Change logs for grub2 source package in Cosmic

  • grub2 (2.02+dfsg1-5ubuntu8.3) cosmic; urgency=medium
       * debian/build-efi-images: add HTTP to generated UEFI images. (LP: #1787630)
       * debian/, debian/grub-common.dirs, debian/,
         debian/ cherry-pick Colin's changes to ucf handling from
         2.02+dfsg1-11 to avoid unnecessarily prompting about grub.cfg changes.
         (LP: #564853)
     -- Mathieu Trudel-Lapierre <email address hidden>  Mon, 18 Mar 2019 12:01:26 -0400
  • grub2 (2.02+dfsg1-5ubuntu8.2) cosmic; urgency=medium
      [ Mathieu Trudel-Lapierre ]
      * debian/grub-check-signatures: properly account for DB showing as empty on
        some broken firmwares: Guard against mokutil --export --db failing, and do
        a better job at finding the DER certs for conversion to PEM format.
        (LP: #1814575)
      [ Steve Langasek ]
      * debian/patches/quick-boot-lvm.patch: checking the return value of
        'lsefi' when the command doesn't exist does not do what's expected, so
        instead check the value of $grub_platform which is simpler anyway.
        LP: #1814403.
     -- Mathieu Trudel-Lapierre <email address hidden>  Tue, 05 Feb 2019 11:05:56 -0500
  • grub2 (2.02+dfsg1-5ubuntu8.1) cosmic; urgency=medium
      [ Mathieu Trudel-Lapierre ]
      * debian/grub-check-signatures: check kernel signatures against keys known
        in firmware, in case a kernel is signed but not using a key that will pass
        validation, such as when using kernels coming from a PPA. (LP: #1789918)
      * debian/patches/mkconfig_leave_breadcrumbs.patch: make sure grub-mkconfig
        leaves a trace of what files were sourced to help generate the config
        we're building. (LP: #1812863)
      [ Steve Langasek ]
      * debian/patches/quick-boot-lvm.patch: If we don't have writable
        grubenv and we're on EFI, always show the menu.  Closes LP: #1800722.
     -- Mathieu Trudel-Lapierre <email address hidden>  Tue, 22 Jan 2019 09:57:07 -0500
  • grub2 (2.02+dfsg1-5ubuntu8) cosmic; urgency=medium
      * debian/patches/grub-install-extra-removable.patch: install mmx64.efi to
        the EFI removable path to avoid boot failures after install when certs
        need to be enrolled and the system's firmware is confused. (LP: #1798171)
     -- Mathieu Trudel-Lapierre <email address hidden>  Wed, 17 Oct 2018 14:44:49 -0400
  • grub2 (2.02+dfsg1-5ubuntu7) cosmic; urgency=medium
      [ Steve Langasek ]
      * debian/ install the systemd unit that's part of
        initrd fallback handling, missed when the feature landed.
      [ Mathieu Trudel-Lapierre ]
      * debian/rules: set DEFAULT_TIMEOUT to 0 if we've enabled FLICKER_FREE_BOOT,
        to avoid unnecessary delay at boot time. (LP: #1784363)
     -- Mathieu Trudel-Lapierre <email address hidden>  Fri, 12 Oct 2018 11:10:10 -0400
  • grub2 (2.02+dfsg1-5ubuntu6) cosmic; urgency=medium
      [ Steve Langasek ]
      * debian/grub-check-signatures: Handle the case where we have unsigned
        vmlinuz and signed vmlinuz.efi.signed. (LP: #1788727)
     -- Mathieu Trudel-Lapierre <email address hidden>  Wed, 03 Oct 2018 14:59:05 -0400
  • grub2 (2.02+dfsg1-5ubuntu5) cosmic; urgency=medium
      [ Mathieu Trudel-Lapierre ]
      * debian/patches/linuxefi_truncate_overlong_reloc_section.patch: The Windows
        7 bootloader has inconsistent headers; truncate to the smaller, correct
        size to fix chainloading Windows 7.
      [ Steve Langasek ]
      * debian/rules, debian/control: enable dh-systemd.
      * debian/patches/add-initrd-less-boot-fallback.patch: add initrd-less
        capabilities. If a kernel fails to boot without initrd, grub will fallback
        to trying to boot the kernel with an initrd. Patch by Chris Glass.
     -- Mathieu Trudel-Lapierre <email address hidden>  Tue, 25 Sep 2018 16:05:13 -0400
  • grub2 (2.02+dfsg1-5ubuntu4) cosmic; urgency=medium
      * debian/patches/linuxefi_fix_relocate_coff.patch: fix typo in
        relocate_coff() causing issues with relocation of code in chainload.
        (LP: #1792575)
     -- Mathieu Trudel-Lapierre <email address hidden>  Mon, 17 Sep 2018 07:45:49 -0400
  • grub2 (2.02+dfsg1-5ubuntu3) cosmic; urgency=medium
      * debian/patches/grub-reboot-warn.patch: Warn when "for the next
        boot only" promise cannot be kept. (LP: #788298)
     -- dann frazier <email address hidden>  Thu, 13 Sep 2018 15:28:50 -0600
  • grub2 (2.02+dfsg1-5ubuntu2) cosmic; urgency=medium
      * debian/patches/add_ext_lfb_base_support.patch: i386/linux: Add support for
        ext_lfb_base. (LP: #1785033)
     -- Mathieu Trudel-Lapierre <email address hidden>  Wed, 05 Sep 2018 14:29:04 -0400
  • grub2 (2.02+dfsg1-5ubuntu1) cosmic; urgency=medium
      [ Mathieu Trudel-Lapierre]
      * Merge against Debian unstable; remaining changes:
        - debian/control: Update Vcs fields for code location on Ubuntu.
        - debian/control: Breaks shim (<< 13).
        - Secure Boot support: use newer patchset from rhboot repo:
          - many linuxefi_* patches added and modified
          - dropped debian/patches/linuxefi_require_shim.patch
          - renamed: debian/patches/no_insmod_on_sb.patch ->
        - debian/patches/install_signed.patch, grub-install-extra-removable.patch:
          - Make sure if we install shim; it should also be exported as the default
            bootloader to install later to a removable path, if we do.
          - Rework grub-install-extra-removable.patch to reverse its logic: in the
            default case, install the bootloader to /EFI/BOOT, unless we're trying
            to install on a removable device, or explicitly telling grub *not* to
            do it.
          - Move installing fb$arch.efi to --no-extra-removable; as we don't want
            fallback to be installed unless we're also installing to /EFI/BOOT.
            (LP: #1684341)
          - Install a BOOT.CSV for fallback to use.
          - Make sure postinst and templates know about the replacement of
            --force-extra-removable with --no-extra-removable.
        - debian/patches/add-an-auto-nvram-option-to-grub-install.patch: Add the
          --auto-nvram option to grub-install for auto-detecting NVRAM availability
          before attempting NVRAM updates.
        - debian/build-efi-images: provide a new grub EFI image which enforces that
          loaded kernels are signed for Secure Boot: build gsb$arch.efi; which is
          the same as grub$arch.efi minus the 'linux' module. Without fallback to
          'linux' for unsigned loading, this makes it effectively enforce having a
          signed kernel. (LP: #1401532)
        - Verify that the current and newer kernels are signed when grub is
          updated, to make sure people do not accidentally shutdown without a
          signed kernel.
        - debian/default/grub: replace GRUB_HIDDEN_* variables with the less
          confusing GRUB_TIMEOUT_STYLE=hidden. (LP: #1258597)
        - debian/patches/support_initrd-less_boot.patch: Added knobs to allow
          non-initrd boot config. (LP: #1640878)
        - Disable os-prober for ppc64el on the PowerNV platform, to reduce the
          number of entries/clutter from other OSes in Petitboot (LP: #1447500)
        - debian/patches/shorter_version_info.patch: Only show the upstream version
          in menu and console, and hide the package one in a package_version
          variable. (LP: #1723434)
        - debian/patches/skip_text_gfxpayload_where_not_supported.patch: Skip the
          'text' payload if it's not supported but present in gfxpayload, such as
          on EFI systems. (LP: #1711452)
        - debian/patches/bufio_sensible_block_sizes.patch: Don't use arbitrary file
          fizes as block sizes in bufio: this avoids potentially seeking back in
          the files unnecessarily, which may require re-open files that cannot be
          seeked into, such as via TFTP. (LP: #1743249)
        * util/grub-install.c: Drop extra handling for x.efi.signed files for mok
          and fallback binaries: shim now installs them without the .signed
          extension. (LP: #1708245)
        - debian/patches/dont-fail-efi-warnings.patch: handle linuxefi patches and
          the casting they do on some architectures: we don't want to fail build
          because of some of the warnings that can show up since we otherwise build
          with -Werror.
      * debian/rules: shuffle files around for now to keep putting build artefacts
        for signing at the same location as they were expected by Launchpad.
      [ Julian Andres Klode ]
      * debian/patches/ofnet-init-structs-in-bootpath-parser.patch: initialize
        structs in bootpath parser. Fixes netboot issues on ppc64el. (LP: #1785859)
    grub2 (2.02+dfsg1-5) unstable; urgency=medium
      [ Colin Watson ]
      * Change Maintainer to <email address hidden>, following
        Alioth lists migration.
      * Backport from upstream:
        - Use grub-file to figure out whether multiboot2 should be used for
          Xen.gz (closes: #898947).
        - x86-64: Treat R_X86_64_PLT32 as R_X86_64_PC32.
      * Fix some test failures:
        - Disable sercon in SeaBIOS.
        - Fix qemu options for UHCI test.
      [ Philipp Hahn ]
      * Disallow unsigned kernels if UEFI Secure Boot is enabled
        (patch by Linn Crosetto <email address hidden>)
      * Add patch to fix lockdown mode
        (patch by Luca Boccassi <email address hidden>)
      * Build monolithic EFI binaries for signing (closes: #851994)
      * Add template for signing monolithic EFI binaries
      * debian/build-efi-images: Use correct EFI vendor (closes: #769172)
      [ Luca Boccassi ]
      * template packages: install changelog and copyright
      * Override lintian error about template rules file
      * Add XB-Efi-Vendor metadata to efi-*-bin packages
    grub2 (2.02+dfsg1-4) unstable; urgency=medium
      * Adjust restore_mkdevicemap.patch to fix format-overflow warning with GCC
        7 (the overflow was in fact impossible in practice, but GCC couldn't
        prove that).
      * Cherry-pick upstream patch to disable -Wformat-truncation on GCC >= 7 in
      * Build with GCC 7 (closes: #892397).
    grub2 (2.02+dfsg1-3) unstable; urgency=medium
      * sparc64: Don't use devspec to determine the OBP path (closes: #854568).
      * ieee1275: Fix crash in of_path_of_nvme when of_path is empty (closes:
      * sparc64: Limit nvme of_path_of_nvme to just SPARC.
    grub2 (2.02+dfsg1-2) unstable; urgency=medium
      * Build-depend on libparted-dev on powerpc and ppc64 (closes: #891070).
      * Add support for modern sparc64 hardware (thanks, Eric Snowberg via John
        Paul Adrian Glaubitz; closes: #854568).
      * Build without PIE on sparc and sparc64 (thanks, John Paul Adrian
        Glaubitz; closes: #891733).
    grub2 (2.02+dfsg1-1) unstable; urgency=medium
      * Switch to tracking debian/grub-extras/ using "git subtree" rather than
      * Update debian/README.source for Salsa migration.
      * Use pkg-config to find FreeType (closes: #887721).
      * Change various binary packages' priorities to optional, since "Priority:
        extra" is now deprecated.
      * Repack upstream tarball without grub-core/lib/libgcrypt*/cipher/crc.c,
        and provide a replacement implementation backported from more recent
        versions of libgcrypt (closes: #745409).
      * Cherry-pick upstream patch to avoid -Werror=unused-value build failure
        (closes: #890431).
      * Handle the case where udevadm exists but is non-functional, as warned
        about by Lintian 2.5.75.
    grub2 (2.02-3) unstable; urgency=medium
      * Use current location for upstream signing key
      * Update upstream signing key to a non-expired version.
      * Install bootinfo.txt and grub.chrp in grub-ieee1275-bin for ppc64, and
        install and use prep-bootdev on powerpc and ppc64 as well as ppc64el
        (thanks, John Paul Adrian Glaubitz; closes: #881730).
      * Cherry-pick upstream patch to change the default TSC calibration method
        to pmtimer on EFI systems (closes: #883193).
      * Move VCS to
      * Consistently create /boot/grub in the postinst of all grub-<platform>
        packages (closes: #884883).
      [ Debconf translations ]
      * [sq] Albanian (Silva Arapi; closes: #874497).
     -- Mathieu Trudel-Lapierre <email address hidden>  Thu, 23 Aug 2018 15:00:14 -0400
  • grub2 (2.02-2ubuntu13) cosmic; urgency=medium
      * debian/patches/tests_update_for_new_qemu.patch: update qemu options to
        remove deprecated options that fail tests.
      * debian/patches: fix up busted patches due to git-dpm:
        - debian/patches/add-an-auto-nvram-option-to-grub-install.patch
        - debian/patches/grub-shell-test-helper-disable-seabios-sercon.patch
      * debian/patches/r_x86_64_plt32-is-like-r_x86_64_pc32.patch: For the purpose
        of grub-mkimage, the R_X86_64_PLT32 relocation is basically the same as
        R_X86_64_PC32. Make R_X86_64_PLT32 supported.
     -- Mathieu Trudel-Lapierre <email address hidden>  Thu, 19 Jul 2018 09:46:53 -0400
  • grub2 (2.02-2ubuntu12) cosmic; urgency=medium
      * debian/default/grub: replace GRUB_HIDDEN_* variables with the more concise
        and less confusing GRUB_TIMEOUT_STYLE=hidden. (LP: #1258597)
     -- Mathieu Trudel-Lapierre <email address hidden>  Mon, 16 Jul 2018 14:18:46 -0400
  • grub2 (2.02-2ubuntu11) cosmic; urgency=medium
      * Verify that the current and newer kernels are signed when grub is updated, to
        make sure people do not accidentally shutdown without a signed kernel.
     -- Julian Andres Klode <email address hidden>  Fri, 13 Jul 2018 15:21:48 +0200
  • grub2 (2.02-2ubuntu10) cosmic; urgency=medium
      * debian/patches/grub-shell-test-helper-disable-seabios-sercon.patch: In the
        grub-shell test helper, disable seabios's serial console through fw_cfg
        runtime configuration as its boot output interferes with testing.
        (LP: #1775249)
     -- Łukasz 'sil2100' Zemczak <email address hidden>  Wed, 06 Jun 2018 01:03:26 +0200
  • grub2 (2.02-2ubuntu9) cosmic; urgency=medium
      * debian/patches/add-an-auto-nvram-option-to-grub-install.patch: Add the
        --auto-nvram option to grub-install for auto-detecting NVRAM availability
        before attempting NVRAM updates.
     -- Łukasz 'sil2100' Zemczak <email address hidden>  Tue, 05 Jun 2018 00:34:38 +0200
  • grub2 (2.02-2ubuntu8) bionic; urgency=medium
      * Drop debian/patches/mkconfig_keep_native_term_active.patch, which can
        lead to flickering between graphical and text mode when traversing the
        menu. (LP: #1752767)
      * debian/patches/yylex-explicitly_cast_fprintf_to_void.patch: Fix FTBFS
        with flex 2.6.4.
     -- dann frazier <email address hidden>  Sun, 04 Mar 2018 06:11:35 -0700