replace-libgcrypt-crc.patch
olpc_prefix_hack.patch
core_in_fs.patch
dpkg_version_comparison.patch
grub_legacy_0_based_partitions.patch
disable_floppies.patch
grub.cfg_400.patch
gfxpayload_keep_default.patch
install_stage2_confusion.patch
mkrescue_efi_modules.patch
mkconfig_loopback.patch
restore_mkdevicemap.patch
gettext_quiet.patch
mkconfig_mid_upgrade.patch
install_efi_fallback.patch
mkconfig_ubuntu_recovery.patch
install_locale_langpack.patch
mkconfig_nonexistent_loopback.patch
no_insmod_on_sb.patch
default_grub_d.patch
blacklist_1440x900x32.patch
uefi_firmware_setup.patch
mkconfig_ubuntu_distributor.patch
linuxefi.patch
linuxefi_debug.patch
linuxefi_require_shim.patch
linuxefi_non_sb_fallback.patch
mkconfig_signed_kernel.patch
install_signed.patch
sleep_shift.patch
wubi_no_windows.patch
maybe_quiet.patch
install_efi_ubuntu_flavours.patch
quick_boot.patch
gfxpayload_dynamic.patch
vt_handoff.patch
probe_fusionio.patch
ignore_grub_func_test_failures.patch
mkconfig_recovery_title.patch
skip_gettext_strings_test.patch
install_powerpc_machtypes.patch
ieee1275-clear-reset.patch
ppc64el-disable-vsx.patch
grub-install-pvxen-paths.patch
insmod-xzio-and-lzopio-on-xen.patch
grub-install-extra-removable.patch
mkconfig_other_inits.patch
syslinux-test-out-of-tree.patch
zpool_full_device_name.patch
misc-fix-invalid-char-strtol.patch
net_read_bracketed_ipv6_addr.patch
bootp_new_net_bootp6_command.patch
efinet_uefi_ipv6_pxe_support.patch
bootp_process_dhcpack_http_boot.patch
efinet_set_network_from_uefi_devpath.patch
efinet_set_dns_from_uefi_proto.patch
grub-install-efibootmgr-check.patch
ext4_feature_encrypt.patch
tsc_efi_default_to_pmtimer.patch
freetype-capitalise-variables.patch
freetype-pkg-config.patch
fix-yylex-build.patch
sparc64-support.patch
printf-unit-test-gcc7.patch
xen-multiboot2.patch
linuxefi_disable_sb_fallback.patch
fix_lockdown.patch
tests-disable-sercon-in-seabios.patch
tests-fix-uhci-qemu-options.patch
R_X86_64_PLT32.patch
skip-grub_cmd_set_date.patch
add_ext_lfb_base_support.patch
zfs-root-dataset.patch
bash-completion-drop-have-checks.patch
efi-refactor-grub_efi_allocate_pages.patch
efi-remove-grub_efi_allocate_pages.patch
efi-move-fdt-helper-library.patch
efi-add-GRUB_PE32_MAGIC-definition.patch
arm64-linux-loader-improve-type-portability.patch
efi-change-heap-allocation-type.patch
arm64-efi-move-EFI_PAGE-definitions.patch
linux-h-guards.patch
GRUB_LINUX_MAGIC_SIGNATURE-arch-specific.patch
i386-linux_kernel_header-arch-specific.patch
arm64-align-linux_kernel_header-with-i386.patch
arm64-align-linux-magic-macro-with-i386.patch
arm-switch-linux-loader-to-linux_arm_kernel_header.patch
arm-linux-h-safe-for-non-native.patch
file-definitions-from-arm-linux-h.patch
file-definitions-from-arm64-linux-h.patch
efi-add-central-copy-of-grub_efi_find_mmap_size.patch
efi-add-grub_efi_get_ram_base-for-arm64.patch
arm64-linux-loader-renames.patch
arm-efi-switch-to-arm64-linux-loader.patch
arm-delete-unused-efi-support-from-loader-arm.patch
efi-restrict-arm-arm64-linux-loader-initrd-placement.patch
fdt-move-prop_entry_size-to-fdt-h.patch
efi-fdt-set-address-size-cells-to-2-for-empty-tree.patch
linuxefi-update-to-new-interfaces.patch
gcc-8-packed-not-aligned.patch
linuxefi-skip-validation-without-secure-boot.patch
efi-fdt-do-not-copy-random-memory.patch
xen-pvh-add-headers.patch
xen-pvh-rsdp-boot-params.patch
xen-pvh-refactor-grant-tab-init.patch
xen-pvh-prepare-common-code.patch
xen-pvh-add-dummy-headers.patch
xen-pvh-rearrange-init.patch
xen-pvh-ptr2mfn.patch
xen-pvh-offsets.patch
xen-pvh-basic-hooks.patch
xen-pvh-boot-entry.patch
xen-pvh-setup-hypercall-page.patch
xen-pvh-get-memory-map.patch
xen-pvh-setup-data.patch
xen-pvh-init-memory-regions.patch
xen-pvh-build.patch
xen-pvh-module-verifier.patch
xen-pvh-elfnote-defines.patch
xen-pvh-mkimage.patch
xen-pvh-install.patch
xen-pvh-configure.patch
mkimage_arm-efi_Use_EFI32_HEADER_SIZE.patch
mkimage_Align_efi_sections_on_4k_boundary.patch
mkimage_clarify_file_alignment_efi.patch
at-keyboard-module-init.patch
sparc64-aout-fix.patch
uefi-secure-boot-cryptomount.patch
arm64-fix-grub_efi_get_ram_base.patch
grub-install-arm-default-target.patch
install_efi_fallback_arm.patch
freebsd-ebr-partition-offset.patch
util-check-errors.patch
xfs-sparse-inodes.patch
vsnprintf-upper-case-hex.patch
efi-variable-storage-minimise-writes.patch
arm-move-trampolines-into-code-section.patch
arm-align-section-alignment-with-manual-reloc-offset.patch
no-devicetree-if-secure-boot.patch
grub-install-removable-shim.patch
CVE-2020-10713.patch
safe-alloc-1.patch
safe-alloc-2.patch
safe-alloc-3.patch
safe-alloc-4.patch
iso9660-realloc-leak.patch
font-name-leak.patch
gfxmenu-load-image-double-free.patch
xnu-double-free.patch
lzma-overflow.patch
term-overflow.patch
udf-leak.patch
tftp-no-priority-queue.patch
relocator-chunk-addr-overflow.patch
relocator-chunk-align-underflow.patch
script-remove-unused-fields.patch
script-use-after-free.patch
relocator-chunk-align-fix-top.patch
hfsplus-overflow.patch
lvm-overflow.patch
emu-free-null.patch
efi-malformed-device-path.patch
safe-alloc-5.patch
linux-loader-overflow.patch
linux-initrd-overflow.patch
efilinux-overflow.patch
bootp-alloc.patch
unix-config-overflow.patch
deviceiter-overflow.patch
efi-malformed-device-path-2.patch
exec-avoid-atexit-when-child-exits.patch
grub-install-backup-and-restore.patch
2021-02-security/001-kern-Add-lockdown-support.patch
2021-02-security/002-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-down.patch
2021-02-security/003-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-enabled.patch
2021-02-security/004-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-disabled-modules-list.patch
2021-02-security/005-acpi-Don-t-register-the-acpi-command-when-locked-down.patch
2021-02-security/006-mmap-Don-t-register-cutmem-and-badram-commands-when-lockdown-is-enforced.patch
2021-02-security/007-commands-Restrict-commands-that-can-load-BIOS-or-DT-blobs-when-locked-down.patch
2021-02-security/008-commands-setpci-Restrict-setpci-command-when-locked-down.patch
2021-02-security/009-commands-hdparm-Restrict-hdparm-command-when-locked-down.patch
2021-02-security/010-gdb-Restrict-GDB-access-when-locked-down.patch
2021-02-security/011-loader-xnu-Don-t-allow-loading-extension-and-packages-when-locked-down.patch
2021-02-security/012-docs-Document-the-cutmem-command.patch
2021-02-security/013-dl-Only-allow-unloading-modules-that-are-not-dependencies.patch
2021-02-security/014-usb-Avoid-possible-out-of-bound-accesses-caused-by-malicious-devices.patch
2021-02-security/015-mmap-Fix-memory-leak-when-iterating-over-mapped-memory.patch
2021-02-security/016-net-net-Fix-possible-dereference-to-of-a-NULL-pointer.patch
2021-02-security/017-net-tftp-Fix-dangling-memory-pointer.patch
2021-02-security/018-kern-parser-Fix-resource-leak-if-argc-0.patch
2021-02-security/019-kern-efi-Fix-memory-leak-on-failure.patch
2021-02-security/020-kern-efi-mm-Fix-possible-NULL-pointer-dereference.patch
2021-02-security/021-gnulib-regexec-Resolve-unused-variable.patch
2021-02-security/022-gnulib-regcomp-Fix-uninitialized-token-structure.patch
2021-02-security/023-gnulib-argp-help-Fix-dereference-of-a-possibly-NULL-state.patch
2021-02-security/024-gnulib-regexec-Fix-possible-null-dereference.patch
2021-02-security/025-gnulib-regcomp-Fix-uninitialized-re_token.patch
2021-02-security/026-io-lzopio-Resolve-unnecessary-self-assignment-errors.patch
2021-02-security/027-kern-partition-Check-for-NULL-before-dereferencing-input-string.patch
2021-02-security/028-disk-ldm-Make-sure-comp-data-is-freed-before-exiting-from-make_vg.patch
2021-02-security/029-disk-ldm-If-failed-then-free-vg-variable-too.patch
2021-02-security/030-disk-ldm-Fix-memory-leak-on-uninserted-lv-references.patch
2021-02-security/031-disk-cryptodisk-Fix-potential-integer-overflow.patch
2021-02-security/032-hfsplus-Check-that-the-volume-name-length-is-valid.patch
2021-02-security/033-zfs-Fix-possible-negative-shift-operation.patch
2021-02-security/034-zfs-Fix-resource-leaks-while-constructing-path.patch
2021-02-security/035-zfs-Fix-possible-integer-overflows.patch
2021-02-security/036-zfsinfo-Correct-a-check-for-error-allocating-memory.patch
2021-02-security/037-affs-Fix-memory-leaks.patch
2021-02-security/038-libgcrypt-mpi-Fix-possible-unintended-sign-extension.patch
2021-02-security/039-libgcrypt-mpi-Fix-possible-NULL-dereference.patch
2021-02-security/040-syslinux-Fix-memory-leak-while-parsing.patch
2021-02-security/041-normal-completion-Fix-leaking-of-memory-when-processing-a-completion.patch
2021-02-security/042-commands-hashsum-Fix-a-memory-leak.patch
2021-02-security/043-video-efi_gop-Remove-unnecessary-return-value-of-grub_video_gop_fill_mode_info.patch
2021-02-security/044-video-fb-fbfill-Fix-potential-integer-overflow.patch
2021-02-security/045-video-fb-video_fb-Fix-multiple-integer-overflows.patch
2021-02-security/046-video-fb-video_fb-Fix-possible-integer-overflow.patch
2021-02-security/047-video-readers-jpeg-Test-for-an-invalid-next-marker-reference-from-a-jpeg-file.patch
2021-02-security/048-gfxmenu-gui_list-Remove-code-that-coverity-is-flagging-as-dead.patch
2021-02-security/049-loader-bsd-Check-for-NULL-arg-up-front.patch
2021-02-security/050-loader-xnu-Fix-memory-leak.patch
2021-02-security/051-loader-xnu-Free-driverkey-data-when-an-error-is-detected-in-grub_xnu_writetree_toheap.patch
2021-02-security/052-loader-xnu-Check-if-pointer-is-NULL-before-using-it.patch
2021-02-security/053-util-grub-install-Fix-NULL-pointer-dereferences.patch
2021-02-security/054-util-grub-editenv-Fix-incorrect-casting-of-a-signed-value.patch
2021-02-security/055-util-glue-efi-Fix-incorrect-use-of-a-possibly-negative-value.patch
2021-02-security/056-script-execute-Fix-NULL-dereference-in-grub_script_execute_cmdline.patch
2021-02-security/057-commands-ls-Require-device_name-is-not-NULL-before-printing.patch
2021-02-security/058-script-execute-Avoid-crash-when-using-outside-a-function-scope.patch
2021-02-security/059-lib-arg-Block-repeated-short-options-that-require-an-argument.patch
2021-02-security/060-script-execute-Don-t-crash-on-a-for-loop-with-no-items.patch
2021-02-security/061-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
2021-02-security/062-kern-misc-Always-set-end-in-grub_strtoull.patch
2021-02-security/063-video-readers-jpeg-Catch-files-with-unsupported-quantization-or-Huffman-tables.patch
2021-02-security/064-video-readers-jpeg-Catch-OOB-reads-writes-in-grub_jpeg_decode_du.patch
2021-02-security/065-video-readers-jpeg-Don-t-decode-data-before-start-of-stream.patch
2021-02-security/066-term-gfxterm-Don-t-set-up-a-font-with-glyphs-that-are-too-big.patch
2021-02-security/067-fs-fshelp-Catch-impermissibly-large-block-sizes-in-read-helper.patch
2021-02-security/068-fs-hfsplus-Don-t-fetch-a-key-beyond-the-end-of-the-node.patch
2021-02-security/069-fs-hfsplus-Don-t-use-uninitialized-data-on-corrupt-filesystems.patch
2021-02-security/070-fs-hfs-Disable-under-lockdown.patch
2021-02-security/071-fs-sfs-Fix-over-read-of-root-object-name.patch
2021-02-security/072-fs-jfs-Do-not-move-to-leaf-level-if-name-length-is-negative.patch
2021-02-security/073-fs-jfs-Limit-the-extents-that-getblk-can-consider.patch
2021-02-security/074-fs-jfs-Catch-infinite-recursion.patch
2021-02-security/075-fs-nilfs2-Reject-too-large-keys.patch
2021-02-security/076-fs-nilfs2-Don-t-search-children-if-provided-number-is-too-large.patch
2021-02-security/077-fs-nilfs2-Properly-bail-on-errors-in-grub_nilfs2_btree_node_lookup.patch
2021-02-security/078-io-gzio-Bail-if-gzio-tl-td-is-NULL.patch
2021-02-security/079-io-gzio-Add-init_dynamic_block-clean-up-if-unpacking-codes-fails.patch
2021-02-security/080-io-gzio-Catch-missing-values-in-huft_build-and-bail.patch
2021-02-security/081-io-gzio-Zero-gzio-tl-td-in-init_dynamic_block-if-huft_build-fails.patch
2021-02-security/082-disk-lvm-Don-t-go-beyond-the-end-of-the-data-we-read-from-disk.patch
2021-02-security/083-disk-lvm-Don-t-blast-past-the-end-of-the-circular-metadata-buffer.patch
2021-02-security/084-disk-lvm-Bail-on-missing-PV-list.patch
2021-02-security/085-disk-lvm-Do-not-crash-if-an-expected-string-is-not-found.patch
2021-02-security/086-disk-lvm-Do-not-overread-metadata.patch
2021-02-security/087-disk-lvm-Sanitize-rlocn-offset-to-prevent-wild-read.patch
2021-02-security/088-disk-lvm-Do-not-allow-a-LV-to-be-it-s-own-segment-s-node-s-LV.patch
2021-02-security/089-kern-parser-Fix-a-memory-leak.patch
2021-02-security/090-kern-parser-Introduce-process_char-helper.patch
2021-02-security/091-kern-parser-Introduce-terminate_arg-helper.patch
2021-02-security/092-kern-parser-Refactor-grub_parser_split_cmdline-cleanup.patch
2021-02-security/093-kern-buffer-Add-variable-sized-heap-buffer.patch
2021-02-security/094-kern-parser-Fix-a-stack-buffer-overflow.patch
2021-02-security/095-kern-efi-Add-initial-stack-protector-implementation.patch
2021-02-security/096-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
2021-02-security/097-util-mkimage-Use-grub_host_to_target32-instead-of-grub_cpu_to_le32.patch
2021-02-security/098-util-mkimage-Always-use-grub_host_to_target32-to-initialize-PE-stack-and-heap-stuff.patch
2021-02-security/099-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-set-up.patch
2021-02-security/100-util-mkimage-Reorder-PE-optional-header-fields-set-up.patch
2021-02-security/101-util-mkimage-Improve-data_size-value-calculation.patch
2021-02-security/102-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
2021-02-security/103-util-mkimage-Add-an-option-to-import-SBAT-metadata-into-a-.sbat-section.patch
2021-02-security/104-grub-install-common-Add-sbat-option.patch
2021-02-security/105-kern-misc-Split-parse_printf_args-into-format-parsing-and-va_list-handling.patch
2021-02-security/106-kern-misc-Add-STRING-type-for-internal-printf-format-handling.patch
2021-02-security/107-kern-misc-Add-function-to-check-printf-format-against-expected-format.patch
2021-02-security/108-gfxmenu-gui-Check-printf-format-in-the-gui_progress_bar-and-gui_label.patch
2021-02-security/109-kern-mm-Fix-grub_debug_calloc-compilation-error.patch
