thu Feb 20 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.02-72
- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add make check function

* Sat Dec 21 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-71
- Type:cves
- Id:NA
- SUG:NA
- DESC:add cve patches

* Tue Dec 10 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-70
- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add the path for themes

* Tue Dec 3 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-69- Type:bugfix
- Id:NA
- SUG:NA
- DESC:add config_for_secure file for gcc_secure

* Sat Sep 28 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-68
- Type:bugfix
- Id:NA
- SUG:NA
- DESC:rename the 20-grub.install file to 20-grubby.install

* Wed Sep 25 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-67
- Type:bugfix
- ID:NA
- SUG:restart
- DESC:fix grub2-setpassword error for openeuler

* Wed Sep 18 2019 openEuler Buildteam <buildteam@openeuler.org> - 2.02-66
- Package init