[Bug 2032294] Re: Proper fix for chainloading Windows
Launchpad Bug Tracker
2032294 at bugs.launchpad.net
Thu Sep 28 16:18:55 UTC 2023
This bug was fixed in the package grub2-unsigned - 2.12~rc1-10ubuntu2
---------------
grub2-unsigned (2.12~rc1-10ubuntu2) mantic; urgency=medium
* Merge from Debian unstable to pick up fixes (LP: #2028947); remaining changes:
- Add Ubuntu sbat data
- build-efi-images: do not produce -installer.efi.signed. LP: 1863994
- grub-common: Install canonical-uefi-ca.crt
- Check signatures
- Support installing to multiple ESP (LP: 1871821)
- Disable various bits on i386
- Split out unsigned artefacts into grub2-unsigned
- Vcs-Git: Point to ubuntu packaging branch
- Relax dependencies on grub-common and grub2-common
- grub-pc: Avoid the possibility of breaking grub on SRU update due
to ABI change
- UBUNTU: Default timeout changes
- Revert "Add jfs module to signed UEFI images. Closes: #950959"
- Revert "Add f2fs module to signed UEFI images"
- Install grub-initrd-fallback.service again
- Build using -O1 on s390x to avoid misoptimization
- grub-check-signatures: Support gzip compressed kernels (LP: #1954683)
- grub-multi-install: Reset partition type between partitions (LP: #1997795)
- Drop i386 from grub-efi-amd64* (LP: #2020907)
- Turn depends on grub-efi-amd64/arm64 unversioned
- forward port fix for LP: #1926748
- Make the grub2/no_efi_extra_removable setting work correctly
- Forward port the fix for LP: #1930742 and make it conditional (xenial/bionic only)
- Build grub2-unsigned packages with xz compression
- Replaced patches:
- installe-signed.patched
- grub-install-extra-removable.patch
- grub-install-removable-shim.patch
- Added patches:
+ rhboot-f34-dont-use-int-for-efi-status.patch
+ rhboot-f34-make-exit-take-a-return-code.patch
+ suse-grub.texi-add-net_bootp6-document.patch
+ ubuntu-add-devicetree-command-support.patch
+ ubuntu-add-initrd-less-boot-fallback.patch
+ ubuntu-add-initrd-less-boot-messages.patch
+ ubuntu-boot-from-multipath-dependent-symlink.patch
+ ubuntu-dont-verify-loopback-images.patch
+ ubuntu-fix-lzma-decompressor-objcopy.patch
+ ubuntu-grub-install-extra-removable.patch
+ ubuntu-install-signed.patch
+ ubuntu-mkconfig-leave-breadcrumbs.patch
+ ubuntu-os-prober-auto.patch
+ ubuntu-recovery-dis_ucode_ldr.patch
+ ubuntu-resilient-boot-boot-order.patch
+ ubuntu-resilient-boot-ignore-alternative-esps.patch
+ ubuntu-shorter-version-info.patch
+ ubuntu-speed-zsys-history.patch
+ ubuntu-support-initrd-less-boot.patch
+ ubuntu-verifiers-last.patch
+ ubuntu-zfs-enhance-support.patch
+ ubuntu-zfs-gfxpayload-dynamic.patch
+ ubuntu-zfs-gfxpayload-keep-default.patch
+ ubuntu-zfs-insmod-xzio-and-lzopio-on-xen.patch
+ ubuntu-zfs-mkconfig-recovery-title.patch
+ ubuntu-zfs-mkconfig-signed-kernel.patch
+ ubuntu-zfs-mkconfig-ubuntu-distributor.patch
+ ubuntu-zfs-mkconfig-ubuntu-recovery.patch
+ ubuntu-zfs-vt-handoff.patch
* Dropped Ubuntu changes:
- Temporarily rmmod peimage for os-prober chainloader entries (LP: #2030810)
* Revert: "Have -bin packages Break pre-2.12 -signed packages.", this is not
compatible with our versioning schemes.
* Install a /usr/lib/grub/grub-sort-version and use that to sort versions as
it respects GRUB_FLAVOUR_ORDER. Depend on python3 to do so.
* rules: Add DPKG_BUILDPACKAGE_OPTIONS to generate-grub2-unsigned
* Source package generated from src:grub2 using make -f ./debian/rules
generate-grub2-unsigned
grub2 (2.12~rc1-10) unstable; urgency=medium
[ Julian Andres Klode ]
* Cherry pick fix for unmerged usr shebang (Closes: #1051251)
* grub-common.dirs: Install empty /etc/default/grub.d (Closes: #1051412)
[ Mate Kukri ]
* efi: Eliminate globals from the `peimage.c` chainloader
grub2 (2.12~rc1-9) unstable; urgency=medium
* Correct the Breaks to include the ~rc1 bit of the version
grub2 (2.12~rc1-8) unstable; urgency=medium
* Have -bin packages Break pre-2.12 -signed packages.
On insecurely booted systems, upgrading the -bin packages with
the modules before the -signed packages caused the signed binaries
to crash when loading additional modules. (Closes: #1051271)
* Revert "In the signed packages, change the version dependency"
This reverts commit 680bb22c3308b7ccd0a7eb7923c7d68067b626f9. The
signed package needs the modules to be at the same version during
boot on insecure systems or it may crash trying to load further
modules.
* Set Protected: yes for -signed packages so they cannot easily be removed.
This ensures that the = depends in grub-efi-amd64-signed does not
cause it to be removed when it is out of sync with src:grub2
grub2 (2.12~rc1-7) unstable; urgency=medium
* Upload to unstable
grub2 (2.12~rc1-6) experimental; urgency=medium
* Use rm_conffile instead of remove-on-upgrade.
This works with ftp-master's old lintian version and allows
easy backports
grub2 (2.12~rc1-5) experimental; urgency=medium
[ Felix Zielcke ]
* Add salsa-ci.yml and disable blhc and reprotest pipelines.
* remove on upgrades /etc/default/grub.d/init-select.cfg. (Closes: #1042707)
[ Julian Andres Klode ]
* peimage: Set file_path for loaded image (LP: #2030810, #2032294)
* Hack up the lintian overrides for stable lintian on ftp-master
-- Julian Andres Klode <juliank at ubuntu.com> Mon, 25 Sep 2023 17:31:09
+0200
** Changed in: grub2-unsigned (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-unsigned in Ubuntu.
https://bugs.launchpad.net/bugs/2032294
Title:
Proper fix for chainloading Windows
Status in grub2-unsigned package in Ubuntu:
Fix Released
Bug description:
This is a followup to bug 2030810 where we issued an emergency
workaround by inserting rmmod prior to chainloading.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2032294/+subscriptions
More information about the foundations-bugs
mailing list