grub2-x86_64-xen-2.12-150600.8.18.2<>,/gep9|T7F''p0+lJ8סvfk#qK??d9@*XK =(UP(.9|? /n,1Y2uOvLWfSxٰ8(05.0c$[}H5#ClWe~5OEe6sr:-><B ?Ad & \lp|  n  4   Ec FpINkRRVVVW(W38W<O9\xO:qOB$G$$H'I+<X, Y,(Z,P[,T\,h]/^:b;Cc;dGPL-3.0-or-laterhttps://www.suse.com/System/Boothttp://www.gnu.org/software/grub/linuxnoarch((!H!0Pb- & x 8 h @P  hh 0g x ` P E ( 0'H!$'"jI@ #Pr9x.`B` ( O (=AH4YH#H"D8`(4"p(P/H%5$+hPF "=\&8 \1P1 x `  ?h @(P(Dhx P   o   0P./ 80 ` `48PPX`  " * yP  h `7@  ('xsXHh- hN@?xAA큤A큤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../../../share/grub2/x86_64-xen/grub.xenrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootgrub2-2.12-150600.8.18.2.src.rpmgrub2-x86_64-xengrub2-xen    rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3g0@gg+Z@gfff@fJf@fU@f@f@f @ere7@eПepe@e@e@ee@eeL@ehy@e]@e\eV@eSa@e?e:Te9@e6`@e-%ee@eee@e@e e @d@ddܺ@d˖d\@d du@dS@dI@dBzdBzd>@d5Kd?@dJd@d@dd@c>@cc@c1c@cc=@cHccc@cR@c]c@c|c{h@ctcr-cr-c[@cV~@c>@c-c(Yc$e@c$e@c#c @b)b@b@b@b@bkb@baG@bT@b=b4t@b1@b+9b)@b)@b!@b b@aea@aq@aaa{a@a@aaqV@an@aKa7T@a/k@a.a @a @`]`ٹ`"@`@`@``@`q``}p`n@`P`J@`8`3`.V`U` l__t@_@__m_X_G@_A_?@_;_5+@__A@^x^U@^H^y@^t@^oj@^j$@^g@^Y^K^9\]e@]{@]@]@]W]]V]0_@]@]]@\ޢ@\ޢ@\-@\\\mA@\b@\N\J@\J@\I\HW@\@[@[@[[@[t[Q@[-[~[l,[j@[h8@[W[L[D[<[3|@[*A[#@[@Z@ZK@ZZJ@Z̧@Z@Z&ZZkZZ@Z@Zz@ZyZxG@Zg#Z*~ZOZ ZZNYeYA@YX@YY@YYYn@Yu@Y[@Y0YR@Y@X׭@Xg@X@XX~@XO@XZXXXX@XBX@XYXpXX@X|Xv@XlXfL@X=X @W@WiWWF@W@WWW@Wq@Wi,@WPW>@W=W'A@W!@WV@VՄ@VՄ@V@VT@VVvV$@VrVqR@VhVetVa@VV@VLh@V5V3[V2 @V#V @VV@UU@Uc@U@UUzUt2@Uq@Un@U]U[%UPUOH@U@U.RU/@UTTT[@T T@T@TT@T5TLTy@TeTR(@TR(@mchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.combwiedemann@suse.commchang@suse.commchang@suse.commchang@suse.comgcomes.obs@gmail.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comglin@suse.commchang@suse.commchang@suse.comglin@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comfvogt@suse.comglin@suse.commchang@suse.comfvogt@suse.comglin@suse.commchang@suse.comglin@suse.comclin@suse.comschwab@suse.deglin@suse.comglin@suse.commchang@suse.commchang@suse.comdmueller@suse.commchang@suse.comglin@suse.comglin@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comhpj@urpla.netrw@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comglin@suse.comvalentin.lefebvre@suse.comglin@suse.commchang@suse.commchang@suse.commchang@suse.comglin@suse.commchang@suse.commchang@suse.commchang@suse.comglin@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comglin@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comlnussel@suse.demchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commsuchanek@suse.combjorn.lie@gmail.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commsuchanek@suse.commchang@suse.commchang@suse.commchang@suse.comfvogt@suse.comrw@suse.commchang@suse.commchang@suse.compvorel@suse.czseife+obs@b1-systems.comfvogt@suse.compvorel@suse.czmchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comnormand@linux.vnet.ibm.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comlnussel@suse.defvogt@suse.comlnussel@suse.derw@suse.commchang@suse.commchang@suse.comolaf@aepfle.demchang@suse.combwiedemann@suse.comschwab@suse.demchang@suse.comrw@suse.commchang@suse.commchang@suse.commsuchanek@suse.demchang@suse.commchang@suse.comrw@suse.comrw@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comguillaume.gardet@opensuse.orgjengelh@inai.demchang@suse.commchang@suse.comrw@suse.commchang@suse.commchang@suse.commchang@suse.comglin@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comdimstar@opensuse.orgjosef.moellers@suse.commchang@suse.commchang@suse.comjbohac@suse.czjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comjosef.moellers@suse.comkukuk@suse.deThomas.Blume@suse.comidonmez@suse.commchang@suse.commchang@suse.comjdelvare@suse.demchang@suse.commchang@suse.commsuchanek@suse.commchang@suse.commchang@suse.comiforster@suse.commchang@suse.commchang@suse.commchang@suse.comolaf@aepfle.demchang@suse.commchang@suse.commchang@suse.commchang@suse.comolaf@aepfle.dejmatejek@suse.commsuchanek@suse.commchang@suse.commlatimer@suse.commlatimer@suse.comagraf@suse.commchang@suse.commchang@suse.comrw@suse.combwiedemann@suse.comarvidjaar@gmail.commchang@suse.commchang@suse.comarvidjaar@gmail.comarvidjaar@gmail.comarvidjaar@gmail.commchang@suse.commchang@suse.comarvidjaar@gmail.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commsuchanek@suse.commchang@suse.comarvidjaar@gmail.commchang@suse.commchang@suse.comagraf@suse.comschwab@linux-m68k.orgmatwey.kornilov@gmail.commchang@suse.commchang@suse.comsor.alexei@meowr.rumchang@suse.commchang@suse.comdmueller@suse.commchang@suse.commatz@suse.comarvidjaar@gmail.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comro@suse.demchang@suse.comarvidjaar@gmail.comjengelh@inai.deagraf@suse.comolaf@aepfle.deagraf@suse.commchang@suse.commchang@suse.comarvidjaar@gmail.comagraf@suse.comagraf@suse.commchang@suse.comdvaleev@suse.commchang@suse.comarvidjaar@gmail.comolaf@aepfle.dearvidjaar@gmail.comarvidjaar@gmail.comolaf@aepfle.deolaf@aepfle.demchang@suse.comarvidjaar@gmail.comarvidjaar@gmail.commchang@suse.commchang@suse.comeich@suse.commchang@suse.commchang@suse.comdmueller@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.commchang@suse.comarvidjaar@gmail.commchang@suse.comagraf@suse.commchang@suse.comarvidjaar@gmail.commchang@suse.comarvidjaar@gmail.comdmueller@suse.commchang@suse.commchang@suse.comschwab@suse.demchang@suse.comarvidjaar@gmail.commchang@suse.commchang@suse.commchang@suse.commpluskal@suse.comschwab@suse.deschwab@suse.deschwab@suse.deagraf@suse.comledest@gmail.comledest@gmail.comjdelvare@suse.demchang@suse.com- Security fixes for 2024 * 0001-misc-Implement-grub_strlcpy.patch - Fix CVE-2024-45781 (bsc#1233617) * 0002-fs-ufs-Fix-a-heap-OOB-write.patch - Fix CVE-2024-56737 (bsc#1234958) - Fix CVE-2024-45782 (bsc#1233615) * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch - Fix CVE-2024-45780 (bsc#1233614) * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch - Fix CVE-2024-45783 (bsc#1233616) * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch * 0006-kern-file-Ensure-file-data-is-set.patch * 0007-kern-file-Implement-filesystem-reference-counting.patch - Fix CVE-2025-0624 (bsc#1236316) * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch - Fix CVE-2024-45774 (bsc#1233609) * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch - Fix CVE-2024-45775 (bsc#1233610) * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch - Fix CVE-2025-0622 (bsc#1236317) * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch - Fix CVE-2025-0622 (bsc#1236317) * 0012-normal-Remove-variables-hooks-on-module-unload.patch - Fix CVE-2025-0622 (bsc#1236317) * 0013-gettext-Remove-variables-hooks-on-module-unload.patch - Fix CVE-2024-45776 (bsc#1233612) * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch - Fix CVE-2024-45777 (bsc#1233613) * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch - Fix CVE-2025-0690 (bsc#1237012) * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch - Fix CVE-2025-1118 (bsc#1237013) * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch - Fix CVE-2024-45778 (bsc#1233606) - Fix CVE-2024-45779 (bsc#1233608) * 0018-fs-bfs-Disable-under-lockdown.patch - Fix CVE-2025-0677 (bsc#1237002) - Fix CVE-2025-0684 (bsc#1237008) - Fix CVE-2025-0685 (bsc#1237009) - Fix CVE-2025-0686 (bsc#1237010) - Fix CVE-2025-0689 (bsc#1237011) * 0019-fs-Disable-many-filesystems-under-lockdown.patch - Fix CVE-2025-1125 (bsc#1237014) - Fix CVE-2025-0678 (bsc#1237006) * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch - Bump upstream SBAT generation to 5- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164) - Restrict CLI access if the encrypted root device is automatically unlocked by the TPM. LUKS password authentication is required for access to be granted * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch - Obsolete, as CLI access is now locked and granted access no longer requires the previous restrictions * 0002-Restrict-file-access-on-cryptodisk-print.patch * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch - Rediff * 0004-Key-revocation-on-out-of-bound-file-access.patch- Fix xen package contains debug_info files with the .module suffix by moving them to a separate xen-debug subpackage (bsc#1232573)- Fix not a directory error from the minix filesystem, as leftover data on disk may contain its magic header so it gets misdetected (bsc#1231604) * grub2-install-fix-not-a-directory-error.patch- Fix OOM error in loading loopback file (bsc#1230840) * 0001-tpm-Skip-loopback-image-measurement.patch- Fix UEFI PXE boot failure on tagged VLAN network (bsc#1230263) * 0001-efinet-Skip-virtual-VLAN-devices-during-card-enumera.patch- Fix grub screen is filled with artifects from earlier post menu (bsc#1224465) * grub2-SUSE-Add-the-t-hotkey.patch * 0001-fix-grub-screen-filled-with-post-screen-artifects.patch- Fix crash in bli module (bsc#1226497) * 0001-bli-Fix-crash-in-get_part_uuid.patch- Fix btrfs subvolume for platform modules not mounting at runtime when the default subvolume is the topmost root tree (bsc#1228124) * grub2-btrfs-06-subvol-mount.patch - Rediff * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch- Fix error in grub-install when root is on tmpfs (bsc#1226100) * 0001-grub-install-bailout-root-device-probing.patch- Fix input handling in ppc64le grub2 has high latency (bsc#1223535) * 0001-net-drivers-ieee1275-ofnet-Remove-200-ms-timeout-in-.patch- Fix os name is used for root file system mount (bsc#1220949) * 0001-10_linux-Ensure-persistence-of-root-file-system-moun.patch- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866) * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch- Fix memdisk becomes the default boot entry, resolving no graphic display device error in guest vnc console (bsc#1221779) * grub2-xen-pv-firmware.cfg- Fix grub.xen memdisk script doesn't look for /boot/grub/grub.cfg (bsc#1219248) (bsc#1181762) * grub2-xen-pv-firmware.cfg * 0001-disk-Optimize-disk-iteration-by-moving-memdisk-to-th.patch- Fix PowerPC grub loads 5 to 10 minutes slower on SLE-15-SP5 compared to SLE-15-SP2 (bsc#1217102) * add 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch * add 0002-ofdisk-add-early_log-support.patch- Sort tar file order for reproducible builds- Fix build error on gcc-14 (bsc#1218949) * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch- Remove magic number header field check on arm64 (bsc#1218783) * 0001-loader-arm64-efi-linux-Remove-magic-number-header-fi.patch- Reinstate the verification for a non-zero total entry count to skip unmapped data blocks (bsc#1218864) * 0001-fs-xfs-always-verify-the-total-number-of-entries-is-.patch - Removed temporary fix as reverting it will cause a different XFS parser bug * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch- allow to boot memtest86 if stored in /usr/lib/memtest86+ * SR#1071109 can then work- Resolved XFS regression leading to the "not a correct XFS inode" error by temporarily reverting the problematic commit (bsc#1218864) * 0001-Revert-fs-xfs-Fix-XFS-directory-extent-parsing.patch- Version bump to 2.12 (PED-5589) * Added: - grub-2.12.tar.xz - fix_no_extra_deps_in_release_tarball.patch * Removed: - grub-2.12~rc1.tar.xz * Patch dropped as it merged into new version: - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch - 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch - 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch - 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch - 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch - 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch - 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch - 0006-fs-ntfs-Make-code-more-readable.patch - 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch - 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch - 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch - 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch - 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch - 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch * Patch adjusted for the updated base version: - use-grub2-as-a-package-name.patch - grub2-s390x-04-grub2-install.patch - grub2-btrfs-04-grub2-install.patch - grub2-ppc64le-disable-video.patch - 0002-AUDIT-0-http-boot-tracker-bug.patch - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch - 0016-grub-install-support-embedding-x509-certificates.patch - 0021-appended-signatures-documentation.patch - 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch - safe_tpm_pcr_snapshot.patch- grub2.spec: Add ofnet to signed grub.elf to support powerpc net boot installation when secure boot is enabled (bsc#1217761) - Improved check for disk device when looking for PReP partition * 0004-Introduce-prep_load_env-command.patch- Fix reproducible build for grub.xen (bsc#1217619) * 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch * 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch- Fix unattended boot with TPM2 allows downgrading kernel and rootfs, also enhancing the overall security posture (bsc#1216680) * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch * 0002-Restrict-file-access-on-cryptodisk-print.patch * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch * 0004-Key-revocation-on-out-of-bound-file-access.patch- grub2.spec: Fix openQA test failure in SLE-15-SP6 due to missing font in memdisk- Update the TPM2 patches to skip the persistent SRK handle if not specified and improve the error messages + 0003-protectors-Add-TPM2-Key-Protector.patch + 0005-util-grub-protect-Add-new-tool.patch + 0004-tpm2-Support-authorized-policy.patch- Fix XFS regression in 2.12~rc1 and support large extent counters * 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch * 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch * 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253) * 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch- Fix a potential error when appending multiple keys into the synthesized initrd * Fix-the-size-calculation-for-the-synthesized-initrd.patch- Fix Xen chainloding error of no matching file path found (bsc#1216081) * grub2-efi-chainload-harder.patch- Use grub-tpm2 token to unlock keyslots to make the unsealing process more efficient and secure. * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks when signed image installation is specified (bsc#1216075) * 0003-grub-install-support-prep-environment-block.patch - grub2.spec: Add support to unlocking multiple encrypted disks in signed grub.elf image for logical disks- Fix CVE-2023-4692 (bsc#1215935) - Fix CVE-2023-4693 (bsc#1215936) * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch * 0006-fs-ntfs-Make-code-more-readable.patch - Bump upstream SBAT generation to 4- Add patch to fix reading files from btrfs with "implicit" holes: * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch- Update the TPM 2.0 patches to support more RSA and ECC algorithms * 0002-tpm2-Add-TPM-Software-Stack-TSS.patch * 0003-protectors-Add-TPM2-Key-Protector.patch * 0005-util-grub-protect-Add-new-tool.patch- Remove build require for gcc-32bit, target platform didn't rely on libgcc function shipped with compiler but rather using functions supplied in grub directly.- Add BuildIgnore to break cycle with the branding package- Only build with fde-tpm-helper-rpm-macros for the architectures supporting the newer UEFI and TPM 2.0. * Also correct the location of %fde_tpm_update_requires- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300) * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch- Add the new BuildRequires for EFI builds for the better FDE support: fde-tpm-helper-rpm-macros + Also add the the macros to %post and %posttrans- Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151) * arm64-Use-proper-memory-type-for-kernel-allocation.patch- grub2-mkconfig-riscv64.patch: Handle riscv64 in mkconfig- Implement NV index mode for TPM 2.0 key protector 0001-protectors-Implement-NV-index.patch - Fall back to passphrase mode when the key protector fails to unlock the disk 0002-cryptodisk-Fallback-to-passphrase.patch - Wipe out the cached key cleanly 0003-cryptodisk-wipe-out-the-cached-keys-from-protectors.patch - Make diskfiler to look up cryptodisk devices first 0004-diskfilter-look-up-cryptodisk-devices-first.patch- Change the bash-completion directory (bsc#1213855) * grub2-change-bash-completion-dir.patch- Version bump to 2.12~rc1 (PED-5589) * Added: - grub-2.12~rc1.tar.xz * Removed: - grub-2.06.tar.xz * Patch dropped merged by new version: - grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-efi-chainloader-root.patch - grub2-Fix-incorrect-netmask-on-ppc64.patch - 0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch - 0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch - grub2-s390x-10-keep-network-at-kexec.patch - 0001-Fix-build-error-in-binutils-2.36.patch - 0001-emu-fix-executable-stack-marking.patch - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch - 0001-30_uefi-firmware-fix-printf-format-with-null-byte.patch - 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch - 0001-Filter-out-POSIX-locale-for-translation.patch - 0001-disk-diskfilter-Use-nodes-in-logical-volume-s-segmen.patch - 0001-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock.patch - 0001-fs-btrfs-Make-extent-item-iteration-to-handle-gaps.patch - 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch - 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch - 0002-ieee1275-claim-more-memory.patch - 0003-ieee1275-request-memory-with-ibm-client-architecture.patch - 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch - 0001-mkimage-Fix-dangling-pointer-may-be-used-error.patch - 0002-Fix-Werror-array-bounds-array-subscript-0-is-outside.patch - 0003-reed_solomon-Fix-array-subscript-0-is-outside-array-.patch - 0001-powerpc-do-CAS-in-a-more-compatible-way.patch - 0001-libc-config-merge-from-glibc.patch - 0001-video-Remove-trailing-whitespaces.patch - 0002-loader-efi-chainloader-Simplify-the-loader-state.patch - 0003-commands-boot-Add-API-to-pass-context-to-loader.patch - 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch - 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch - 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch - 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch - 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch - 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch - 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch - 0011-video-readers-png-Sanity-check-some-huffman-codes.patch - 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch - 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch - 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch - 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch - 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch - 0017-net-ip-Do-IP-fragment-maths-safely.patch - 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch - 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch - 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch - 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch - 0022-net-tftp-Avoid-a-trivial-UAF.patch - 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch - 0024-net-http-Fix-OOB-write-for-split-http-headers.patch - 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch - 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch - 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch - 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch - 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch - 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch - 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch - 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch - 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch - 0002-cryptodisk-Refactor-to-discard-have_it-global.patch - 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch - 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch - 0005-cryptodisk-Improve-cryptomount-u-error-message.patch - 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch - 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch - 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch - 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch - 0001-crytodisk-fix-cryptodisk-module-looking-up.patch - 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch - 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch - 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch - 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch - 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch - 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch - 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch - efi-set-variable-with-attrs.patch - 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch - 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch - 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch - 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch - 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch - 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch - 0002-mm-Defer-the-disk-cache-invalidation.patch - 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch - 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch - 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch - 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch - 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch - 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch - 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch - 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch - 0004-font-Remove-grub_font_dup_glyph.patch - 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch - 0006-font-Fix-integer-overflow-in-BMP-index.patch - 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch - 0008-fbutil-Fix-integer-overflow.patch - 0009-font-Fix-an-integer-underflow-in-blit_comb.patch - 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch - 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch - 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch - 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch - 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch - 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch - grub2-add-module-for-boot-loader-interface.patch - 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch - 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch - 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch - 0001-loader-linux-Ensure-the-newc-pathname-is-NULL-termin.patch - 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch - 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch - 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch - 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch * Patch modified to new base version: - use-grub2-as-a-package-name.patch - grub2-fix-menu-in-xen-host-server.patch - grub2-secureboot-add-linuxefi.patch - grub2-secureboot-chainloader.patch - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch - grub2-s390x-03-output-7-bit-ascii.patch - grub2-s390x-04-grub2-install.patch - grub2-use-rpmsort-for-version-sorting.patch - grub2-getroot-treat-mdadm-ddf-as-simple-device.patch - grub2-grubenv-in-btrfs-header.patch - grub2-commands-introduce-read_file-subcommand.patch - grub2-efi-chainload-harder.patch - grub2-emu-4-all.patch - grub2-util-30_os-prober-multiple-initrd.patch - grub2-install-fix-not-a-directory-error.patch - grub-install-force-journal-draining-to-ensure-data-i.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-btrfs-04-grub2-install.patch - grub2-btrfs-05-grub2-mkconfig.patch - grub2-btrfs-06-subvol-mount.patch - grub2-efi-xen-chainload.patch - grub2-efi-xen-cmdline.patch - grub2-efi-xen-removable.patch - grub2-suse-remove-linux-root-param.patch - grub2-ppc64le-disable-video.patch - grub2-install-remove-useless-check-PReP-partition-is-empty.patch - 0004-efinet-UEFI-IPv6-PXE-support.patch - 0007-efinet-Setting-network-from-UEFI-device-path.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch - 0001-add-support-for-UEFI-network-protocols.patch - grub2-mkconfig-default-entry-correction.patch - grub2-s390x-11-secureboot.patch - grub2-secureboot-install-signed-grub.patch - grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch - 0002-cmdline-Provide-cmdline-functions-as-module.patch - 0001-efi-linux-provide-linux-command.patch - 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch - 0004-arm-arm64-loader-Better-memory-allocation-and-error-.patch - 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch - 0001-Factor-out-grub_efi_linux_boot.patch - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch - 0015-test_asn1-test-module-for-libtasn1.patch - 0021-appended-signatures-documentation.patch - 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch - 0003-grub-install-support-prep-environment-block.patch - 0004-Introduce-prep_load_env-command.patch - 0001-grub-install-bailout-root-device-probing.patch - 0001-install-fix-software-raid1-on-esp.patch - 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch - 0001-protectors-Add-key-protectors-framework.patch - 0002-tpm2-Add-TPM-Software-Stack-TSS.patch - 0004-cryptodisk-Support-key-protectors.patch - 0008-linuxefi-Use-common-grub_initrd_load.patch - 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch - grub-read-pcr.patch - tpm-record-pcrs.patch - 0001-clean-up-crypttab-and-linux-modules-dependency.patch * Patch refreshed: - rename-grub-info-file-to-grub2.patch - grub2-linux.patch - grub2-simplefb.patch - grub2-ppc-terminfo.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-linuxefi-fix-boot-params.patch - grub2-s390x-05-grub2-mkconfig.patch - grub2-xen-linux16.patch - grub2-efi-disable-video-cirrus-and-bochus.patch - grub2-vbe-blacklist-preferred-1440x900x32.patch - grub2-mkconfig-aarch64.patch - grub2-menu-unrestricted.patch - grub2-mkconfig-arm.patch - grub2-s390x-06-loadparm.patch - grub2-s390x-07-add-image-param-for-zipl-setup.patch - grub2-s390x-08-workaround-part-to-disk.patch - grub2-diskfilter-support-pv-without-metadatacopies.patch - grub2-getroot-support-nvdimm.patch - grub2-s390x-skip-zfcpdump-image.patch - grub2-btrfs-02-export-subvolume-envvars.patch - grub2-btrfs-03-follow_default.patch - grub2-btrfs-07-subvol-fallback.patch - grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch - grub2-btrfs-09-get-default-subvolume.patch - grub2-btrfs-10-config-directory.patch - grub2-efi-xen-cfg-unquote.patch - grub2-Add-hidden-menu-entries.patch - grub2-SUSE-Add-the-t-hotkey.patch - grub2-ppc64le-memory-map.patch - grub2-ppc64-cas-reboot-support.patch - grub2-ppc64-cas-new-scope.patch - grub2-ppc64-cas-fix-double-free.patch - 0003-bootp-New-net_bootp6-command.patch - 0005-grub.texi-Add-net_bootp6-doument.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0012-tpm-Build-tpm-as-module.patch - 0002-AUDIT-0-http-boot-tracker-bug.patch - grub2-btrfs-help-on-snapper-rollback.patch - grub2-video-limit-the-resolution-for-fixed-bimap-font.patch - 0001-kern-mm.c-Make-grub_calloc-inline.patch - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch - 0002-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch - 0003-Make-grub_error-more-verbose.patch - 0001-ieee1275-Avoiding-many-unecessary-open-close.patch - 0001-Workaround-volatile-efi-boot-variable.patch - 0001-templates-Follow-the-path-of-usr-merged-kernel-confi.patch - 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch - 0005-docs-grub-Document-signing-grub-under-UEFI.patch - 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch - 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch - 0008-pgp-factor-out-rsa_pad.patch - 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch - 0011-libtasn1-import-libtasn1-4.18.0.patch - 0014-libtasn1-compile-into-asn1-module.patch - 0016-grub-install-support-embedding-x509-certificates.patch - 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch - 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch - 0019-appended-signatures-support-verifying-appended-signa.patch - 0020-appended-signatures-verification-tests.patch - 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch - 0002-Add-grub_disk_write_tail-helper-function.patch - 0005-export-environment-at-start-up.patch - 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch - 0003-protectors-Add-TPM2-Key-Protector.patch - 0005-util-grub-protect-Add-new-tool.patch - 0010-templates-import-etc-crypttab-to-grub.cfg.patch - grub-install-record-pcrs.patch - safe_tpm_pcr_snapshot.patch - 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch - 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch - 0002-discard-cached-key-before-entering-grub-shell-and-ed.patch - 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch - 0002-Restrict-cryptsetup-key-file-permission-for-better-s.patch * New: - 0001-xen_boot-add-missing-grub_arch_efi_linux_load_image_.patch - 0001-font-Try-memdisk-fonts-with-the-same-name.patch - 0001-Make-grub.cfg-compatible-to-old-binaries.patch - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch * Embedding fonts in the grub.efi to get signed for secure boot- Fix error message "unknown command tpm_record_pcrs" with encrypted boot and no tpm device present (bsc#1213547) * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch- add 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch, 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch: * support more featureful extX filesystems (backport from upstream git)- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)- Exclude the deprecated EFI location, /usr/lib64/efi/, from Tumbleweed and ALP- Update TPM 2.0 key unsealing patches * Add the new upstreaming patches 0001-protectors-Add-key-protectors-framework.patch 0002-tpm2-Add-TPM-Software-Stack-TSS.patch 0003-protectors-Add-TPM2-Key-Protector.patch 0004-cryptodisk-Support-key-protectors.patch 0005-util-grub-protect-Add-new-tool.patch * Add the authorized policy patches based on the upstreaming patches 0001-tpm2-Add-TPM2-types-structures-and-command-constants.patch 0002-tpm2-Add-more-marshal-unmarshal-functions.patch 0003-tpm2-Implement-more-TPM2-commands.patch 0004-tpm2-Support-authorized-policy.patch * Drop the old patches 0010-protectors-Add-key-protectors-framework.patch 0011-tpm2-Add-TPM-Software-Stack-TSS.patch 0012-protectors-Add-TPM2-Key-Protector.patch 0013-cryptodisk-Support-key-protectors.patch 0014-util-grub-protect-Add-new-tool.patch fix-tpm2-build.patch tpm-protector-dont-measure-sealed-key.patch tpm-protector-export-secret-key.patch grub-unseal-debug.patch 0001-tpm2-adjust-the-input-parameters-of-TPM2_EvictContro.patch 0002-tpm2-declare-the-input-arguments-of-TPM2-functions-a.patch 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch 0004-tpm2-add-new-TPM2-types-structures-and-command-const.patch 0005-tpm2-add-more-marshal-unmarshal-functions.patch 0006-tpm2-check-the-command-parameters-of-TPM2-commands.patch 0007-tpm2-pack-the-missing-authorization-command-for-TPM2.patch 0008-tpm2-allow-some-command-parameters-to-be-NULL.patch 0009-tpm2-remove-the-unnecessary-variables.patch 0010-tpm2-add-TPM2-commands-to-support-authorized-policy.patch 0011-tpm2-make-the-file-reading-unmarshal-functions-gener.patch 0012-tpm2-initialize-the-PCR-selection-list-early.patch 0013-tpm2-support-unsealing-key-with-authorized-policy.patch * Refresh grub-read-pcr.patch * Introduce a new build requirement: libtasn1-devel - Only package grub2-protect for the architectures with EFI support- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581) * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch- Fix no prep partition error on non-PReP architectures by making the prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489) * 0004-Introduce-prep_load_env-command.patch - Fix the issue of freeing an uninitialized pointer * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch - Rediff * 0005-export-environment-at-start-up.patch * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made enhancements to PPC secure boot's root device discovery config (bsc#1207230) - Ensure get_devargs and get_devname functions are consistent * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch - Fix regex for Open Firmware device specifier with encoded commas * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch - Fix regular expression in PPC secure boot config to prevent escaped commas from being treated as delimiters when retrieving partition substrings. - Use prep_load_env in PPC secure boot config to handle unset host-specific environment variables and ensure successful command execution. * 0004-Introduce-prep_load_env-command.patch - Refreshed * 0005-export-environment-at-start-up.patch- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in btrfs filesystem. (bsc#1209165) * grub2-btrfs-05-grub2-mkconfig.patch- Restrict cryptsetup key file permission for better security (bsc#1207499) * 0001-loader-linux-Ensure-the-newc-pathname-is-NULL-termin.patch * 0002-Restrict-cryptsetup-key-file-permission-for-better-s.patch- Meanwhile, memtest86+ gained EFI support, but using the grub command line to run it manually is quite tedious... Adapt 20_memtest86+ to provide a proper menu entry. Executing memtest requires to turn security off in BIOS: (Boot Mode: Other OS).- Tolerate kernel moved out of /boot. (bsc#1184804) * grub2-s390x-12-zipl-setup-usrmerge.patch- Discard cached key from grub shell and editor mode * 0001-clean-up-crypttab-and-linux-modules-dependency.patch * 0002-discard-cached-key-before-entering-grub-shell-and-ed.patch- Make grub more robust against storage race condition causing system boot failures (bsc#1189036) * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch- Fix riscv64 error for relocation 0x13 is not implemented yet * 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024) * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch - Fix lpar got hung at grub after inactive migration (bsc#1207684) * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - Rediff * safe_tpm_pcr_snapshot.patch - Patch supersceded * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch- Refresh 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch to handle the TPM2 responseCode correctly.- Add module for boot loader interface. Needed for load Unified Kernel Image (UKI) * grub2-add-module-for-boot-loader-interface.patch- Amend the TPM2 stack and add authorized policy mode to tpm2_key_protector * 0001-tpm2-adjust-the-input-parameters-of-TPM2_EvictContro.patch * 0002-tpm2-declare-the-input-arguments-of-TPM2-functions-a.patch * 0003-tpm2-resend-the-command-on-TPM_RC_RETRY.patch * 0004-tpm2-add-new-TPM2-types-structures-and-command-const.patch * 0005-tpm2-add-more-marshal-unmarshal-functions.patch * 0006-tpm2-check-the-command-parameters-of-TPM2-commands.patch * 0007-tpm2-pack-the-missing-authorization-command-for-TPM2.patch * 0008-tpm2-allow-some-command-parameters-to-be-NULL.patch * 0009-tpm2-remove-the-unnecessary-variables.patch * 0010-tpm2-add-TPM2-commands-to-support-authorized-policy.patch * 0011-tpm2-make-the-file-reading-unmarshal-functions-gener.patch * 0012-tpm2-initialize-the-PCR-selection-list-early.patch * 0013-tpm2-support-unsealing-key-with-authorized-policy.patch- Fix nvmf boot device setup (bsc#1207811) * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064) * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch- Fix GCC 13 build failure (bsc#1201089) * 0002-AUDIT-0-http-boot-tracker-bug.patch- Move unsupported zfs modules into 'extras' packages (bsc#1205554) (PED-2947)- Fix inappropriately including commented lines in crypttab (bsc#1206279) * 0010-templates-import-etc-crypttab-to-grub.cfg.patch- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200) - Removed patch linuxefi * grub2-secureboot-provide-linuxefi-config.patch * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch * grub2-secureboot-use-linuxefi-on-uefi.patch - Rediff * grub2-btrfs-05-grub2-mkconfig.patch * grub2-efi-xen-cmdline.patch * grub2-s390x-05-grub2-mkconfig.patch * grub2-suse-remove-linux-root-param.patch- Setup multiple device paths for a nvmf boot device (bsc#1205666) * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch- Increase the path buffer in the crypttab command for the long volume name (bsc#1206333) * grub2-increase-crypttab-path-buffer.patch- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912) - Increase initial heap size from 1/4 to 1/3 * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch- Make full utilization of btrfs bootloader area (bsc#1161823) * 0001-fs-btrfs-Use-full-btrfs-bootloader-area.patch * 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch - Patch removed * 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch- Fix regression of reverting back to asking password twice when a keyfile is already used (bsc#1205309) * 0010-templates-import-etc-crypttab-to-grub.cfg.patch- Security fixes and hardenings * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch - Fix CVE-2022-2601 (bsc#1205178) * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch * 0004-font-Remove-grub_font_dup_glyph.patch * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch * 0006-font-Fix-integer-overflow-in-BMP-index.patch * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch * 0008-fbutil-Fix-integer-overflow.patch - Fix CVE-2022-3775 (bsc#1205182) * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch - Bump upstream SBAT generation to 3- Removed 0001-linux-fix-efi_relocate_kernel-failure.patch as reported regression in some hardware being stuck in initrd loading (bsc#1205380)- Fix password asked twice if third field in crypttab not present (bsc#1205312) * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch- NVMeoFC support on grub (jsc#PED-996) * 0001-ieee1275-add-support-for-NVMeoFC.patch * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch * 0004-ofpath-controller-name-update.patch - TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265) * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch - Measure the kernel on POWER10 and extend TPM PCRs (PED-1990) * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch - Fix efi pcr snapshot related funtion is defined but not used on powerpc platform. * safe_tpm_pcr_snapshot.patch- Include loopback into signed grub2 image (jsc#PED-2150)- Fix firmware oops after disk decrypting failure (bsc#1204037) * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch- Add patch to fix kernel relocation error in low memory * 0001-linux-fix-efi_relocate_kernel-failure.patch- Add safety measure to pcr snapshot by checking platform and tpm status * safe_tpm_pcr_snapshot.patch- Fix installation failure due to unavailable nvram device on ppc64le (bsc#1201361) * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch- Add patches to dynamically allocate additional memory regions for EFI systems (bsc#1202438) * 0001-mm-Allow-dynamically-requesting-additional-memory-re.patch * 0002-kern-efi-mm-Always-request-a-fixed-number-of-pages-o.patch * 0003-kern-efi-mm-Extract-function-to-add-memory-regions.patch * 0004-kern-efi-mm-Pass-up-errors-from-add_memory_regions.patch * 0005-kern-efi-mm-Implement-runtime-addition-of-pages.patch - Enlarge the default heap size and defer the disk cache invalidation (bsc#1202438) * 0001-kern-efi-mm-Enlarge-the-default-heap-size.patch * 0002-mm-Defer-the-disk-cache-invalidation.patch- Add patches for ALP FDE support * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch * 0004-normal-menu-Don-t-show-Booting-s-msg-when-auto-booti.patch * 0005-EFI-suppress-the-Welcome-to-GRUB-message-in-EFI-buil.patch * 0006-EFI-console-Do-not-set-colorstate-until-the-first-te.patch * 0007-EFI-console-Do-not-set-cursor-until-the-first-text-o.patch * 0008-linuxefi-Use-common-grub_initrd_load.patch * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch * 0010-templates-import-etc-crypttab-to-grub.cfg.patch * grub-read-pcr.patch * efi-set-variable-with-attrs.patch * tpm-record-pcrs.patch * tpm-protector-dont-measure-sealed-key.patch * tpm-protector-export-secret-key.patch * grub-install-record-pcrs.patch * grub-unseal-debug.patch- Fix out of memory error cannot be prevented via disabling tpm (bsc#1202438) * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch- Fix tpm error stop tumbleweed from booting (bsc#1202374) * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch - Patch Removed * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch- Add tpm, tpm2, luks2 and gcry_sha512 to default grub.efi (bsc#1197625) - Make grub-tpm.efi a symlink to grub.efi * grub2.spec - Log error when tpm event log is full and continue * 0001-tpm-Log-EFI_VOLUME_FULL-and-continue.patch - Patch superseded * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276) * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch * 0010-protectors-Add-key-protectors-framework.patch * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch * 0012-protectors-Add-TPM2-Key-Protector.patch * 0013-cryptodisk-Support-key-protectors.patch * 0014-util-grub-protect-Add-new-tool.patch - Fix no disk unlocking happen (bsc#1196668) * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch - Fix build error * fix-tpm2-build.patch- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581) * 0001-video-Remove-trailing-whitespaces.patch * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch - Fix CVE-2022-28736 (bsc#1198496) * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch - Fix CVE-2022-28735 (bsc#1198495) * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch - Fix CVE-2021-3695 (bsc#1191184) * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch - Fix CVE-2021-3696 (bsc#1191185) * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch - Fix CVE-2021-3697 (bsc#1191186) * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch - Fix CVE-2022-28733 (bsc#1198460) * 0017-net-ip-Do-IP-fragment-maths-safely.patch * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch * 0022-net-tftp-Avoid-a-trivial-UAF.patch * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch - Fix CVE-2022-28734 (bsc#1198493) * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch - Fix CVE-2022-28734 (bsc#1198493) * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch - Bump grub's SBAT generation to 2- Use boot disks in OpenFirmware, fixing regression caused by 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when the root LV is completely in the boot LUN (bsc#1197948) * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch- Fix error message in displaying help on bootable snapshot (bsc#1199609)- Fix installation over serial console ends up in infinite boot loop (bsc#1187810) (bsc#1209667) (bsc#1209372) * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch - Fix ppc64le build error for new IEEE long double ABI * 0001-libc-config-merge-from-glibc.patch- Fix Power10 LPAR error "The partition fails to activate as partition went into invalid state" (bsc#1198714) * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch- use common SBAT values (boo#1193282)- Fix wrong order in kernel sorting of listing rc before final release (bsc#1197376) * grub2-use-rpmsort-for-version-sorting.patch- Fix duplicated insmod part_gpt lines in grub.cfg (bsc#1197186) * 0001-grub-probe-Deduplicate-probed-partmap-output.patch- Fix GCC 12 build failure (bsc#1196546) * 0001-mkimage-Fix-dangling-pointer-may-be-used-error.patch * 0002-Fix-Werror-array-bounds-array-subscript-0-is-outside.patch * 0003-reed_solomon-Fix-array-subscript-0-is-outside-array-.patch - Revised * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch- Fix grub-install error when efi system partition is created as mdadm software raid1 device (bsc#1179981) (bsc#1195204) * 0001-install-fix-software-raid1-on-esp.patch- Fix riscv64 build error * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch- Fix error in grub-install when linux root device is on lvm thin volume (bsc#1192622) (bsc#1191974) * 0001-grub-install-bailout-root-device-probing.patch- Support saving grub environment for POWER signed grub images (jsc#SLE-23854) * 0001-Add-grub_envblk_buf-helper-function.patch * 0002-Add-grub_disk_write_tail-helper-function.patch * 0003-grub-install-support-prep-environment-block.patch * 0004-Introduce-prep_load_env-command.patch * 0005-export-environment-at-start-up.patch - Use enviroment variable in early boot config to looking up root device * grub2.spec- Remove obsolete openSUSE 12.2 conditionals in spec file - Clean up powerpc certificate handling.- Set grub2-check-default shebang to "#!/bin/bash", as the the code uses many instructions which are undefined for a POSIX sh. (boo#1195794).- Power guest secure boot with static keys: GRUB2 signing portion (jsc#SLE-18271) (bsc#1192764) * 0001-grub-install-Add-SUSE-signed-image-support-for-power.patch- Fix wrong default entry when booting snapshot (bsc#1159205) * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch- Power guest secure boot with static keys: GRUB2 signing portion (jsc#SLE-18271) (bsc#1192764) * grub2.spec - Power guest secure boot with static keys: GRUB2 portion (jsc#SLE-18144) (bsc#1192686) * 0001-ieee1275-Drop-HEAP_MAX_ADDR-and-HEAP_MIN_SIZE-consta.patch * 0002-ieee1275-claim-more-memory.patch * 0003-ieee1275-request-memory-with-ibm-client-architecture.patch * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch * 0005-docs-grub-Document-signing-grub-under-UEFI.patch * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch * 0008-pgp-factor-out-rsa_pad.patch * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch * 0011-libtasn1-import-libtasn1-4.18.0.patch * 0012-libtasn1-disable-code-not-needed-in-grub.patch * 0013-libtasn1-changes-for-grub-compatibility.patch * 0014-libtasn1-compile-into-asn1-module.patch * 0015-test_asn1-test-module-for-libtasn1.patch * 0016-grub-install-support-embedding-x509-certificates.patch * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch * 0019-appended-signatures-support-verifying-appended-signa.patch * 0020-appended-signatures-verification-tests.patch * 0021-appended-signatures-documentation.patch * 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch * 0023-x509-allow-Digitial-Signature-plus-other-Key-Usages.patch- Fix no menuentry is found if hibernation on btrfs RAID1 (bsc#1193090) * grub2-systemd-sleep-plugin- Fix CVE-2021-3981 (bsc#1189644) * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch- Fix can't allocate initrd error (bsc#1191378) * 0001-Factor-out-grub_efi_linux_boot.patch * 0002-Fix-race-in-EFI-validation.patch * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch- Add support for simplefb (boo#1193532). + grub2-simplefb.patch- Fix extent not found when initramfs contains shared extents (bsc#1190982) * 0001-fs-btrfs-Make-extent-item-iteration-to-handle-gaps.patch- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522) * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch- Remove openSUSE Tumbleweed specific handling for default grub distributor (bsc#1191198) - Use /usr/lib/os-release as fallback (bsc#1191196) * grub2-default-distributor.patch * grub2-check-default.sh - VUL-0: grub2: grub2-once uses fixed file name in /var/tmp (bsc#1190474) (CVE-2021-46705) * grub2-once * grub2-once.service - Fix unknown TPM error on buggy uefi firmware (bsc#1191504) * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch - Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769) * 0001-Filter-out-POSIX-locale-for-translation.patch - Fix error lvmid disk cannot be found after second disk added to the root volume group (bsc#1189874) (bsc#1071559) * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch - Fix error in grub installation due to unnecessary requirement to support excessive device for the root logical volume (bsc#1184135) * 0001-disk-diskfilter-Use-nodes-in-logical-volume-s-segmen.patch - Fix regression in reading xfs v4 * 0001-fs-xfs-Fix-unreadable-filesystem-with-v4-superblock.patch- Fix installation on usrmerged s390x- Improve support for SLE Micro 5.1 on s390x. (bsc#1190395) * amend grub2-s390x-04-grub2-install.patch * refresh grub2-s390x-11-secureboot.patch- Follow usr merge for looking up kernel config (bsc#1189782) (bsc#1190061) * 0001-templates-Follow-the-path-of-usr-merged-kernel-confi.patch- Add btrfs zstd compression on i386-pc and also make sure it won't break existing grub installations (bsc#1161823) * deleted 0001-btrfs-disable-zstd-support-for-i386-pc.patch * added 0001-i386-pc-build-btrfs-zstd-support-into-separate-modul.patch- Delete the author list from %description (the %description section is literally for package descriptions (only) these days, encoding was also problematic). - Add %doc AUTHORS to get packaged that info- update grub2-systemd-sleep.sh to fix hibernation by avoiding the error "no kernelfile matching the running kernel found" on usrmerged setup- Use %autosetup- Replace grub2-use-stat-instead-of-udevadm-for-partition-lookup.patch and fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch with upstream backport: 0001-osdep-Introduce-include-grub-osdep-major.h-and-use-i.patch and 0002-osdep-linux-hostdisk-Use-stat-instead-of-udevadm-for.patch.- Fix error not a btrfs filesystem on s390x (bsc#1187645) * 80_suse_btrfs_snapshot- Fix error gfxterm isn't found with multiple terminals (bsc#1187565) * grub2-fix-error-terminal-gfxterm-isn-t-found.patch- Fix boot failure after kdump due to the content of grub.cfg is not completed with pending modificaton in xfs journal (bsc#1186975) * grub-install-force-journal-draining-to-ensure-data-i.patch - Patch refreshed * grub2-mkconfig-default-entry-correction.patch- Version bump to 2.06 * rediff - 0001-add-support-for-UEFI-network-protocols.patch - 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch - 0003-Make-grub_error-more-verbose.patch - 0003-bootp-New-net_bootp6-command.patch - 0005-grub.texi-Add-net_bootp6-doument.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0006-efi-Set-image-base-address-before-jumping-to-the-PE-.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch - 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch - grub-install-force-journal-draining-to-ensure-data-i.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-diskfilter-support-pv-without-metadatacopies.patch - grub2-efi-HP-workaround.patch - grub2-efi-xen-cfg-unquote.patch - grub2-efi-xen-chainload.patch - grub2-fix-menu-in-xen-host-server.patch - grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch - grub2-install-remove-useless-check-PReP-partition-is-empty.patch - grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch - grub2-mkconfig-default-entry-correction.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-s390x-03-output-7-bit-ascii.patch - grub2-s390x-04-grub2-install.patch - grub2-secureboot-install-signed-grub.patch - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch - use-grub2-as-a-package-name.patch * update by patch squashed: - 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch - grub2-efi-chainload-harder.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-secureboot-chainloader.patch - grub2-secureboot-add-linuxefi.patch * remove squashed patches: - 0008-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch - 0009-squash-Add-support-for-linuxefi.patch - 0041-squash-Add-secureboot-support-on-efi-chainloader.patch - 0042-squash-grub2-efi-chainload-harder.patch - 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch - 0045-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch * drop upstream patches: - 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch - 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch - 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch - 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch - 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch - 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch - 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch - 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch - 0002-kern-Add-X-option-to-printf-functions.patch - 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch - 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch - 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch - 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch - 0003-normal-main-Search-for-specific-config-files-for-net.patch - 0004-calloc-Use-calloc-at-most-places.patch - 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch - 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch - 0005-Make-linux_arm_kernel_header.hdr_offset-be-at-the-ri.patch - 0005-efi-Add-secure-boot-detection.patch - 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch - 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch - 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch - 0007-font-Do-not-load-more-than-one-NAME-section.patch - 0007-verifiers-Move-verifiers-API-to-kernel-image.patch - 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch - 0008-script-Remove-unused-fields-from-grub_script_functio.patch - 0009-kern-Add-lockdown-support.patch - 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch - 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch - 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch - 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch - 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch - 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch - 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch - 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch - 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch - 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch - 0018-gdb-Restrict-GDB-access-when-locked-down.patch - 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch - 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch - 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch - 0022-lib-arg-Block-repeated-short-options-that-require-an.patch - 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch - 0024-kern-parser-Fix-resource-leak-if-argc-0.patch - 0025-kern-parser-Fix-a-memory-leak.patch - 0026-kern-parser-Introduce-process_char-helper.patch - 0027-kern-parser-Introduce-terminate_arg-helper.patch - 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch - 0029-kern-buffer-Add-variable-sized-heap-buffer.patch - 0030-kern-parser-Fix-a-stack-buffer-overflow.patch - 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch - 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch - 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch - 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch - 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch - 0036-util-mkimage-Improve-data_size-value-calculation.patch - 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch - 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch - 0039-grub-install-common-Add-sbat-option.patch - 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch - grub-install-define-default-platform-for-risc-v.patch - grub2-editenv-add-warning-message.patch - grub2-efi-gop-add-blt.patch - grub2-efi-uga-64bit-fb.patch - grub2-verifiers-fix-system-freeze-if-verify-failed.patch - risc-v-add-clzdi2-symbol.patch - risc-v-fix-computation-of-pc-relative-relocation-offset.patch - Add grub2-instdev-fixup.pl for correcting /etc/default/grub_installdevice to use disk devie if grub has been installed to it - Add 0001-30_uefi-firmware-fix-printf-format-with-null-byte.patch to fix detection of efi fwsetup support- Fix running grub2-once leads to failure of starting systemd service in the boot sequence (bsc#1169460) * grub2-once * grub2-once.service- Fix crash in launching gfxmenu without theme file (bsc#1186481) * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch- Fix plaintext password in grub config didn't work to unlock menu entry if enabling secure boot in UEFI (bsc#1181892)- Fix obsolete syslog in systemd unit file and updating to use journal as StandardOutput (bsc#1185149) * grub2-once.service- Fix build error on armv6/armv7 (bsc#1184712) * 0001-emu-fix-executable-stack-marking.patch- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012) * 0001-Workaround-volatile-efi-boot-variable.patch- Fix powerpc-ieee1275 lpar takes long time to boot with increasing number of nvme namespace (bsc#1177751) 0001-ieee1275-Avoiding-many-unecessary-open-close.patch- Fix chainloading windows on dual boot machine (bsc#1183073) * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057) * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch * 0036-util-mkimage-Improve-data_size-value-calculation.patch * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch * 0039-grub-install-common-Add-sbat-option.patch - Fix CVE-2021-20225 (bsc#1182262) * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch - Fix CVE-2020-27749 (bsc#1179264) * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch * 0025-kern-parser-Fix-a-memory-leak.patch * 0026-kern-parser-Introduce-process_char-helper.patch * 0027-kern-parser-Introduce-terminate_arg-helper.patch * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch - Fix CVE-2021-20233 (bsc#1182263) * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch - Fix CVE-2020-25647 (bsc#1177883) * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch - Fix CVE-2020-25632 (bsc#1176711) * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch - Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970) * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch * 0005-efi-Add-secure-boot-detection.patch * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch * 0009-kern-Add-lockdown-support.patch * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch * 0018-gdb-Restrict-GDB-access-when-locked-down.patch * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch * 0042-squash-grub2-efi-chainload-harder.patch * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch * 0044-squash-kern-Add-lockdown-support.patch * 0045-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch * 0046-squash-verifiers-Move-verifiers-API-to-kernel-image.patch - Drop patch supersceded by the new backport * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch * 0007-linuxefi-fail-kernel-validation-without-shim-protoco.patch - Add SBAT metadata section to grub.efi - Drop shim_lock module as it is part of core of grub.efi * grub2.spec- Fix build error in binutils 2.36 (bsc#1181741) * 0001-Fix-build-error-in-binutils-2.36.patch - Fix executable stack in grub-emu (bsc#1181696) * 0001-emu-fix-executable-stack-marking.patch- Restore compatibilty sym-links * grub2.spec - Use rpmlintrc to filter out rpmlint 2.0 error (bsc#1179044) * grub2.rpmlintrc- Complete Secure Boot support on aarch64 (jsc#SLE-15020) * 0001-Add-support-for-Linux-EFI-stub-loading-on-aarch64.patch * 0002-arm64-make-sure-fdt-has-address-cells-and-size-cells.patch * 0003-Make-grub_error-more-verbose.patch * 0004-arm-arm64-loader-Better-memory-allocation-and-error-.patch * 0005-Make-linux_arm_kernel_header.hdr_offset-be-at-the-ri.patch * 0006-efi-Set-image-base-address-before-jumping-to-the-PE-.patch * 0007-linuxefi-fail-kernel-validation-without-shim-protoco.patch * 0008-squash-Add-support-for-Linux-EFI-stub-loading-on-aar.patch * 0009-squash-Add-support-for-linuxefi.patch- Fix rpmlint 2.0 error for having arch specific path in noarch package aiming for compatibility with old package (bsc#1179044) * grub2.spec - Fix non POSIX sed argument which failed in sed from busybox (bsc#1181091) * grub2-check-default.sh- Fix boot failure in blocklist installation (bsc#1178278) * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch- Fix grub2-install error with "failed to get canonical path of `/boot/grub2/i386-pc'." (bsc#1177957) * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch- Fix https boot interrupted by unrecognised network address error message (bsc#1172952) * 0001-add-support-for-UEFI-network-protocols.patch- grub2.spec: Fix bare words used as string in expression which is no longer allowed in rpm 4.16- Improve the error handling when grub2-install fails with short mbr gap (bsc#1176062) * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch- Make efi hand off the default entry point of the linux command (bsc#1176134) * 0001-efi-linux-provide-linux-command.patch- Fix verification requested but nobody cares error when loading external module in secure boot off (bsc#1175766) * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch- Make consistent check to enable relative path on btrfs (bsc#1174567) * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch- Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745) * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch- Fix for CVE-2020-15705 (bsc#1174421) * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch * 0002-cmdline-Provide-cmdline-functions-as-module.patch- Make grub-calloc inline to avoid symbol not found error as the system may not use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036) * 0001-kern-mm.c-Make-grub_calloc-inline.patch- Fix for CVE-2020-10713 (bsc#1168994) * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch * 0004-calloc-Use-calloc-at-most-places.patch * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch * 0007-font-Do-not-load-more-than-one-NAME-section.patch - Fix CVE-2020-15706 (bsc#1174463) * 0008-script-Remove-unused-fields-from-grub_script_functio.patch * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch - Fix CVE-2020-15707 (bsc#1174570) * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch - Use overflow checking primitives where the arithmetic expression for buffer allocations may include unvalidated data - Use grub_calloc for overflow check and return NULL when it would occur * 0001-add-support-for-UEFI-network-protocols.patch * 0003-bootp-New-net_bootp6-command.patch * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch * grub2-btrfs-09-get-default-subvolume.patch * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch * grub2-grubenv-in-btrfs-header.patch- No 95_textmode for PowerPC (boo#1174166)- Skip zfcpdump kernel from the grub boot menu (bsc#1166513) * grub2-s390x-skip-zfcpdump-image.patch- Fix boot failure as journaled data not get drained due to abrupt power off after grub-install (bsc#1167756) * grub-install-force-journal-draining-to-ensure-data-i.patch- Fix executable stack in grub-probe and other grub utility (bsc#1169137) * grub2-btrfs-06-subvol-mount.patch- Fix GCC 10 build fail (bsc#1158189) * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch- Backport to support searching for specific config files for netboot (bsc#1166409) * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch * 0002-kern-Add-X-option-to-printf-functions.patch * 0003-normal-main-Search-for-specific-config-files-for-net.patch * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch- move *.module files to separate -debug subpackage (boo#1166578)- Fix EFI console detection to make it a runtime decision (bsc#1164385) * grub2-SUSE-Add-the-t-hotkey.patch- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839) - remove info requirements, file triggers are used now (boo#1152105)- Add secure boot support for s390x. (jsc#SLE-9425) * grub2-s390x-11-secureboot.patch- Fix grub hangs after loading rogue image without valid signature for uefi secure boot (bsc#1159102) * grub2-verifiers-fix-system-freeze-if-verify-failed.patch- From Stefan Seyfried : Fix grub2-install fails with "not a directory" error (boo#1161641, bsc#1162403) * grub2-install-fix-not-a-directory-error.patch- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912) - Correct linux and initrd handling in 20_linux_xen (bsc#1157912) M grub2-efi-xen-cfg-unquote.patch M grub2-efi-xen-chainload.patch M grub2-efi-xen-cmdline.patch M grub2-efi-xen-removable.patch- Disable btrfs zstd support for i386-pc to workaround core.img too large to be embedded in btrfs bootloader area or MBR gap (boo#1154809) * 0001-btrfs-disable-zstd-support-for-i386-pc.patch- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)- Enable support for riscv64 - Backports from upstream: * risc-v-fix-computation-of-pc-relative-relocation-offset.patch * risc-v-add-clzdi2-symbol.patch * grub-install-define-default-platform-for-risc-v.patch- Version bump to 2.04 * removed - translations-20170427.tar.xz * grub2.spec - Make signed grub-tpm.efi specific to x86_64-efi build, the platform currently shipped with tpm module from upstream codebase - Add shim_lock to signed grub.efi in x86_64-efi build - x86_64: linuxefi now depends on linux, both will verify kernel via shim_lock - Remove translation tarball and po file hacks as it's been included in upstream tarball * rediff - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch - grub2-commands-introduce-read_file-subcommand.patch - grub2-secureboot-add-linuxefi.patch - 0001-add-support-for-UEFI-network-protocols.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-install-signed-grub.patch - grub2-linux.patch - use-grub2-as-a-package-name.patch - grub2-pass-corret-root-for-nfsroot.patch - grub2-secureboot-use-linuxefi-on-uefi.patch - grub2-secureboot-no-insmod-on-sb.patch - grub2-secureboot-provide-linuxefi-config.patch - grub2-secureboot-chainloader.patch - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-s390x-04-grub2-install.patch - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch - grub2-efi-chainloader-root.patch - grub2-ppc64le-disable-video.patch - grub2-ppc64-cas-reboot-support.patch - grub2-Fix-incorrect-netmask-on-ppc64.patch - 0003-bootp-New-net_bootp6-command.patch - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch - 0012-tpm-Build-tpm-as-module.patch - grub2-emu-4-all.patch - grub2-btrfs-09-get-default-subvolume.patch - grub2-ppc64le-memory-map.patch - grub2-ppc64-cas-fix-double-free.patch - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch * drop upstream patches - grub2-fix-locale-en.mo.gz-not-found-error-message.patch - grub2-fix-build-with-flex-2.6.4.patch - grub2-accept-empty-module.patch - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch - unix-exec-avoid-atexit-handlers-when-child-exits.patch - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch - grub2-binutils2.31.patch - grub2-msdos-fix-overflow.patch - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch - grub2-efi-Move-grub_reboot-into-kernel.patch - grub2-efi-Free-malloc-regions-on-exit.patch - grub2-move-initrd-upper.patch - 0002-Add-Virtual-LAN-support.patch - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch - 0001-tpm-Core-TPM-support.patch - 0002-tpm-Measure-kernel-initrd.patch - 0003-tpm-Add-BIOS-boot-measurement.patch - 0004-tpm-Rework-linux-command.patch - 0005-tpm-Rework-linux16-command.patch - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch - 0007-tpm-Measure-the-kernel-commandline.patch - 0008-tpm-Measure-commands.patch - 0009-tpm-Measure-multiboot-images-and-modules.patch - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch - 0011-tpm-Fix-build-error.patch - 0013-tpm-i386-pc-diskboot-img.patch - grub2-freetype-pkgconfig.patch - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch- Consistently find btrfs snapshots on s390x. (bsc#1136970) * grub2-s390x-04-grub2-install.patch- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229) * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).- Fix iteration of FCP LUNs (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229). * Refresh grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch- Use grub2-install to handle signed grub installation for UEFI secure boot and also provide options to override default (bsc#1136601) * grub2-secureboot-install-signed-grub.patch - Remove arm64 linuxefi patches as it's not needed for secure boot * 0001-efi-refactor-grub_efi_allocate_pages.patch * 0002-Remove-grub_efi_allocate_pages.patch * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch * 0006-Add-support-for-EFI-handover-on-ARM64.patch- Avoid high resolution when trying to keep current mode (bsc#1133842) * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch - Make GRUB_SAVEDEFAULT working with btrfs (bsc#1128592) * grub2-grubenv-in-btrfs-header.patch- Check/refresh zipl-kernel before hibernate on s390x. (bsc#940457) (Getting rid of hardcoded 'vmlinuz', which failed on PPC as well.) * grub2-systemd-sleep.sh- Try to refresh zipl-kernel on failed kexec. (bsc#1127293) * grub2-s390x-04-grub2-install.patch - Fully support "previous" zipl-kernel, with 'mem=1G' being available on dedicated entries. (bsc#928131) * grub2-s390x-09-improve-zipl-setup.patch - Refresh * grub2-zipl-setup-fix-btrfs-multipledev.patch- Fix GCC 9 build failure (bsc#1121208) * 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch * 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch * 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch * 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch * 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch * 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch * 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch * 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch- Use %doc for older products for compatibility, or may end up with unsuccessful build result * grub2.spec- Revert grub2-ieee1275-open-raw-mode.patch for regression of crashing lvm on multipath SAN (bsc#1113702) * deleted grub2-ieee1275-open-raw-mode.patch - Add exception handling to FCP lun enumeration (bsc#1113702) * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch- Fix LOADER_TYPE parsing in grub2-once (boo#1122569)- Create compatibility sym-link of grub.xen in the old location to which old VM definition is pointing (bsc#1123942)- Add patch to fix ARM boot, when kernel become too big: * grub2-move-initrd-upper.patch (boo#1123350)- Replace old $RPM_* shell vars.- Support long menu entry by scrolling its text left and right through the key stroke ctrl+l and ctrl+r (FATE#325760) * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch- Improved hiDPI device support (FATE#326680) * grub2-video-limit-the-resolution-for-fixed-bimap-font.patch- Build platform-packages 'noarch' and move to '/usr/share/efi' for SUSE Manager. (FATE#326960) * grub2-efi-xen-chainload.patch (bsc#1122563) * grub2-efi-xen-removable.patch (refresh)- Support for UEFI Secure Boot on AArch64 (FATE#326541) * 0001-efi-refactor-grub_efi_allocate_pages.patch * 0002-Remove-grub_efi_allocate_pages.patch * 0003-arm64-efi-move-EFI_PAGE-definitions-to-efi-memory.h.patch * 0004-efi-Add-central-copy-of-grub_efi_find_mmap_size.patch * 0005-efi-Add-grub_efi_get_ram_base-function-for-arm64.patch * 0006-Add-support-for-EFI-handover-on-ARM64.patch- Change default tsc calibration method to pmtimer on EFI (bsc#1114754) * 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch- ieee1275: Fix double free in CAS reboot (bsc#1111955) * grub2-ppc64-cas-fix-double-free.patch- Support NVDIMM device names (bsc#1110073) * grub2-getroot-support-nvdimm.patch- Translate caret back to space as the initrd stanza could use space to delimit multiple files loaded (bsc#1101942) * grub2-util-30_os-prober-multiple-initrd.patch- ieee1275: implement FCP methods for WWPN and LUNs (bsc#1093145) * grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch- Fix broken network interface with random address and same name (bsc#1084508) * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus return code handling. (bsc#1106381) * modified grub2-btrfs-10-config-directory.patch- Fix overflow in sector count calculation (bsc#1105163) * grub2-msdos-fix-overflow.patch- Downgrade libburnia-tools to suggest as minimal system can't afford pulling in tcl/tk and half of the x11 stack (bsc#1102515) * modified grub2.spec- Add grub2-binutils2.31.patch: x86-64: Treat R_X86_64_PLT32 as R_X86_64_PC32. Starting from binutils commit bd7ab16b x86-64 assembler generates R_X86_64_PLT32, instead of R_X86_64_PC32, for 32-bit PC-relative branches. Grub2 should treat R_X86_64_PLT32 as R_X86_64_PC32.- The grubxenarch packages are now architecture-independent. [bsc#953297, grub2.spec, grub2-rpmlintrc]- Fix config_directory on btrfs to follow path scheme (bsc#1063443) * grub2-btrfs-10-config-directory.patch - Fix grub2-install --root-directory does not work for /boot/grub2/ on separate btrfs subvolume (boo#1098420) * grub2-btrfs-06-subvol-mount.patch - Fix setparams doesn't work as expected from boot-last-label NVRAM var, after inital CAS reboot on ieee1275 (bsc#1088830) * grub2-ppc64-cas-new-scope.patch- Fix install on xfs error (bsc#1101283) * 0001-xfs-Accept-filesystem-with-sparse-inodes.patch- grub2.spec: change %config to %config(noreplace) Don't overwrite user changes to config files on upgrades.- Marked %{_sysconfdir}/grub.d/40_custom as (noreplace) [bsc#1079332, grub2.spec]- Replace "GRUB_DISABLE_LINUX_RECOVERY" by "GRUB_DISABLE_RECOVERY" in /etc/default/grub and remove test from s390x install section in upec file. [bsc#1042433, grub.default, grub2.spec]- Added "# needssslcertforbuild", which got lost somewhere, to spec file [grub2.spec]- Replace confusing menu on btrfs "snapper rollback" by help text. [bsc#1027588, grub2-btrfs-help-on-snapper-rollback.patch]- Use %license instead of %doc [bsc#1082318]- grub2-emu on s390 keep network during kexec boot (bsc#1089493) * grub2-s390x-10-keep-network-at-kexec.patch- Add grub2-freetype-pkgconfig.patch to fix build with new freetype use pkgconfig to find Freetype libraries.- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559) * grub2-ieee1275-open-raw-mode.patch- Fix error of essential directory not found on UEFI Xen host (bsc#1085842) * add grub2-efi-xen-removable.patch * rediff grub2-suse-remove-linux-root-param.patch- Fix corruption of "grub2-install --help" and grub2-install manual page (bsc#1086670) * unix-exec-avoid-atexit-handlers-when-child-exits.patch- Fix Nvidia GPU in legacy I/O slot 2 disappears during system startup (bsc#1082914) * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch- Fix packed-not-aligned error on GCC 8 (bsc#1084632) * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch- Fix incorrect netmask on ppc64 (bsc#1085419) * grub2-Fix-incorrect-netmask-on-ppc64.patch- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132) * 0001-add-support-for-UEFI-network-protocols.patch- fix wrong command output when default subvolume is toplevel tree with id 5 (bsc#1078775) * grub2-btrfs-09-get-default-subvolume.patch - insert mdraid modules to support software RAID (bsc#1078775) * grub2-xen-pv-firmware.cfg- Rename grub2-btrfs-workaround-grub2-once.patch to grub2-grubenv-in-btrfs-header.patch - Store GRUB environment variable health_checker_flag in Btrfs header- Fix incorrect check preventing the script from running (bsc#1078481) * 80_suse_btrfs_snapshot- Fix disappeared snapshot menu entry (bsc#1078481) * 80_suse_btrfs_snapshot- Fix unquoted string error and add some more checks (bsc#1079330) * grub2-check-default.sh- The %prep section applies patches, the %build section builds. Remove mixup of patching and building from %prep for quilt setup Related to bsc#1065703- Check if default entry need to be corrected for updated distributor version and/or use fallback entry if default kernel entry removed (bsc#1065349) * grub2-check-default.sh * grub2-mkconfig-default-entry-correction.patch - Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239) * grub2-getroot-scan-disk-pv.patch- Filter out autofs and securityfs from /proc/self/mountinfo to speed up nfsroot test in large number of autofs mounts (bsc#1069094) * modified grub2-pass-corret-root-for-nfsroot.patch- Fix http(s) boot security review (bsc#1058090) * 0002-AUDIT-0-http-boot-tracker-bug.patch- 0001-add-support-for-UEFI-network-protocols.patch: * Workaround http data access in firmware * Fix DNS device path parsing for efinet device * Relaxed UEFI Protocol requirement * Support Intel OPA (Omni-Path Architecture) PXE Boot (bsc#1015589)- grub2-xen-pv-firmware.cfg: remove linemode=1 from cmdline for SUSE installer. openQA expects ncurses interface. (bsc#1066919)- use python3 for autogen.sh (fate#323526)- Do not check that PReP partition does not contain an ELF during installation (bsc#1065738). * grub2-install-remove-useless-check-PReP-partition-is-empty.patch- Build diskboot_tpm.img as separate image to diskboot.img to prevent failure in booting on some bogus firmware. To use the TPM image you have to use suse-enable-tpm option of grub2-install (bsc#1052401) * 0013-tpm-i386-pc-diskboot-img.patch- Use /boot//loader/linux to determine if install media is SUSE instead of /contents file (bsc#1054453)- Use the pvops-enabled default kernel if the traditional xen pv kernel and initrd are not found (bsc#1054453)- Fix reboot in UEFI environments (bsc#1047331) * Add grub2-efi-Move-grub_reboot-into-kernel.patch * Refresh grub2-efi-Free-malloc-regions-on-exit.patch- Add preliminary patch for UEFI HTTPS and related network protocol support (fate#320130) * 0001-add-support-for-UEFI-network-protocols.patch- grub2-s390x-04-grub2-install.patch : remove arybase dependency in grub2-zipl-setup by not referencing to $[ (bsc#1055280)- Fix minor oversights in and the exit value of the grub2-install helper on s390x. (bsc#1055343, fate#323298) * grub2-s390x-09-improve-zipl-setup.patch- Make grub2.info build reproducible (boo#1047218)- add grub2-fix-build-with-flex-2.6.4.patch - fix build with flex 2.6.4+ that removed explicit (void) cast from fprintf call in yy_fatal_error.- Support LVM physical volume created without metadatacopies (bsc#1027526) * grub2-diskfilter-support-pv-without-metadatacopies.patch - Fix page fault exception when grub loads with Nvidia cards (bsc#1038533) * grub2-efi-uga-64bit-fb.patch - Require 'kexec-tools' for System z. (bsc#944358) * modified grub2.spec- grub2-xen-pv-firmware.cfg: insmod lvm module as it's not auto-loaded to support booting from lvm volume (bsc#1004324) - Grub not working correctly with xen and btrfs snapshots (bsc#1026511) * Add grub2-btrfs-09-get-default-subvolume.patch * grub2-xen-pv-firmware.cfg : search path in default subvolume- new upstream version 2.02 * rediff - use-grub2-as-a-package-name.patch * drop upstream patches - grub2-fix-uninitialized-variable-in-btrfs-with-GCC7.patch - grub2-add-FALLTHROUGH-annotations.patch - update translations- update grub2-btrfs-workaround-grub2-once.patch to also store saved_entry in additional environment block (boo#1031025)- fix building with GCC (bsc#1030247) * add grub2-fix-uninitialized-variable-in-btrfs-with-GCC7.patch * grub2-add-FALLTHROUGH-annotations.patch- Fix out of memory error on lvm detection (bsc#1016536) (bsc#1027401) * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch - Fix boot failure if /boot is separate btrfs partition (bsc#1023160) * grub2-btrfs-06-subvol-mount.patch- 0004-tpm-Rework-linux-command.patch : Fix out of bound memory copy (bsc#1029187)- new upstream version 2.02~rc2 * rediff - use-grub2-as-a-package-name.patch - grub2-linguas.sh-no-rsync.patch * drop upstream patches - 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch- TPM Support (FATE#315831) * 0001-tpm-Core-TPM-support.patch * 0002-tpm-Measure-kernel-initrd.patch * 0003-tpm-Add-BIOS-boot-measurement.patch * 0004-tpm-Rework-linux-command.patch * 0005-tpm-Rework-linux16-command.patch * 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch * 0007-tpm-Measure-the-kernel-commandline.patch * 0008-tpm-Measure-commands.patch * 0009-tpm-Measure-multiboot-images-and-modules.patch * 0010-tpm-Fix-boot-when-there-s-no-TPM.patch * 0011-tpm-Fix-build-error.patch * 0012-tpm-Build-tpm-as-module.patch - grub2.spec : Add grub-tpm.efi for Secure Boot- Fix invalid Xen EFI config files if xen_args include GRUB2 quoting (bsc#900418) (bsc#951748) * grub2-efi-xen-cfg-unquote.patch - Fix linuxefi erroneously initialize linux's boot_params with non-zero values. (bsc#1025563) * grub2-linuxefi-fix-boot-params.patch - Removed grub2-fix-multi-device-root-kernel-argument.patch as it has regression on how GRUB_DISABLE_LINUX_UUID=true interpreted (bsc#1015138)- Fix for openQA UEFI USB Boot failure with upstream patch (bsc#1026344) * added 0001-efi-strip-off-final-NULL-from-File-Path-in-grub_efi_.patch * removed 0001-Revert-efi-properly-terminate-filepath-with-NULL-in-.patch- Temporary fix for openQA UEFI USB Boot failure (bsc#1026344) * 0001-Revert-efi-properly-terminate-filepath-with-NULL-in-.patch- grub2.spec: fix s390x file list.- require efibootmgr in efi package (boo#1025520)- Merge changes from SLE12 - add grub2-emu-4-all.patch * Build 'grub2-emu' wherever possible, to allow a better implementation of that feature. - add grub2-s390x-06-loadparm.patch, - add grub2-commands-introduce-read_file-subcommand.patch: * allow s390x to telecontrol grub2. (bsc#891946, bsc#892852) - add grub2-s390x-06-loadparm.patch: * ignore case and fix transliteration of parameter. (bsc#891946) - add grub2-s390x-07-add-image-param-for-zipl-setup.patch * Add --image switch to force zipl update to specific kernel (bsc#928131) - add grub2-s390x-08-workaround-part-to-disk.patch * Ignore partition tables on s390x. (bsc#935127) - add grub2-efi-chainload-harder.patch: * allow XEN to be chain-loaded despite firmware flaws. (bnc#887793) * Do not use shim lock protocol for reading pe header, it won't be available when secure boot disabled (bsc#943380) * Make firmware flaw condition be more precisely detected and add debug message for the case * Check msdos header to find PE file header (bsc#954126) - grub2-s390x-04-grub2-install.patch: * streamline boot to grub menu. (bsc#898198) * Force '/usr' to read-only before calling kexec. (bsc#932951) - grub2-once: * add '--enum' option to enumerate boot-entries in a way actually understood by 'grub2'. (bsc#892852, bsc#892811) * Examine variables from grub environment in 'grub2-once'. (fate#319632)- new upstream version 2.02~rc1 * rediff - use-grub2-as-a-package-name.patch - grub2-s390x-04-grub2-install.patch - grub2-accept-empty-module.patch - grub2-btrfs-04-grub2-install.patch - grub2-btrfs-06-subvol-mount.patch * drop upstream patches - 0001-dns-fix-buffer-overflow-for-data-addresses-in-recv_h.patch - 0001-build-Use-AC_HEADER_MAJOR-to-find-device-macros.patch - 0002-configure-fix-check-for-sys-sysmacros.h-under-glibc-.patch - 0001-Fix-fwpath-in-efi-netboot.patch - 0001-arm64-Move-firmware-fdt-search-into-global-function.patch - 0002-arm-efi-Use-fdt-from-firmware-when-available.patch - grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch - 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch - 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch - 0001-xen-make-xen-loader-callable-multiple-times.patch - 0002-xen-avoid-memleaks-on-error.patch - 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch - 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch - 0005-xen-synchronize-xen-header.patch - 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch - 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch - 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch - 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch - 0010-xen-modify-page-table-construction.patch - 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch * add - fix-grub2-use-stat-instead-of-udevadm-for-partition-lookup-with-new-glibc.patch fix compilation with new glibc- Fix build error on glibc-2.25 * 0001-build-Use-AC_HEADER_MAJOR-to-find-device-macros.patch * 0002-configure-fix-check-for-sys-sysmacros.h-under-glibc-.patch - Fix fwpath in efi netboot (fate#321993) (bsc#1022294) * 0001-Fix-fwpath-in-efi-netboot.patch- grub2-systemd-sleep.sh: Fix prematurely abort by commands error return code and skip the offending menu entry (bsc#1022880)- Add support for BLT only EFI GOP adapters (FATE#322332) * grub2-efi-gop-add-blt.patch- info-dir-entry.patch: Update info dir entry to follow renaming to grub2- Add serial module to efi image. Serial terminal is still useful even with EFI Secure Boot- Support %posttrans with marcos provided by update-bootloader-rpm-macros package (bsc#997317)- Remove outdated README.openSUSE (bsc#907693)- 20_memtest86+: avoid adding memtest86+ to the list with UEFI booting.- Fix new line character in distributor (bsc#1007212) * modified grub2-default-distributor.patch- From Juergen Gross : grub-xen: support booting huge pv-domains (bsc#1004398) (bsc#899465) * 0001-xen-make-xen-loader-callable-multiple-times.patch * 0002-xen-avoid-memleaks-on-error.patch * 0003-xen-reduce-number-of-global-variables-in-xen-loader.patch * 0004-xen-add-elfnote.h-to-avoid-using-numbers-instead-of-.patch * 0005-xen-synchronize-xen-header.patch * 0006-xen-factor-out-p2m-list-allocation-into-separate-fun.patch * 0007-xen-factor-out-allocation-of-special-pages-into-sepa.patch * 0008-xen-factor-out-allocation-of-page-tables-into-separa.patch * 0009-xen-add-capability-to-load-initrd-outside-of-initial.patch * 0010-xen-modify-page-table-construction.patch * 0011-xen-add-capability-to-load-p2m-list-outside-of-kerne.patch- add support for netboot on arm64-efi platforms (bsc#998097) * grub2-arm64-mknetdir-add-suport-for-arm64-efi.patch- use $PRETTY_NAME instead of $NAME $VERSION for $GRUB_DISTRIBUTOR in openSUSE Tumbleweed (bsc#995549) * modified grub2-default-distributor.patch - grub2.spec: add http module to grub.efi (fate#320129)- binutils 2.27 creates empty modules without a symtab. Add patch grub2-accept-empty-module.patch to not reject them.- since version 1.7 cryptsetup defaults to SHA256 for LUKS - include gcry_sha256 in signed EFI image- Workaround default entry in snapshot menu (bsc#956046) * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch - grub2.spec: Add true command to grub.efi (bsc#993274)- grub.default: Empty GRUB_CMDLINE_LINUX_DEFAULT, the value will be fully taken from YaST settings. (bsc#989803)- Add patches from Roberto Sassu - Fix grub2-10_linux-avoid-multi-device-root-kernel-argument.patch, device path is not tested if GRUB_DISABLE_LINUX_UUID="true" - added grub2-fix-multi-device-root-kernel-argument.patch (bsc#960776) - grub2-zipl-setup: avoid multi-device root= kernel argument * added grub2-zipl-setup-fix-btrfs-multipledev.patch (bsc#960776) - Add SUSE_REMOVE_LINUX_ROOT_PARAM configuration option to /etc/default/grub, to remove root= and rootflags= from the kernel command line in /boot/grub2/grub.cfg and /boot/zipl/config - added grub2-suse-remove-linux-root-param.patch (bsc#962585)- Support HTTP Boot IPv4 and IPv6 (fate#320129) * 0001-misc-fix-invalid-character-recongition-in-strto-l.patch * 0002-net-read-bracketed-ipv6-addrs-and-port-numbers.patch * 0003-bootp-New-net_bootp6-command.patch * 0004-efinet-UEFI-IPv6-PXE-support.patch * 0005-grub.texi-Add-net_bootp6-doument.patch * 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch * 0007-efinet-Setting-network-from-UEFI-device-path.patch * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch - Fix heap corruption after dns lookup * 0001-dns-fix-buffer-overflow-for-data-addresses-in-recv_h.patch- fix filelist for s390x- Fix grub2-editenv error on encrypted lvm installation (bsc#981621) * modified grub2-btrfs-workaround-grub2-once.patch - Add missing closing bracket in 'grub2-snapper-plugin.sh'. - Fix snapshot booting on s390x (bsc#955115) * modified grub2-snapper-plugin.sh - Fallback to old subvol name scheme to support old snapshot config (bsc#953538) * added grub2-btrfs-07-subvol-fallback.patch- update grub2-once with patch from Björn Voigt - skip comments in /etc/sysconfig/bootloader (boo#963610)- Make sure all systemd unit files are passed to %service_ macros.- Add patch to free memory on exit in efi environments (bsc#980739) * grub2-efi-Free-malloc-regions-on-exit.patch- Remove xen-devel from BuildRequires required headers are included in grub-2.0.2- Add support for "t" hotkey to switch to text mode (bsc#976836) * added grub2-SUSE-Add-the-t-hotkey.patch - Add support for hidden menu entries (bsc#976836) * added grub2-Add-hidden-menu-entries.patch- Correct show user defined comments in menu for snapshots (bsc#956698) * modified grub2-snapper-plugin.sh- Fix GRUB_DISABLE_LINUX_UUID to be ignore and also fallback kernel device won't be used if fs uuid not detected (bsc#971867) * added 0001-10_linux-Fix-grouping-of-tests-for-GRUB_DEVICE.patch * added 0002-20_linux_xen-fix-test-for-GRUB_DEVICE.patch- new upstream version 2.02~beta3 * highlights of user visible changes not yet present in openSUSE package - arm-uboot now generates position independent self relocating image, so single binary should run on all supported systems - loader for Xen on aarch64. grub-mkconfig support was not in time for beta3 yet. - improved ZFS support (extensible_dataset, large_blocks, embedded_data, hole_birth features) - support for IPv6 Router Advertisements - support for persistent memory (we do not overwrite it and pass correct information to OS) - try to display more specific icons for os-prober generated menu entries - grub-install detects EFI bit size and selects correct platform (x86_64-efi or i386-efi) independent of OS bit size; needs kernel 4.0 or higher. - LVM RAID1 support - xnu loader fixes which should make OS X menu entry generated by os-prober work again - key modifiers (Ctrl-X etc) should work on EFI too - ... and lot of fixes over entire tree * rediff - rename-grub-info-file-to-grub2.patch - use-grub2-as-a-package-name.patch - grub2-GRUB_CMDLINE_LINUX_RECOVERY-for-recovery-mode.patch - grub2-fix-menu-in-xen-host-server.patch - grub2-efi-HP-workaround.patch - grub2-secureboot-chainloader.patch - grub2-s390x-02-kexec-module-added-to-emu.patch - grub2-s390x-04-grub2-install.patch - grub2-s390x-05-grub2-mkconfig.patch - grub2-efi-xen-chainload.patch - grub2-mkconfig-aarch64.patch - grub2-btrfs-04-grub2-install.patch - grub2-ppc64-cas-reboot-support.patch - 0002-Add-Virtual-LAN-support.patch * fix grub2-secureboot-add-linuxefi.patch - use grub_memset and grub_memcpy instead of memset and memcpy (caused errors due to compiler warning) * drop upstream patches - 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch - 0001-look-for-DejaVu-also-in-usr-share-fonts-truetype.patch - 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch - 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch - 0003-efinet-open-Simple-Network-Protocol-exclusively.patch - 0001-efinet-Check-for-immediate-completition.patch - 0001-efinet-enable-hardware-filters-when-opening-interfac.patch - grub2-xen-legacy-config-device-name.patch - grub2-getroot-support-NVMe-device-names.patch - grub2-netboot-hang.patch - grub2-btrfs-fix-incorrect-address-reference.patch - aarch64-reloc.patch - grub2-glibc-2.20.patch (related code dropped upstream) - grub2-Initialized-initrd_ctx-so-we-don-t-free-a-random-poi.patch - grub2-btrfs-fix-get_root-key-comparison-failures-due-to-en.patch - grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch - grub2-ppc64-qemu.patch - grub2-xfs-Add-helper-for-inode-size.patch - grub2-xfs-Fix-termination-loop-for-directory-iteration.patch - grub2-xfs-Convert-inode-numbers-to-cpu-endianity-immediate.patch - grub2-xfs-V5-filesystem-format-support.patch - 0001-Add-bootargs-parser-for-open-firmware.patch - grub2-arm64-set-correct-length.patch - grub2-arm64-setjmp-Add-missing-license-macro.patch - grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch - 0001-unix-password-Fix-file-descriptor-leak.patch - 0002-linux-getroot-fix-descriptor-leak.patch - 0003-util-grub-mount-fix-descriptor-leak.patch - 0004-linux-ofpath-fix-descriptor-leak.patch - 0005-grub-fstest-fix-descriptor-leak.patch - ppc64le.patch - libgcc-prereq.patch - libgcc.patch - 0001-Fix-security-issue-when-reading-username-and-passwor.patch - 0001-menu-fix-line-count-calculation-for-long-lines.patch - grub2-arm64-Reduce-timer-event-frequency-by-10.patch - 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch - 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch - 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch - 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch - 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch - 0005-i386-fix-TSC-calibration-using-PIT.patch - biendian.patch - ppc64_opt.patch * drop workarounds for gdb_grub and grub.chrp, they are now installed under fixed name * do not patch docs/Makefile.in, it is regenerated anyway- Make mkconfig search for zImage on arm * grub2-mkconfig-arm.patch- Add support to directly pass an EFI FDT table to a kernel on 32bit arm * 0001-arm64-Move-firmware-fdt-search-into-global-function.patch * 0002-arm-efi-Use-fdt-from-firmware-when-available.patch- Add config option to set efi xen loader command line option (bsc#957383) * added grub2-efi-xen-cmdline.patch- Drop ppc64le patches. Build stage1 as BE for Power Droped patches: - grub2-ppc64le-01-Add-Little-Endian-support-for-Power64-to-the-build.patch - grub2-ppc64le-02-Build-grub-as-O1-until-we-add-savegpr-and-restgpr-ro.patch - grub2-ppc64le-03-disable-creation-of-vsx-and-altivec-instructions.patch - grub2-ppc64le-04-powerpc64-LE-s-linker-knows-how-to-handle-the-undefi.patch - grub2-ppc64le-05-grub-install-can-now-recognize-and-install-a-LE-grub.patch - grub2-ppc64le-06-set-the-ABI-version-to-0x02-in-the-e_flag-of-the-PPC.patch - grub2-ppc64le-07-Add-IEEE1275_ADDR-helper.patch - grub2-ppc64le-08-Fix-some-more-warnings-when-casting.patch - grub2-ppc64le-09-Add-powerpc64-types.patch - grub2-ppc64le-10-powerpc64-is-not-necessarily-BigEndian-anymore.patch - grub2-ppc64le-11-Fix-warnings-when-building-powerpc-linux-loader-64bi.patch - grub2-ppc64le-12-GRUB_ELF_R_PPC_-processing-is-applicable-only-for-32.patch - grub2-ppc64le-13-Fix-powerpc-setjmp-longjmp-64bit-issues.patch - grub2-ppc64le-14-Add-powerpc64-ieee1275-trampoline.patch - grub2-ppc64le-15-Add-64bit-support-to-powerpc-startup-code.patch - grub2-ppc64le-16-Add-grub_dl_find_section_addr.patch - grub2-ppc64le-17-Add-ppc64-relocations.patch - grub2-ppc64le-18-ppc64-doesn-t-need-libgcc-routines.patch - grub2-ppc64le-19-Use-FUNC_START-FUNC_END-for-powerpc-function-definit.patch - grub2-ppc64le-20-.TOC.-symbol-is-special-in-ppc64le-.-It-maps-to-the-.patch - grub2-ppc64le-21-the-.toc-section-in-powerpc64le-modules-are-sometime.patch - grub2-ppc64le-22-all-parameter-to-firmware-calls-should-to-be-BigEndi.patch - grub2-ppc64le-fix-64bit-trampoline-in-dyn-linker.patch - grub2-ppc64le-timeout.patch - grub2-ppc64-build-ppc64-32bit.patch - Added patches: - biendian.patch - grub2-ppc64-cas-reboot-support.patch - libgcc-prereq.patch - libgcc.patch - ppc64_opt.patch - ppc64le.patch- Backport upstream patches for HyperV gen2 TSC timer calbration without RTC (bsc#904647) * added 0001-grub-core-kern-i386-tsc.c-calibrate_tsc-Ensure-that.patch * added 0002-i386-tsc-Fix-unused-function-warning-on-xen.patch * added 0003-acpi-do-not-skip-BIOS-scan-if-EBDA-length-is-zero.patch * added 0004-tsc-Use-alternative-delay-sources-whenever-appropria.patch * added 0005-i386-fix-TSC-calibration-using-PIT.patch- Add 0001-menu-fix-line-count-calculation-for-long-lines.patch (bsc#943585)- grub2-xen-pv-firmware.cfg: fix hd boot (boo#926795)- Add 0001-Fix-security-issue-when-reading-username-and-passwor.patch Fix for CVE-2015-8370 [boo#956631]- Update grub2-efi-xen-chainload.patch - fix copying of Linux kernel and initrd to ESP (boo#958193)- Rename grub2-xen.cfg to grub2-xen-pv-firmware.cfg (boo#926795)- grub2-xen.cfg: to handle grub1 menu.lst in PV guest (boo#926795)- Expand list of grub.cfg search path in PV Xen guest for systems installed to btrfs snapshot. (bsc#946148) (bsc#952539) * modified grub2-xen.cfg - drop grub2-fix-Grub2-with-SUSE-Xen-package-install.patch (bsc#774666)- Add 0001-unix-do-not-close-stdin-in-grub_passwd_get.patch Fix reading password by grub2-mkpasswd-pbdk2 without controlling tty, e.g. when called from Xfce menu (boo#954519)- Modify grub2-linguas.sh-no-rsync.patch to re-enable en@quot catalog (boo#953022). Other autogenerated catalogs still fail to build due to missing C.UTF-8 locale.- Allow to execute menuentry unrestricted as default (fate#318574) * added grub2-menu-unrestricted.patch- Add missing quoting for linuxefi (bsc#951962) * modified grub2-secureboot-use-linuxefi-on-uefi.patch * refreshed grub2-secureboot-provide-linuxefi-config.patch- Include custom.cfg into the files scanned by grub2-once. Allows to chose manually added entries as well (FATE#319632).- Upstream patches for fixing file descriptor leakage (bsc#943784) * added 0001-unix-password-Fix-file-descriptor-leak.patch * added 0002-linux-getroot-fix-descriptor-leak.patch * added 0003-util-grub-mount-fix-descriptor-leak.patch * added 0004-linux-ofpath-fix-descriptor-leak.patch * added 0005-grub-fstest-fix-descriptor-leak.patch- Do not force ro option in linuxefi patch (bsc#948555) * modified grub2-secureboot-use-linuxefi-on-uefi.patch * refrehed grub2-secureboot-provide-linuxefi-config.patch- add 0001-efinet-Check-for-immediate-completition.patch, 0001-efinet-enable-hardware-filters-when-opening-interfac.patch, grub2-arm64-efinet-handle-get_status-on-buggy-firmware-properly.patch (bsc#947203)- Set default GRUB_DISTRIBUTOR from /etc/os-release if it is empty or not set by user (bsc#942519) * added grub2-default-distributor.patch * modified grub.default- add systemd-sleep-plugin subpackage (bsc#941758) - evaluate the menu entry's title string by printf * modified grub2-once * added grub2-systemd-sleep.sh- fix for 'rollback' hint (bsc#901487) * modified grub2-btrfs-05-grub2-mkconfig.patch:- Replace 12.1 with 12 SP1 for the list of snapshots (bsc#934252) * modified grub2-snapper-plugin.sh- Fix btrfs subvol detection on BigEndian systems (bsc#933541) * modified grub2-btrfs-06-subvol-mount.patch - Fix grub2-mkrelpath outputs wrong path on BigEndian system * added grub2-getroot-fix-get-btrfs-fs-prefix-big-endian.patch- If we have a post entry and the description field is empty, we should use the "Pre" number and add that description to the post entry. (fate#317972) - Show user defined comments in grub2 menu for snapshots (fate#318101) * modified grub2-snapper-plugin.sh- add 0001-grub-core-kern-efi-efi.c-Ensure-that-the-result-star.patch make sure firmware path starts with '/' (boo#902982)- Fix btrfs patch on BigEndian systems (bsc#933541) * modified grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch * modified grub2-btrfs-06-subvol-mount.patch- Fix license for setjmp module * added grub2-arm64-setjmp-Add-missing-license-macro.patch- Fix install into snapper controlled btrfs subvolume and can't load grub modules from separate subvolume (fate#318392) * added grub2-btrfs-06-subvol-mount.patch * grub2-snapper-plugin.sh: use absolute subvol name- also Recommends mtools for grub2-mkrescue (used to create EFI boot image) in addition to libburnia-tools.- Support booting opensuse installer as PV DomU (boo#926795) * added grub2-xen.cfg for tracking default pvgrub2 xen configs rather than generating it from spec file * grub2-xen.cfg: from Olaf Hering - replace grub2-efinet-reopen-SNP-protocol-for-exclusive-use-by-grub.patch with upstream version: * 0001-efidisk-move-device-path-helpers-in-core-for-efinet.patch * 0002-efinet-skip-virtual-IPv4-and-IPv6-devices-when-enume.patch * 0003-efinet-open-Simple-Network-Protocol-exclusively.patch Fixes EFI network boot in some QEMU configurations.- fix grub2-mkconfig-aarch64.patch: fix arch detection broken by malformed patch rediffing- Cleanup patch not applied * remove grub2-enable-theme-for-terminal-window.patch * grub2.rpmlintrc: remove addFilter("patch-not-applied")- Merge changes from SLE12 - Do not pass root= when root is on nfs (bnc#894374) * modified grub2-pass-corret-root-for-nfsroot.patch * modified grub2-secureboot-provide-linuxefi-config.patch * modified grub2-secureboot-use-linuxefi-on-uefi.patch - Fix xen pvops kernel not appear on menu (bnc#895286) * modified grub2-fix-menu-in-xen-host-server.patch - Workaround grub2-once (bnc#892358) * added grub2-btrfs-workaround-grub2-once.patch * added grub2-once.service * modified grub2-once - Fix busy-loop and hang while network booting (bnc#870613) * added grub2-netboot-hang.patch - Add warning in grubenv file about editing it directly (bnc#887008) * added grub2-editenv-add-warning-message.patch - Fix broken graphics with efifb on QEMU/KVM and nomodeset (bnc#884558) * added grub2-efi-disable-video-cirrus-and-bochus.patch - Disable video support on Power (bnc#877142) * added grub2-ppc64le-disable-video.patch - Track occupied memory so it can be released on exit (bnc#885026) * added grub2-ppc64le-memory-map.patch - Fix grub.xen config searching path on boot partition (bnc#884828) - Add linux16 and initrd16 to grub.xen (bnc#884830) * added grub2-xen-linux16.patch - VLAN tag support (fate#315753) * added 0001-Add-bootargs-parser-for-open-firmware.patch * added 0002-Add-Virtual-LAN-support.patch - Use chainloader to boot xen.efi under UEFI (bnc#871857) * added grub2-efi-xen-chainload.patch - Use device part of chainloader target, if present (bnc#871857) * added grub2-efi-chainloader-root.patch - Create only hypervisor pointed by /boot/xen.gz symlink (bnc#877040) * modified grub2-fix-Grub2-with-SUSE-Xen-package-install.patch - Fix xen and native entries differ in grub.cfg (bnc#872014) * modified grub2-linux.patch - Fix install error on ddf md device (bnc#872360) * added grub2-getroot-treat-mdadm-ddf-as-simple-device.patch - Fix booting from NVMe device (bnc#873132) * added grub2-getroot-support-NVMe-device-names.patch - Document peculiarities of s390 terminals * added README.ibm3215 - Grub2 for System z (fate#314213) * added grub2-s390x-02-kexec-module-added-to-emu.patch * added grub2-s390x-03-output-7-bit-ascii.patch * added grub2-s390x-04-grub2-install.patch * added grub2-s390x-05-grub2-mkconfig.patch- grub2-arm64-set-correct-length.patch: arm64: set correct length of device path end entry- grub2-efi-HP-workaround.patch: * try to read config from all-uppercase prefix as last resort. (bnc#872503) (boo#902982)- add luks, gcry_rijndael, gcry_sha1 to signed EFI image to support LUKS partition in default setup (boo#917427)- enable i386-xen (boo#891043)- Downgrade os-prober dependency to Recommends (boo#898610)- grub2-snapper-plugin.sh: cleanup grub-snapshot.cfg not referring to any snapshot (boo#909359)- Require efibootmgr also on i586- Require efibootmgr also on aarch64- grub2-snapper-plugin.sh: fix use of printf without format string; fix quoting- grub2-arm64-Reduce-timer-event-frequency-by-10.patch: fix periodic timer on arm64- enable 32bit arm targets for uboot and efi- Replace 'echo -e' command in grub2-snapper-plugin.sh script to 'printf' command. '-e' option of 'echo' command may be unsupported in some POSIX-complete shells.- fix bashism in post script- grub2.spec: Fix conditional construct which wasn't supported by older versions of rpmbuild (caused error message "parseExpressionBoolean returns -1".)- fix errors when boot is btrfs with Windows partition scheme. The first partition is created on cylinder boundary that can't offer enough room for core.img and also the installation has to be in logical paritition which made MBR the only location to install. (bnc#841247) * add grub2-setup-try-fs-embed-if-mbr-gap-too-small.patchgrub2-xen  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~2.12-150600.8.18.22.12-150600.8.18.22.12-150600.8.18.2grub2x86_64-xenDEPRECATEDgrub.xenx86_64-xenadler32.modaffs.modafs.modafsplitter.modall_video.modappended_signature_test.modappendedsig.modarchelp.modasn1.modbacktrace.modbfs.modbitmap.modbitmap_scale.modblocklist.modbswap_test.modbtrfs.modbufio.modcat.modcbfs.modcmdline.modcmdline_cat_test.modcmp.modcmp_test.modcommand.lstconfigfile.modcpio.modcpio_be.modcpuid.modcrc64.modcrypto.lstcrypto.modcryptodisk.modcrypttab.modctz_test.moddate.moddatehook.moddatetime.moddisk.moddiskfilter.moddiv.moddiv_test.moddm_nv.modecho.modelf.modeval.modexfat.modexfctest.modext2.modf2fs.modfat.modfdt.lstfile.modfont.modfs.lstfshelp.modfunctional_test.modgcry_arcfour.modgcry_blowfish.modgcry_camellia.modgcry_cast5.modgcry_crc.modgcry_des.modgcry_dsa.modgcry_idea.modgcry_md4.modgcry_md5.modgcry_rfc2268.modgcry_rijndael.modgcry_rmd160.modgcry_rsa.modgcry_seed.modgcry_serpent.modgcry_sha1.modgcry_sha256.modgcry_sha512.modgcry_tiger.modgcry_twofish.modgcry_whirlpool.modgeli.modgettext.modgfxmenu.modgfxterm.modgfxterm_background.modgfxterm_menu.modgptsync.modgrub.xengzio.modhalt.modhashsum.modhello.modhelp.modhexdump.modhfs.modhfsplus.modhfspluscomp.modhttp.modiso9660.modjfs.modjpeg.modjson.modkernel.execkernel.imgkeystatus.modldm.modlegacy_password_test.modlegacycfg.modlinux.modloadenv.modloopback.modls.modlsmmap.modlsxen.modluks.modluks2.modlvm.modlzopio.modmacbless.modmacho.modmdraid09.modmdraid09_be.modmdraid1x.modmemdisk.modmemrw.modminicmd.modminix.modminix2.modminix2_be.modminix3.modminix3_be.modminix_be.modmoddep.lstmodinfo.shmpi.modmsdospart.modmul_test.modnet.modnewc.modnilfs2.modnormal.modntfs.modntfscomp.mododc.modoffsetio.modpart_acorn.modpart_amiga.modpart_apple.modpart_bsd.modpart_dfly.modpart_dvh.modpart_gpt.modpart_msdos.modpart_plan.modpart_sun.modpart_sunpc.modpartmap.lstparttool.lstparttool.modpassword.modpassword_pbkdf2.modpbkdf2.modpbkdf2_test.modpgp.modpkcs1_v15.modplainmount.modpng.modpriority_queue.modprobe.modprocfs.modprogress.modraid5rec.modraid6rec.modread.modreboot.modregexp.modreiserfs.modrelocator.modromfs.modscsi.modsearch.modsearch_fs_file.modsearch_fs_uuid.modsearch_label.modsetjmp.modsetjmp_test.modsfs.modshift_test.modsignature_test.modsleep.modsleep_test.modsquash4.modstrtoull_test.modsyslinuxcfg.modtar.modterminal.lstterminal.modtest.modtest_asn1.modtest_blockarg.modtestload.modtestspeed.modtftp.modtga.modtime.modtr.modtrig.modtrue.modudf.modufs1.modufs1_be.modufs2.modvideo.lstvideo.modvideo_colors.modvideo_fb.modvideoinfo.modvideotest.modvideotest_checksum.modxfs.modxnu_uuid.modxnu_uuid_test.modxzio.modzstd.mod/usr/lib//usr/lib/grub2//usr/lib/grub2/x86_64-xen//usr/share/grub2//usr/share/grub2/x86_64-xen/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:37155/SUSE_SLE-15-SP6_Update/efca4f83ad0038e123688e55e638bbc3-grub2.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxdirectoryASCII textELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not strippedELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), strippedemptyELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, strippedELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, with debug_info, not strippedPOSIX shell script, ASCII text executable, with very long linesutf-8e7c6fab3eba701771ec48e3bab38b3fcb419d07a9cd9a202c9f047c525f33247?@7zXZ !t/]"k%!EC=ݫrƢ՘I?\]huƓA$UKF<%/ORd`IUˉj4/Eke,JyiLyIβg78i)/F% -HsL`~ڵd[*%J?v0V} [w!h C jMN!o'Ǒ$cͯ U { }jr2,Zi9p[ _o\el&i2S DY# fӁ5dvAGё<ӹ9`%5hPG e}Pb_W,=^ծY5ʥ"$] K;mUϼimv0AUqq"ǞZݛIW˭׋m`IɭTedNz)=}xFٚ0ƖZRʠj˳|Ro͆ab&14QJguZB'Lńeߋ|iwb# c$Bōya ^@jR{mKZd@9> 7s/W&RQМIJphR?[ ثa;[h.:7qV9W`d8@|Pg<֨d2Z1pr0Ly~="oYH1ފ]TH̟۠Mϟk,+X"^ȫ _iR0eR8c=#m/JלVK ?"+ɕ Iu;տ?#38Bk Cn\ERgIaaC `{ g շ .C?Exٕhc:\BW,qy;{Pk|3_@8PRmڒ\a19.5c#ݴ> гHp Rom1Ǖ\_]A8lRkཛྷIs NJ16{W)09senDojCצּsk]E!Z@" rs^#1g쀣ӭ2#ZP ձLԨЧWǷt~"5n] 'IvM=6bzoSAf hʻq:*+Eo'1XQ_ɛăȇWfPebun~OA ,13עQVrdga=+E ҡdw O'}Hz+1R|5/5<lݶ틩Ai" -Ч]XT)`r&)Y^1fmꏏ:  NS:{.SQk8ʆm}S{bSi%-V hq1k #z<{m|:cYwE2f}7W6鸐! |(DMo^qU) w'd&a7e`iUuK8U10H;ێrM8׹%B& @ YG~0.>m'DR3Y V)e}IAu$씥4c׵\"rH yG(9 T}j|,DE To=a5WAa@gbV}E}KKye$"8+&t rT-r=iYg39CT'*!X_2j T6t2\Α'zhRa 77 $D[7oK5pIv yQ@ңEϵ(S9yLE #;ҁD}2n䛧)*W/}^}`:z}\.wuiQ>z e3"*dp S;bCm1z""K݂J~Q-KiXs1,. `15U,^a:^{c"c/ "UjXemQΪa$Kb|Pin]U rWfj:1#$])/㗌~ P%Glv/8cV o1+eGK8Fm kYn& ¼6܌sԉ75LBY4$9>6T*^ŭBM0Gˬlm HNN섈D^g{mjN"44&s1K?/;8gDS٢ D0Oh?X p{]ۺ6P5 {$srw(&}_g7lϢ`]2E4m/_N1۳/v\k)}rio._OM/)us E{c}DxA .mﱵjC U2,m`KY+8%l͘իĜ#4L< pL7$#`o)<[rML{}(삏HפV=sÔ\jcM1>Rsc <>x.Y5-ܗTQ Ů/c2Z9z.k׭J1%]EWc]M6Y';el^̬%OnwYofLN'E̊߷K9E?4;RaXui[ۅ9+!2.FDM"d1GrnSS󡀴vhgVnf jC)'< ҌmT!#FB2Xɯ|4rF p܂db/ :-3u_ǠSoguo*eZdg^^ӈ2(躋vyBl۪ پX)*aIa7A!J,\߮9F288|1P |U-0FP_;x=}SyNse ~ oZ>qg=*p!$|# ZVQL~K o|xdNcuZǂoe|rzzqN+"+pJshlOfBmWD|fKѕAэ>-|[Q[h6#OoPI-6laR*A񙽯xji!3zC-D8@3VhoǓ$ǭJQAP3NKCW oOR Q ƒ]?mzcST0$=ILx"JiwU8H7k_V92ت]Vovo9(,ػBʔ@JZMR'[0LU;~KoܿwRC *m](({Ո\&͚9oJzB/)]xu {Kr6kL"T ۶hoLO+q9X?NQOj sg}ЈM,k"2WF>2MʚwIjqr-!MT4, 8'WPHLEPʯ\/=aguS~eunjAQQi@x~ĔՂl)00[ Z,Q}Mf+Z Dd@E98_ D)EK d>+{~@2x בHvڂ/u*UaSCMl@; a*IJ (FP&ͮJ%NS1Y!c1upg̅Ziu'A UR[fh8VΕFx5U"S3% N(Ͽ>_ ?Z=$SuwC6tTIld$zzkiKWTA!уCbuTnj{BQv]зKQ̹dՁ35K=6b\֮S NZpY͋~Šw+5)K8 ˥NQYuAɋN"M53J! 2s]Fn<~4VG, {t jϏDP7=j3 {X'2{'B< 71;^ F`:z̬a83<,%C?0bEtR<Ak.PZZ?lnOhhn$1 .ڭub;=v27tD?;`u~84]{w+9miߥj@&i32!%6U&UZT /=߄30m=4xa Dڡht P{#n!PGUжO-hKع#/;1z k岳8oB)E"/i/r̩h^0b(/>5>嗐lZ*{r>[t[ǣrfɨfCqIqJ8Gt n70@~"x հ%!:| |ľ>[$hKƗhQ2E~3*8Ru|JRYk)0$qD~y&W{a4Y.|\IExgYj~W XuPwX+3)e\B X8}oRlcw%˜X 5"RH6BV+e$Gj7O>A^ЊOQƨk!ur`Hʕ$ǰ0FŊ$Bucj{.Ӛ,bGJ4 zz m)N<%DgyM=?,[Xzuur֟'eA\hfRV[ $}T929M@; ,Y.YiSfHtMD- Ogue"g}!V 4_HEbF+R5iv-h #lR'46.Īszj6VVx+ ͮ_V/IBE%BFpW̓Z˰l*Srhe2Jֻ@~+g;gXlhsT CڶOk#aSh70C~ qbD |(`}OH\!] ">~<19 Qj 7Ġ߰ɕm4i+_NڞAVL٪H!R"WeCjDHzVtS'c!烔s.~Vк$a=5qLt7OoWJ'ĘN2m s/Nb_?__8h(OO%`*U iz[ _esV x4:rC@g{ 8∀v쮄2w<”`'͍#Q"0 g J4c'~pH@apkkYmw&{5mB0*"spQb ^H)-BiFU2z|x|kG$!(t=3hR t\,ps rR ٺWcHp8h: zYʨdGqe'6gԔ_\1g/ƽ1uoX [J1zu5WEizW#À{qU5~p r:*AoJimTZ@ WHe|j_ {yrv#~Mia7j4N K 9Bpog$pni \)ywxIW4 -+4WxH{sr}3 |RG5` T?\k!30ƘK 3%ӧ$1jd2XVy4-{TOf qc̴G "u̿,Ӡ) m|?L5&mÆ> Pgu0"謥71T8 P{ q:"8fD8dL:zhA~|R9GOA-=1<Z5;8_13]'mS b `|ӽ¦KCnqbΙeF3r2lS\a0+_En%Z& Bv5 +)( Ԯ=gH}@.կ YV /aw"x GØ7 i0r%1nʟb=q0" }$zg:uU}__dyj߀+{mAbaΨ_.pO/cIY`uE*YIR瓢 )(-9J Fa):-5}H_jhq Yj86ctTIW4#-АH* F0NSp_-_9EzvU{K>T1$@6~m2 ?f:/*R'sUe$}ݐQ^&BHg^{/FE#P N\ЏƽgF>.El:D^##"AJCH`8չZx==F#3{K_/9I\p}VЏORb Rt)9YjǴc3u~}*TVA;c`z.$Pw\4"@2R0O݄)( J45͚@z-Y@`11 7Z^ĆS2aĮ=:_Ù XG0 kFWmh9CazK%qT``]!:Iu=o۬>mrѪ#׌\"͞=K*2=LqSva`,c"* 775SZf8ř`JL5G]6IK V]-fwԁVP^#z~Ow9 X5 qzcD~lW|+J_4kZmJ x 8}f~!L뭶*')0(\Tl1fsb`4o鰵]vl-Y+lԻE«b8ov+4B~̰݉zְS6_zبYkn ϘĩTL9T?g& hOԖ@=jT=@dZHEzSMWy9X9]N .>;Ǐz 7wT-9R7`1?B vf@/1[{slhs%P'``ĆH8$#ؔ?_`Sb è{3ʥIoީ@(͓>-z!Vwt_ i)>F^v+sF<$O_<:Db5&Ĝ;ouU, $4Ӗ&&KkfC<]t[SEd7f&_?|YNS5X G/dO+w-hխbN\7ؓaf6"9kBD$,"mŀ_Da-;>zoirͽRӡJ LHXM`ysHT,={Ї|kЃ)J0qo>7e:UnA{L&T/]ZLsݟ*]A;rtH=y'xaS+[C׼~xce?ь 럷5{#u' ˢP&F#Ir>’>Ɏb{q>ޣlna{K[K!.v˸hr{3=f2GEQs`1#6)px@1CsS]Q4F3,ƽ4"'j%F5BzثW"c OGL1(E/t[;D[ /2X l>Ajm LkCߓ*_C`ŗ|́voTFK1Hv;Mx݈^+:w R#%ª~1; I3bc53A8=:=n(-is'ho扑!_MfxrzP3!IhVr/j2P*UJ}!iR0laV+{xU 6՜rRca86/ILc+޷kt*]eb>^ .Ayg*Wl| ]#cȚ3=#sV9>x icOtimvr392+5 9C.V:Ɯ`Ｄ?ED8+GJC`WJ/->ȶؔ5 q^vn ܃'9Öo>]JO"PhSJz,eZAs|<#o+NjrrA:\vP.,ĉd=d$r(;o9l*b_oD2Õ2A'nlwQ|C.mY5h>U:3z\Li_HOU}$E,l7o=frM J1_@Ђ*IlĘX` \e|d7BR)M 7YN6e9ȫ}syObn*ǁ77ir|BԹ||M|"g.uDL52z0TLvmgdy|4&ɴj{b3w։\!/hk'R#~cߝ$UAY0$<ƽLg#K?DHrUM+Y.Zƻ΁ސc?xXbt^*֚~zvq(2}y_(Pא!9M/(D\r 4M&±vR9%I)7ɂ iq.k<[[v4>ٳ)fDXu^įuФ=VV&{6T܋Q:[*q\(kż?YT{rƵ}4-9+f;m Q$ tQ=с nqwDHaWkAH+f hAEBFqMPsdN#_xަ-3;s8JaM.1~A"RFdA 6O"RATgžWkҔ&A75f+PiߘS iڦ2I#BhX% :.4 T~] ?lS@=l$?}iq'ؠJQ" Q{B7L2bh{NT5AZ1J|pۑJwM}Dϫq4)}1;g:N:" ,{{;Nh^:~3keYh&a#Rr^"ckʱz BQ5YV96,}~* iC,V;QVppm;BM x\ZǷ`XDG4 o:%~п~pPa87>A\xjb3I%p KTN|\FmmK\:t(*9-C͚{eN; y-5@ԔKB09~PCe/AvMڣ5x-U;S PBξܚ}:l'6;BQBy'HcdĥFkcp:̻Lat#yihWTl3tZ #;^Ļ,DG\wԶE;녷|Xʏ6sts{я?Goғ_ 286r1[Jp~YJ;)K2֝y9sH{LOTrјiE6z=aIFfD *':j3+)H7vDsŞ&HP2{V[DdO 6:2+¨x0, \/TL>]bB[轃3x;#N/6|ˁ + On{~NW#7M@6ݹɦ08.よZ>`#[ 0/OžLrex."v[Dmq}ed<`/װ.Rx^ҐTkʢw 2Jͧ&(lN@[H~7/n9Q#>s_.I`:u)VD?npEwbҜ DE'ʰwJRj!$FU+d3Ԋ3F燨q1bau?KI}6g_n{3/웭ZKhR@܍<ލYH{`RSZdݾjQU mK o)#paǏ`yr\znUTӐiߦOu#CH#ᇜ >oc6$TeF3H`#4Ώ>4T2l?y7OriS2?㋗A .7>>PRVMYjyL )톪 h kn#?"l? _Xb1OKٗW%Z]wjuc]FdEZXBp.n`~",)-;%-a!α; b,$RrYbSV3xgsJRAcx ӎ2po'`l#5{RѯSxT#Z#gZ0 ͸h+bտ#8ZTC:̅%+Zhf6 qBʕO|YaU`]e2z9Ŝ B %U54Ÿ)TC]oȠAlG:Za2\atB.=dF@`k$wيxkW{f#ӛgCk|t%;q:x}/ƽ|F1Se}atWƇ$JY@R~ϯɮj1[([^I01 ɜn xR0} `(R[E l t.ȫAl- UC3A:pyw? t)//"$SiN 9sFxOoC7[C\ztOp7-YdCh Hu " ӯamМ$h6-f9ۂ3eT=L%J.̿& ysIK!x(6#6$4bDE9xTnH/ W!5ڎҨ|m:#TB-@툶s,m{"2$ۂh?h$y4{ծoۗ*Ihe$TBiΝL:ӖFeia@bi>n[7}I2fOװG `fZu-4#Hg˻5ˁI ]lP{cq)ou+XpwkNu&?xiEMBGF?Sn43AI o"ptާrHjIJ&# x>`eG|BW0Wצj,P\<6Bm}+W !0Wab~8Ѱvmp~҆e>A=)]#²QN~ʱ `QjeRCq ]; N s)\D]>lڀZIy5ODGiggrI r_ϩÖ9Sb/s pP~#PoLc =wNBʥh-+qI1ȸmvS$<[4m(K* ߮ ADJS$WcCZ{ymw# =l[&d#WZ5ED0NWToEy k7yUze;F%)uf}=u_$mq%̍ WlU,i7 IJ*`QkozCZoJ6:06357/~h -Ç)bWϚ0HlE^k.rﲯSr&E=@Nʔtx}@,MdW@!?<[7 nV{Ll.YN2 m^TYK`p17O,UHouzTw@XXg{T$\|8:eLKpvlDlnl54]~2Y,6t0tkVwOMr}\, SKpá~NBB$ ?!eĶ޺p5Dmh񒪢.4>O6!x5KKMBO5\(i:ǺE~nR'(I:>0ev겙?,f-f߹sXN/΅ۭkMd=OĹRS'Ql'<"j'|a=$x;#?:wMIPNːqZF;];m|& z GuH!W*IQԺصŒ=0q(ھ/e M|tmK:f2 ¯YX>b[}j!`}bEщZ 3-@qrLne%T?[,JXSfq۞=c}}e\8W-V˂iN&qxCyytLwS!/s̡y>]@Ҭ~1 kS7gA ʇʪ/N8O VJε q' I~ m)3jXxGpW 09> X)?;klgH4o`fX?㍍ܕϛ`0K}ZP!SU ݞ!u-!+-ʏ2),z& kyñF?v} J%3772i-JD\X^N6aMCd/3Ws.>aU~ ӑzC3 aj#3OLxѝ2tۺP$n\k]Ɩudj-hоa{NS/1ppWOaZ'Ux;Ki;#7/"yWnJ^xp^t3;TRiV_JZwyeM^?m`X2</}VjJd#sP!ܝn'T-%I%`v|LQt3P]%R/}JS{FI =˂i;kj#/D8x`ҲFc~N^f%R tAӲ痆6z"Lpov6[hKzD){M(h)>W 9/J(p2ȥ.c[U݇/mcb#4_\euj8vr\6|B*DnS>gaCwӊΆmҰ}l3myfj\{;iQݽGJ70qC8;y4`!-Ȏsf1-A~$0f 1e;(|q孅m(bP]kܨf6YwBe'WSn^1 h'KJ[qx~wbfi8-%1GΦh]CA^6i|8=Xr>!Gt{23oU$V ZL?쀏X{ "?|J3k Kq4`A5cŨ)CͤBy:LfdƇ1]d1ȅ}/fiFux&FB}\M.JUV~cgZ՗7%JzSf+OT07,d0`H661YƫXey%9 TvYo\h=M_51\b?ӁҒZ]oDyni7 #oGbv ~!%azGMpTXC Gt}"dܠ44J5cF+%Ò;5F'ZAqY&KFlgl0aQޣXP :sr>:XI!!ǒvx /s+_t up Ȍ5HKz&Bb@"" Dqm{Wo,5v^@o#:ϩ;V(\/i2+l3MS*b3` ͌0̐KK:÷r*0qfeɞvH_L[\G #J"ʹͩ&P.j97-:v0l?<2(cgu$)pl8Vᗚ-w?JgIV5~e47(hQjPa]&h.vQCf),JɌNKy4t aȢp]ts_<7:C΅ޏZJu!&r{U ͉X#^/9(~-1U쾋a\A7,9nJ}Zۖd?`V.s~s?A~%lʎU߷|y]0sXsٓ"k{ol*Eq@{m. BDyx2Cd*xڴei]& .s:ct$9lU9X^nIyHq, 2%htKv /l,~ BմdrV cCeMeqG} '` 4;Sp _Elk'3!J 8)&7,ьwx, ]~5Xh#?w`}#qeV1le>X."5.In ð_ ֚F̠osaֵ"7$^B8)90^b$"fMJ眰@kO/ >ԧnP &1jC g_Sm:>S-Cn8{{!?JNcPiTMTkD0+˯hZkm)_$5KmsƤ e*JYlfd qvᑖ.BqK|>ve&:KBP^\P4FQy{+{XdJɂ>3/Rjht-@ zC*>g@j3))A\RYrDPPm'2<6_ (T,|0.`ZT`Q,^.ʙyxa% Ue?otDgf$^:;~=k/J)gϸl8Rئ>*b+(aF&R0BwG˴r-xiG3m1Zׄ"(a ts>Å\%͟ "^!r+'KQFmU>\ZfB2teK YtY];prVbS5O+xwц Z= ̤-Ym:&T23wL$D%ZmSٵ,{Tll&H0 g VFqXz@FdB;AD&;'A˰ Rf) EIFo*++ZZSCJ3y͗c'|;RZ]Y{{ޙw+ 8{4%6-xP{B-/uvޛ;7!~1>H[D ?@W~GP'{ 'Z^m5Dr&AV#% &6vqjfřw.?X=oZk6Q^*kٟn$D*t҈C)j$s3>s֔CU)]:`v;:-*B`ʆ oBo@CZn8uvg{Y33R(QiTHu]W᨜* Qd7H~</tQq#@GO#;ytx$*}XY=̙t[ЁxJX" Xp^Fyd0=942AW%21͢j9-.<(+Rw"(9'0f⻵؛wX,dA $~o*ᚌ#0|qN8p'J!~[Tg>H^Ni:|yijڧL4>eylhIeNK2`I]:{#yTQx7S#42Rzgnb^vw@ڦur~j{-ՊVjDX79@ZJ>rФ𪹠rSR/==d4(2N za@>DBێЄѭef# c\RwR(m֒h?SgZ  u. ⥫"lwWoԎ5 t^Oᵛz` 'KX- {b-}-N#//&G3Q$Vvd+);fÏ :/)õ̷B'Aזf{d|R fv^bؚ#~[T>_V>;$Ty#˟e;hN z|sn[ FJ"I.X 6cD*_!B-\( &!$uMREÇhȶĻp\Y@VuKrRg]2%@) 0}]ZxȑvOVhQC/](ihG_ar/P?ݞG,շ4=8}xPMQuKӍݹX![&D x|trPP`&aF*%^\wZqdp(D-c;[=ٔ#lp܇1`8䔞w}PyPDҸcle&ek30;HA#|eK\{N]>7 ?O9 B"g>ǷdC*C*hm%QgQ-;f_J1OQTIkMbUx¼q #Tu#WsE'{gA9^a3G7'MU.mjyb?i109oA*"sљq@dJ%n Jm|xVnš{CzSl$T'Ex ZV 2sD.o{/s?('OC*$vt>HhS#oM;7.@tL=WVb̀Q>'LdM~uFOAf$ߎ1O nZ(uy,d^FbzrgOImT=!'ѻ:1:]КHGk-nd^?zk[\EGVi" ́Z`q[7%񄇬J 9Fj>(qRW@L]ʭFAž 8T[ŴY^J*ib.DM6@H@ _Xak1"GUEi}eg&r-8Y[ (?Z)G;L=Xs0F` ;<2E9~|9œPf0*c,7w+cY/z"_*~ޞ1a̭(ƥE쒻6èuĬL;f &#BԊ܅fe!.pʍN;F& Hv07k^8%|~z0bܱi1\bշܛ: dI+ye(Jiq-ru^uQTQpV( MPiQ:pUl[#n@'N) 3G R %LY|8UpT~vLS/ ۙ 0}Gvf@@+Z]QA je~-=˒)pزXy?;YAR8=߃&Blu@V\҆ =B$ Q=<%3- yzT DME+)ѐLWJ󃓳97Ev]N-cMNhd>[W"@Nߑii^}ew"N1e *9Z|`вjB^DLXGG셭ǜhvdR^QN4˨C\EK-O9nRwӭ܊u""!2[F|bu.ZCEShzmUg:b#l>0vQ2yܨ3'0rxO r+s$~wHpmЪz'0h`(Y;Xc6'Otl4msYڤ:.kL9Dpsr<8OF ?` X/ :_HΌjBtekԇH0Bc]c%m5t5ʯwf2Đ.8X}@;|9K5ζ+qBvjAiQl?_.!}p_5DFvwDUq-?b[%:$. WS^:M )[8N'+]^P_ йG21ыa&e福F7/{O$mTp"*GORՃjY2J]̹,G[iW❵yEU|LVwuMui$32PMw@'MFܕ)%F 1praw"~ ʳ0tF%|G5jcs$-7CT[V+r%g TQբv(08a48 VL'h88:Qʻ4ዲT9< f,^/zɕupLT)"ZHX`~e" 5eyEo1wm0{Ecze }cßݞΉ3', 37:}0}@ƑpW~,<@YܕՀrCKny4vnhk A]I`WF3[րD l0 u ɱ981BH|9Ee4k,09 &^!%|{fDƪ)r]PXk: Ns4 Rk[XW4^g di3mcê ΰԤzeO);K_ch)t\4A$(݁EVЧN.J捃CG%@;wa{[ f1זkra":F1xkm9;<)u͝ΑYB*'Pkk0k6GF|q'km6unv$i7WQGUS,HS"Y#@"=MTE3 T%̯ӬZmH#O3ߕ(XaOX T~RBۚyԨrr9](=]:nJo\Gwn/ 2AI.@{=λ3~`]Rpb\*MǻA7HfkzMjUSeqcuOg(`F$M[ng\?ep";zeͪƿ9<hIIIYOfS†d Hy4)s[zo0ddC)x_p[p緇 a0uPU8ߖ"=\Y*Qrf -Dpz7.Kp#!b fw%otXMShQkY l5!`Bry3S0u=J:zBPuBMh&cab1tx-,U(*!n? 2&:kmy,hAnhI_^?͎wF"fh iNtlop'% Pb "BI JE{7@GYNYffHg3SA)ǜط>F̃o֜wb DM i(s]4gIה(oz淖{d.`>!KL刓9zYNu\[;f c9f#cxlsCتxjHRR`ɞ*f]+r|>I|O8;}\kjjF3 ixqICISjQ#+dRNjVMF(gs y64-Oط&AyĤDM=R40eTe!x8WNss9W=&qW>,3f{@1O)Kt62V^ticD#ЅY5G]ٺ4<C'#H_#6G'wc꫘Ks=A%۷}UPkfƱ"d 'ʧ8No0Om)+V-HuSXs+廹@kӊj &Ax(H[Fʗe{ î06V;41OR1s*_M m pl"D$/g8ҵ,g_i21tuAY_HQ\?(]ʰýǩi@tIG|M9[ ٟNә{F:a5Mc…>wu4O͔63MPC*˯ǔsVDŕ\۾"G-# n dͳi?5[v1? TtTlQͥ4}!Kqb+X0Uht97Oeqv^2'O_t 7 c=ӻ,,8lihPlx Jzٰ.NbK!5b܊$lR~>+2^qZt4 K1Z_qXد g@B.JEͰkq]"N>; q:⬫Z;#W1D0׸@uq^jO?(T)c|Dbiw2 *K9Nm8GQ۾E1[7`T1U>%2ї!0T )qٔ*RUN ABH?Q25^TX&8LpFdz8S95;svɷIW=5gvR+LfCF L+0cIY@[Lr6j\2Ǣ0~PyA -ySƍ"#Ǐs"Vn_+bA_[$rgxgd'IWbn"1Eg*f`cvv1.hlD]q),X7bHZ!z{ް])6Bm`@=ʹG)7^;i0RE,^tU=Fk,2Kp{~6&+J=ٍd3jprdH<1ll6\nv[<_z >1)BLj$I1ܹ#AgCyt2jCHl'm7XgCݝ>74P˙ 4;bZ% ? 5)0<3A(3YgBAwE䙷8V-&8~2w\K@ۅ|#Qx6$|.Xߤ8_+Ȕ)lrxźtﰊ`e  #`-WlY[HZ{Z)PHyY*P_ZaC% tlJFly~18;ܳP.j-#rC_++f^9宖2@ ns V[tMᚪcK+M;B01Xd?<&sBx6[f\ĠKOy̝#7Wxt jM uE~bhGӔ ٷ-nS'ՔA+KBF j>YzMXvl pϤ[IqIUbof;#A:=;eܴNq]d2[RY8V: 'E9Z3Re~!|`G؈WUM#N)I-#HVZJ˵p%{ IO]os[?-Fqk3<0{P΄uN9a.Jj&zDX8Y ('\/ +7Wr~]gN0pT9 A^?5z=5pU B{o L,;@O4%Z 'I(vi ŴB%Q@t9F~:75O(۲%/}h!l~iqgch`.6LJδ"eج E]վuL;뽀eA?| r)bNboo%PeֵF u%bƉƴS^"ax[fJPI^ "_l:=hDJ[}[L{)oK&3D |'@|[Ѫ~\H*}y.{=ߎ#9_GVU<Sq6u0BN yp4•Wpc, ;;n^HVD )*jZ%ڂ T=~5RUm ¿yE&{|t.j&̍P5%Z,1iuxB5 !PUT}.1f7'΅)*A mOIK2oP|哓 v:J?桇fY󃔻LAAW ,9ݤɻprXbK yy5-R3ڍo*^tF$!=k8(EhpoԄz l Q(Gf(^fn[ *l| qDv3#NJNb:l@<'Sap8`ӎIRik r3N 5XLle1ޱq Hq,e םCq&=j@4]rp^S`2 ^gPbK_XF<\_w ,oe?ϐuv^g97s Pn9]utGz9w5rk(wڹTD7Lh\N tT8 ˗7z_,7?~.ٕPfgK"gB "C\(\:dG^j`.Sfl-Z00Tʵ- ; jLGd 96٧reNE70&S>+`-ثקBDi@ւ] ]W[g~QWߑ `Qgw3GLZz"t5˴~׺YN(MYwsc\>/%֊ɛ?[8^!7*Ҵ5&2fhV :dqL_dCZ3lpQЏ?K;7asG" _) OD/¹,9u}l[`P$?u5='E̐${ Ct&,ֱDr"|~xo4WB6V1駃h-@Y"vZ$|\IÄSpyuOhIa~ᶭ4)CNJꞧT_סJ&ج3p„H?:.' M4aM3-G$`BfL'S:2 u3)B6/$7H pr~JԷv#7?LkOGN>yItTGㅿ+2@֨0qv.S:ZgY0&pK>ĚԆ6I4VOںqqxq?z ATt!ea[MX&÷qWIP%iP/5v[q\a:@W'=aנW[1Yg g< Qli{ji\Ո Oj_tm_y憴 ^Z7Y+H QJ>/"`CS ~iFb*]r? {)!<<QND\3>5QݹCC}%j"~0Y'Oiء-j"Vʳ;o\eIMa,ﭳ>dEl3$c('rh.W.2CD>K8T 1Ab˔dA |qZEEEϲL(ɁL8*~Q -׭Šf;"cبWev z4)v+G\nֿ#dZ _ hgƪ~d<\'cASjފ%U3gݩ{l[8sHNxoDpaҁ";Ho5t99{@4M S8,m6Hw1zGC9/VΞ}]_B}ÔcTڄ'_Qه#, ȥ@-:˘>%w#ҜC܍ߤĐ+rXL2c<nU)wh_H)~ S\^:ז󜈢椫L[W=5TVJhgVS SJVFU΍y4>y m*H灀X rHd݊<TgS$#KiE*m GAXKS5P=L3W|h!Jn\'kDYŨ¼xM6JhAgȫIQ]jiwշ'CI^kxs.ĉ- 'nnkXWsz@3j,%haj;FǾ,aL5϶&ޥӨ Doԫawq  :RAdpNz#v#<./#| gFxסYBWuf Vnotur~FomIh07]}t?^Pzȴ^RJp%I0XĻpΖҙiu\\P3(cj9$0##`KoBC 5|.k4&h箜>`v`3}'noYOe6kEIS7o}I%olɦB7v`+9Se:`q!ʾ4b8}e@0Xs%'CiӴ+W Y Ȇ;J#}Ahx[ID2RYƕ}ݒ.m:j<, =!YUHgbP o-v0_%7_ւ#Ts#%Jlg'3߆JP#(2NA JXVLόh5wg~A26dݫ< NswuCD9j C_p QL |.t9__MIa"Vs"V& a"oW6Z45ꬢ2N+rQ/hbpBKYA'p<+}bҩsj>`z^TTXY{g~E_v#.SSd@ktFf>/=+KUb5FvO'ݔ?ը! +SyMP>F-sIaV>m!$FW)iQV0OVՙX5hC8Z5Qp#3YEVnXŮ7[}Bwp#U۷|[ Xd/m? p˶ \OH0};@zdI>Mt8^2@ֶ k)(-IYOҾlzH!EGnee%XAkjW,ɂ7eQD~1e-[WםI6V?cRNC4&EGVއPU)WK]LFR:>}AVlvYn sgDxϫz%YXL_a m~+%n=bGrȯ1gåG$ Q7QlYsi>sWZ=Q[?n-61mX(02N/Ry D\ۆT&\a^) >%}놾FNKΗ;[ܟp%G)_/ W7Õa< ;SbKJ5XPĉݟ|F?CQ\QV!˜ס/X5s!ڈ ͼʫ漕rZQ{5k O}{i*J 1!%/9jtnk%ZBVkgQ|*鬤=4+,QI$Y'dʉ(@B 1_/ =G21HeP.d\Gh1V^OvR[m!-DK'P} W)}N»f Ξ(DѝE :Li[E1Osh+xtY59f*rA&0 ND_s#3R$mfX*bXuQK]cUlp !S-{xU&:t*z0ޏ*PZT@-:L}>%aR<(xqk*\M 8$ }v fS5Ñ%޶YS{;8q/k )z8bYܰx99'=g($/{rʢWeE+Qq ݗ88TybI_AcBo q( wA)2%^ҽ>xfATA+ O,.W r7~"kM3j IIHd0rwD¡SrQtRa-!pc\h= p>c]ѻS6z_сtZ݉A;‰Z5fL:jpA¶jBy';Pn]CDyA>ra$Qy1XqApf)D!DQ%旟r_1G+q$NЖD=P]7Y%MdH0PXP% zh1SAb`ѵ(mqe*=n3 lQv@=^SfXtp(? -.ol Y&MrڢD;V1hf) S}]c3i(:Žrj!r(عNSNrGB H+{ ,Ue}5V&-0.hGDo:nQIP܂.D|5ͧ<"lS b螭ǁ2x&d8AJ3w;Vaa^Xt66/6*L+\TAxʼČ N\*ދQ1>45XVe_=g1X$p&MYX:,w/e_4[!9L]q `d/uP X_i[8rߋ0&S5y@UEǦ#9 a3E#:k; 6T\fi: F]7YaPUmh:wG c7O;}O `Z,u,M;g H!;Mv~Ulڢ'J%O |#p9N&%^ 殿Y*oq2 jQR;Jf ]pѭMzO_-b;es.liWVTA*Fy n #μhmiY`=.2qu cy!#hv_[Hlx(Ԁt-͔AWKjf J-׃"p=-w;l T r&׵s $>n`j"aܩZP"4q# /oxwko#:Ze9;v+}qbCC'n1%V N֔'8쁘%d)G)k(l0M~ BN&$@moZ nOFAw-KWP6TO~~kLs7hf'47!8=ya`;ݸn55!8.0[v4^dhBZ.ͷ-cE+ xr ^eȪJRvrjd6}nTV2Q%?2f8!M0W*+y"5|zK9I T,XCskG4`BLC^k+b(^p*+%YnG5ʋʞ eeIn,ASX2-y7%L'xp|kNl<%4ۇȵ@ {ve߆굒<'blI· '̇T"ܿ0VP4d/TnR-I*Z] n 2Kc0aeK+ 4?d'<69 &[D 6{[|Q|*^h("%k]_X&oæi("LJ$/2 4 s/f ]ߺ9_$`좺*XYi_JknI4 TJ! 3􃡑u,EGŐ%=EϳNM&n]cR1JdH+1ƿ)BDϺ_C6խ+C0:w~J nsIdƥU;b(D0,=I"`޾ϙurK/w }$4. v"p~-:IK?+.Gqs͸&Kbpw/"Uån%}-M9nIx&HSPTЃM&z Q`Eu9^1\)tTjT"$[ J5rj”)LxcmHȧA]eABF){Qcr^PxP$l ӕ]eT,T)I4txH!3P"T*~cTatsJ.pBQ48t' ׇҳJ4.~U!T*_ukc`3:9Q.Lw)}3rS&S'™f2 ;ԕ}%=%3FM)ܦ-RSgy[8?qVeU)$Գ4_SY'F3܇`+ JםX+sҳsfT`Z{ͦ[z=OX6mYe;N{4!0}R1 & j!~ӚD3V1gJ]لuݼgBSsH5H[;,b7oڻZ9Q@VoRc`E^qW>nr-," HiLmjSheכb"nX}郫?*7iتubt7uW~;S{X 4„GGg. 2Xi?VŁRW(^Xqn 1;Ƌ)d׶zHA|ÏO_Lj}3!Wl!9}dxi:ik]ʕv=l!TPX>_}0ov] 8R8NV4|zƾoG ))Y^nLK>v))"F/Mw DA#AZ_<(WQ9JWi.<`n+>02%.yS!u)Aor7v!J׺~ ЍD֒8tY]r~ᴿq0L~ ^z֨5yɹ+h7\Pn6FOxpumY塧|'˯iBP%–&.s-JC iUJ3^'1|W;&nw;p )E+##yq^f_@c4^;dP'RH=5vH"HUt Zo6-_oc(4B ;!hl᧲߈EЉUk8r=v`*:ka:G*b}mym FF<&̂ 4Ι:&^'-Ru%LU'\V+NF:an.;+4aP#q]":KmM%Ahl!lwE&>a' @=ۉuurn(pBSl r`uoN\h(I;TbN\tfr/ 4smK[fSTQn`z &>@hڲV3fC$DyyqUL:%+X.MBS¢˝ P/{XRmvԸ7-;-Q+)NN Se@dq9j [ r:@ c dH2 vʴ.)o&vGg*IF?Vճ_xrsu.J\CF@vcC\D튻>Hr &T3Ahh@W֛g.ƝĢԉpV 'Q0}>bQEK[.U+ @cV%_]Sl噞5:tG<.4TlJX=wdAjG>r[ٴ^p h0 FŎնV=z/ty;h88fv#6Lu/^ mʻWJ՝&-f{'w~qg87yH_WX$=}$Ł`$-QgU 8#SUXр+s_ZMtP疦޷:EjRB蛐A~A(4;!ڿHL-vnwӠTg*7)`"HUM \npDxmNYy"JEiz6fP8F:UВ$kk()T,Sd+t_n( {Uiח03j~$DCe廬1?3 I̙&LIV2Qqu ԃuTqh+:1r\,b CI^&@bL⬵ByAb <~h#%`-{ܗg6ۍ_6 Fv8nM0vcNG#teZ@DΪޛ^Fo^le/LAӶE{, m@j]Δ~IN”J*W&?e (M%y3u~>l7Ӣrk,^wotoƷp8$ұ ">dBɾ+5 {BEϘP!J?.>@^~O*A7%ʑ<akDlBXSuwg+QWSн%~ϺPASun^9x>2_ޅRHlٓǪ.~0:CjW/@CnV=obL#Uc xTw ݹZ}ݭI=՛gH!WāY{س&E=Z#` tg?M#YH 6͸}{%7) -LPFP*km Ȭnw]YVN~LDh97&z5G#zxmȝzJXRUL|X v3KthB@"Բp2ZbU[$hDo<\vZhX 4:lc ' Y⫍aC2$°js1#StC/IKU]ؖ Us!c>Ws~8"%\ 2ckc|b+@b3z](gsa'ȯ%%]CBbb/hNNLz# ȜU_jۡŸQh, HRxۈx͸7FBn6`;ZMj f,W;O cTen؈KcMF13/i)im7V,!`;KPdK'~ձT,*XŊԚZ,'2$0ٌ#e}luT.`z`&đ<\z } }$&zH" j2SoVC,/GI׾eZxj]J{W)QD\AfP vYd? [uu!DnwL ~H NN\s9`q6皽vY= 2Q.T~5ynZWO`VeIj4B~]47 \%- }fお_1{MWwz֭Ua*4/jgL?N`iUvN9#[L tܰo: ;w`'C(>o]rj> 7C F9!!9Qy-nltwպ,!(K d"ϑHL0: KљMℴtt.HPI4nH?sX'-PLlU-4vVc-C@lOMp39>"Z֏iވIxKhy}?w| Jթ]4:6A6cl>v-s/a}It?}Z%^ޏ5 ̜yO2V| fĴjX9l{zi9ϟaEqO@BR)K+<:c @/I)+F O^nu +&yJb:~Ζ![*-#`+w048r!" .[=⺪; |(t#=&6#fdoP>2Ve:I]3䃫g#aԩq&5>QUzp*}FɏK-8.r̃e @n0olɜ{ȱZ%dU%Y5Q~6uDK{$g ݝJ~{H A8iF1k!_oWU=H[00B=L*vk P޵KfK֮OQDIWSOaS/Y^|5#Z N; fC׾:`v+e hj&$]3?:\\7>WkۛvUc&i}6VlaB ꗕ֓GjeZ7`4Yp633}4qQy#jpÙ ĮV{uE3n SoP^/ 8mGoEHaݖ ͨhu\13ƭ#4(b0ꥱU!qkTٹ@ *2t$kIewʃ5.g%/Rݖ\ aސi5#gI$q%M"z1 ӳ9h sp[4gOt B* 2k?c :xLyg5 .:s̷?vFyS0%gɾ!N-n@qŕ 3H XVPm)_ Kf3<\e}wA8k PU)l1V""Hci\t9QeЫpL@Xf( S(-83em"-Pʟm5ŨV#Y`FnSu pԭh2M"J\9\K'_ߡqѴOcɱDHE`pC=n->sAmLb\BA^&2.Nyq Go'b v VwWYjܦڝ8(y(Su/OBl'\ҞK!+gߑO~mwy|8E'5iokG<2q{>.wI,:Puw?s7KjVepP{IH`e8]}_V#?d,(SN ?pj_n. ׾#mXn)n"IIQXӑ(H?9LCQK $ܭ<7sPIڜ:e!WGj>J7l&@G{g6% /iy' 6^y!!Sae^=`tBIbf! *DdvmnS:Z<7aRc( Kv`n؏u s=l]1pDw<\}D)+J}dKȘd:/W!ҏO1~p{k,BD:I-X5J>!Z e&ZN>uTY{}H\8>&2؎$IlIXN==baRE4EUR&HzP/&q <1J W/e8Rꢴ!F^udБ!Lqkl޿Y.ZVx>4q`N FeˊhePkچA31(B_As8Z{_D Sy7c#;bہ7<8u vU"M/٤gB0D(E-\V\f vn0!/Z+Haưdqq5}ed^b7j%&ELX[p`2~&zM G`;%zR\L937ES$ztKsb#ώ ~??\IV;r} w0CshqYו+,tX{;ŋxl9pUϏN \*@A/IiDarTY3tqmqWfBN :g.]7!H{մTj݊rL#%ԛg)C %Y>y>V⻚`DP(9 H-%k,@aØC.DAu_RxƦݧ.lJ%G%[b:! 5dH`w˹C3-H?fZ"jCbgwZ6q?m5 8>yxӫN uYy ?EC}qTn/ $XVU<?n{7RAλ#M 2HLr@O#ǭFͱ+hRU]Ib]ͽA;>$}T[O b0 gNk9\,Vb!Pdc<@8k]dI˯4h$2{FBJ34r^#R#+"*0S|}RńPHv+27xHt΋˛gUXR42vs7 S=(*W~i}rd4鷖4H8}&L_q#ӷ,({8 P#dmUzq La;azܙ䡞& X2 '1z6&Ej[|Y s3_J- yik 8ڳcm*+M3Y2??u9  vIL.U~ȗW+:j;S nN3IާioT{P^0Gύbbj I ^B)9KΎlQ; zWI.z/USןl#2 ӹ\&+ǹNs% R#g|V5>>gg(W:_ nW'aڱS*+8= ?*|0 v:J3a' gBk*/*ՅDZBeZ-M4Sژ#x 59]txYa @nM]WsZ sV|(FU:i>$H?8gy!3WG_Q|! Rz}'/-ip1.;ädE)8bָF8Hr7KϸWT$UMBNg$Iwf# nG+5y5G2v1>Z^K߫]?ClB\Ab !d.$.kpk]2+T> Ц O%h3bTT0v@AYKr9loD),CcDf֒1HzuП#(MyaD^2]e$*~Vyg7_ԥ_ța`M;m:nbgLӯ&l%hk \%mf`SM}/ DUL]ڰB^NOW|WSBRd Q ׶z=Zٰ`._NI]Wzsbz[޹&A@ :)yq'TA\drR6:9e ě|86w`HT`{BDp4֩qQAK݇XCcYd*R;N;|] ljRj%VZ5]Cfsϭn>4Ņ51?>CAHs-$S}j.RGG`=D^WeDCMnYUc*r1%ǤE<ܡL^, BGqD͘f oи50P0/aC ])ShOg9\1FE8s{`  gݻ|@2{PoM(ax?jyx>(El*uNkn'{|Nj2S"jMc5KOUFnow In2!{OKlp`ǚ)ahQjA˗20K:R$wK4d9]/fD(!7ƟXY\RcSQ?TH'Gk +*&)(Se%ZxOv7+#]:Y pi<ʮD\TbpfH]<#P i뻞f1ц=&p?*)7@3z&]U".i[ G~ԅm [K&W%9~~n7K*T| =K6d>3'}!ğK `,_< !!ֈs+SE~8~:1?-ĽnJvq ,G+/t܆|yZmȴ(?٨IcbqĖ!}D.iR_)*7B!kos"f٤6\L~ L(4X1:^5,iڬ+3UƧ_) EB2i p}Ӆ M Izd幂n4]ITpӡ6.eWkA pз"_ nƣGlGfxݤX()N[ X6g4cYi:#3b.A0VOp2ƿ>+{PEV_낈Q*RŦVi^_;JQ"W.ͭkc5$sjC-c#= A XA%vRbCoѧVƃOņDb|+zk2Vˀ4N=ᣯs`(t~WqZIGO d`:w{)vǴZq~wc?B+Vrqv!ӹ*t';z~!Yn\Ph TsC($~84RԛmΜaDã=Z8 4_-omZD:+nuŏ f,wj$~?z|T7 <,V.qhR1*zVFs^F"0"U<=n|߁q6YBq Y)AԼ8q b [q#3U;(GmSpH.[bZ4Yy<ͩx=KOH^X#1] .]3qNFzȝh*o? ARIuERj}!3% c~ksv&X YKhMRYHk=u >>&=cgj_Sߏ<_˼Mс! 0d64CG.BKCDoU'%*$.+wa!aQ#)v0f/FQ!o4IF{|ʂ=d/q1v1ml `sJT Lj*{~2y. cC sȟ?;: 2:\uX>؂x$mH>ѵ}`iBX y3躱kEi'N펝s? T Ҋ y_Avu2UA4Lx}ك%Ґ#OWq /e6]C_ &fJT-"~pC "N- LLF,4VwɈ?U1.eđ ] Zz ԥfMo]ߪ-˨r ~Mc%50nQ|u u}c^e<|C+ k?*q,c =NX@.cZnxǝ2.;.$N!CHʨۺ|-[>hG/qRq剖oxXh 4y*@<:B',4 ?%oK~DLN{unY TN yxGZחOU)FD_zW$(w 1T0a+&~O jjQ[$gRB|06]zlH9[A?<k+Ȃu#zԔÃh4$u1<`Y 厾OuAlcY+Y&ǡW`O\de2u8ui˥)y%}-ʇAy#uEIC-Ifv$t HjbQ)N YZ