[Bug 1890481] [NEW] grub2 packaging should store a record of the core ABI and fail the build if it changes

[Steve Langasek]

Public bug reported:

The update of grub2 for CVE-2020-10713 et al introduced a change to the
ABI of the grub core.  This was intentional, but had consequences that
were not obvious to those involved in the update who were aware of the
ABI change.

I propose that we store a record of the core ABI in the package, similar
to what is done with dpkg-gensymbols, and fail the build when the ABI
doesn't match, with an error message explaining to the builder the
potential knock-on effects of a changed ABI.

** Affects: grub2 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1890481

Title:
  grub2 packaging should store a record of the core ABI and fail the
  build if it changes

Status in grub2 package in Ubuntu:
  New

Bug description:
  The update of grub2 for CVE-2020-10713 et al introduced a change to
  the ABI of the grub core.  This was intentional, but had consequences
  that were not obvious to those involved in the update who were aware
  of the ABI change.

  I propose that we store a record of the core ABI in the package,
  similar to what is done with dpkg-gensymbols, and fail the build when
  the ABI doesn't match, with an error message explaining to the builder
  the potential knock-on effects of a changed ABI.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1890481/+subscriptions