tablet/grub
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
grub/grub-core
History
Daniel Axtens c4bc55da28 fs: Disable many filesystems under lockdown 
The idea is to permit the following: btrfs, cpio, exfat, ext, f2fs, fat,
hfsplus, iso9660, squash4, tar, xfs and zfs.

The JFS, ReiserFS, romfs, UDF and UFS security vulnerabilities were
reported by Jonathan Bar Or <jonathanbaror@gmail.com>.

Fixes: CVE-2025-0677
Fixes: CVE-2025-0684
Fixes: CVE-2025-0685
Fixes: CVE-2025-0686
Fixes: CVE-2025-0689

Suggested-by: Daniel Axtens <dja@axtens.net>
Signed-off-by: Daniel Axtens <dja@axtens.net>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
2025-02-13 15:45:56 +01:00
..
boot
A workaround for clang problem assembling startup_raw.S
2019-04-08 15:22:10 +10:00
bus
build: Fix -Werror=array-bounds array subscript 0 is outside array bounds
2022-04-20 18:27:52 +02:00
commands
commands/hexdump: Disable memory reading in lockdown mode
2025-02-13 15:45:56 +01:00
disk
disk/loopback: Reference tracking for the loopback
2025-01-23 16:22:47 +01:00
efiemu
types: Split aligned and packed guids
2023-11-08 05:04:24 +01:00
font
font: Try opening fonts from the bundled memdisk
2023-05-16 18:51:12 +02:00
fs
fs: Disable many filesystems under lockdown
2025-02-13 15:45:56 +01:00
gdb
misc: Spelling fixes
2023-01-19 17:39:04 +01:00
gettext
gettext: Integer overflow leads to heap OOB write
2025-02-13 15:45:56 +01:00
gfxmenu
gfxmenu/view: Resolve false grub_errno disrupting boot process
2024-04-11 15:48:25 +02:00
hello
* grub-core/commands/gptsync.c: Fix typographic quoting.
2012-03-03 13:05:08 +01:00
hook
* grub-core/hook/datehook.c (grub_read_hook_datetime): Small stylistic
2011-11-11 21:03:49 +01:00
io
io/gzio: Properly init a table
2024-06-06 16:55:15 +02:00
kern
kern/dl: Check for the SHF_INFO_LINK flag in grub_dl_relocate_symbols()
2025-02-13 15:45:55 +01:00
lib
ieee1275/tcg2: Add TCG2 driver for ieee1275 PowerPC firmware
2024-11-28 22:57:09 +01:00
loader
loader/multiboot: Do not add modules before successful download
2024-10-31 16:29:01 +01:00
mmap
efi: Drop all uses of efi_call_XX() wrappers
2023-05-25 16:48:00 +02:00
net
net/tftp: Fix stack buffer overflow in tftp_open()
2025-02-13 15:45:55 +01:00
normal
normal: Remove variables hooks on module unload
2025-02-13 15:45:55 +01:00
osdep
osdep/devmapper/getroot: Unmark 2 strings for translation
2024-06-20 19:14:41 +02:00
partmap
gpt: Add compile time asserts for guid and gpt_partentry sizes
2023-11-08 05:05:06 +01:00
parttool
types: Make bool generally available
2022-11-14 17:17:21 +01:00
script
script/execute: Limit the recursion depth
2025-01-23 16:22:47 +01:00
term
ieee1275: Consolidate repeated definitions of IEEE1275_IHANDLE_INVALID
2024-11-28 22:15:29 +01:00
tests
asn1_test: Test module for libtasn1
2024-11-28 21:50:54 +01:00
video
video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG
2025-02-13 15:45:55 +01:00
gdb_grub.in
gdb: Add extra early initialization symbols for i386-pc
2023-03-14 16:07:54 +01:00
gdb_helper.py.in
gdb: Modify gdb prompt when running gdb_grub script
2023-03-14 16:07:54 +01:00
genemuinit.sh
use MODULE_FILES for genemuinit* instead of MOD_FILES
2014-01-18 23:15:40 +04:00
genemuinitheader.sh
use MODULE_FILES for genemuinit* instead of MOD_FILES
2014-01-18 23:15:40 +04:00
genmod.sh.in
modules: Strip .llvm_addrsig sections and similar
2024-10-10 13:18:00 +02:00
genmoddep.awk
build: Track explicit module dependencies in Makefile.core.def
2024-05-09 15:04:54 +02:00
gensyminfo.sh.in
Fix shebang for termux.
2017-05-03 12:49:31 +02:00
gensymlist.sh
config: Where present, ensure config-util.h precedes config.h
2022-03-21 18:47:16 +01:00
gentrigtables.c
* grub-core/gentrigtables.c: Make tables const.
2013-03-01 11:15:09 +01:00
Makefile.am
key_protector: Add key protectors framework
2024-11-28 21:50:55 +01:00
Makefile.core.def
tpm2_key_protector: Enable build for powerpc_ieee1275
2024-11-28 23:02:24 +01:00
modinfo.sh.in
Fix shebang for termux.
2017-05-03 12:49:31 +02:00