folkslinux
/
CBL-Mariner
mirror of https://github.com/microsoft/CBL-Mariner.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
CBL-Mariner/SPECS/grub2
History
Gary Swalling b05435d5ba
Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 
Backport 30 patches to bring grub 2.06 up to SBAT level 2 and resolve vulnerabilities for CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, and CVE-2022-28736.
 		2023-10-26 12:45:44 -07:00
..
0001-Add-support-for-Linux-EFI-stub-loading.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0002-Rework-linux-command.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0003-Rework-linux16-command.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0004-Add-secureboot-support-on-efi-chainloader.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0005-Make-any-of-the-loaders-that-link-in-efi-mode-honor-.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0006-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0017-Pass-x-hex-hex-straight-through-unmolested.patch grub2: Add a few more patches (#809) 2021-04-02 15:58:27 -07:00
0037-Replace-a-lot-of-man-pages-with-slightly-nicer-ones.patch grub2: Add a few more patches (#809) 2021-04-02 15:58:27 -07:00
0052-Make-our-info-pages-say-grub2-where-appropriate.patch grub2: Add a few more patches (#809) 2021-04-02 15:58:27 -07:00
0069-Make-pmtimer-tsc-calibration-not-take-51-seconds-to-.patch grub2: Add a few more patches (#809) 2021-04-02 15:58:27 -07:00
0104-Rework-how-the-fdt-command-builds.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0112-Try-to-pick-better-locations-for-kernel-and-initrd.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0115-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0116-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0117-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0118-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0148-efi-Set-image-base-address-before-jumping-to-the-PE-.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0149-tpm-Don-t-propagate-TPM-measurement-errors-to-the-ve.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0150-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0156-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0157-linuxefi-fail-kernel-validation-without-shim-protoco.patch grub2: Update to 2.06-rc1 (#781) 2021-03-25 15:06:01 -07:00
0166-grub-install-disable-support-for-EFI-platforms.patch grub2: Add a few more patches (#809) 2021-04-02 15:58:27 -07:00
0167-restore-umask-for-grub-config.patch resolve grub2 CVE (#3393) 2022-07-21 16:00:26 -07:00
0170-fix-memory-alloc-errno-reset.patch grub2: add patch for reseting grub_errno (#3712) 2022-09-14 13:50:28 -07:00
0173-loader-efi-chainloader-Simplify-the-loader-state.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0174-commands-boot-Add-API-to-pass-context-to-loader.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0175-loader-efi-chainloader-Use-grub_loader_set_ex.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0176-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0177-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0178-video-readers-png-Abort-sooner-if-a-read-operation-f.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0179-video-readers-png-Refuse-to-handle-multiple-image-he.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0180-video-readers-png-Drop-greyscale-support-to-fix-heap.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0181-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0182-video-readers-png-Sanity-check-some-huffman-codes.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0183-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0184-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0185-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0186-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0187-normal-charset-Fix-array-out-of-bounds-formatting-un.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0188-net-ip-Do-IP-fragment-maths-safely.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0189-net-netbuff-Block-overly-large-netbuff-allocs.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0190-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0191-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0192-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0193-net-tftp-Avoid-a-trivial-UAF.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0194-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0195-net-http-Fix-OOB-write-for-split-http-headers.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0196-net-http-Error-out-on-headers-with-LF-without-CR.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0197-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0198-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0199-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0200-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0201-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
0202-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
CVE-2020-10713.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-14308.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-14309.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-14310.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-14311.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-14372.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-25632.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-25647.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-27749.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2020-27779.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2021-3418.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2021-20225.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2021-20233.nopatch Add nopatches for tooling (#834) 2021-04-02 21:57:16 -04:00
CVE-2022-2601.patch grub2: patch CVE-2022-2601 in 2.0 (#4511) 2023-01-05 15:26:00 -08:00
CVE-2022-3775.patch Patch CVE-2022-3775 in grub2 (#5654) 2023-06-09 16:29:04 -07:00
grub2.signatures.json Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
grub2.spec Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00
macros.grub2 feat: Enable grub2-mkconfig generation of grub config (#5989) 2023-09-25 12:56:58 -07:00
sbat.csv.in Patch grub2 to fix CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735, CVE-2022-28736 (#6469) 2023-10-26 12:45:44 -07:00