File site/news/libreboot20241206rev10.md added (mode: 100644) (index 0000000..d22adc7) |
|
1 |
|
% Libreboot 20241206, 10th revision released! GRUB security fixes, better LVM scanning, non-root USB2 hub support |
|
2 |
|
% Leah Rowe |
|
3 |
|
% 6 January 2025 |
|
4 |
|
|
|
5 |
|
Today's Libreboot 20241206 revision is the 10th revision in the Libreboot |
|
6 |
|
20241206 stable release series. The changelog on this page is written, relative |
|
7 |
|
to Libreboot 20241206 revision 9 which was released on 12 February 2025. |
|
8 |
|
The *original* Libreboot 20241206 release came out on 6 December 2024. You |
|
9 |
|
can find the full list of revisions [here](libreboot20241206.Revisions.md) |
|
10 |
|
and the original release [here](libreboot20241206.md). |
|
11 |
|
|
|
12 |
|
Open source BIOS/UEFI firmware |
|
13 |
|
------------------------------ |
|
14 |
|
|
|
15 |
|
<img tabindex=1 class="r" src="https://av.libreboot.org/t480/t480.jpg" /><span class="f"><img src="https://av.libreboot.org/t480/t480.jpg" /></span> |
|
16 |
|
|
|
17 |
|
Libreboot is a free/open source BIOS/UEFI replacement on x86 and ARM, providing |
|
18 |
|
boot firmware that initialises the hardware in your computer, to then load an |
|
19 |
|
operating system (e.g. Linux/BSD). It is specifically |
|
20 |
|
a *[coreboot distribution](../docs/maintain/)*, |
|
21 |
|
in the same way that Debian is a Linux distribution. It provides an automated |
|
22 |
|
build system to produce coreboot ROM images with a variety of payloads such as |
|
23 |
|
GRUB or SeaBIOS, with regular well-tested releases to make coreboot as easy |
|
24 |
|
to use as possible for non-technical users. From a project management perspective, |
|
25 |
|
this works in *exactly* the same way as a Linux distro, providing a source-based |
|
26 |
|
package manager (called lbmk) which patches sources and compiles coreboot images. |
|
27 |
|
It makes use of [coreboot](https://www.coreboot.org/) for hardware initialisation, |
|
28 |
|
and then a payload such as [SeaBIOS](https://www.seabios.org/SeaBIOS) |
|
29 |
|
or [GRUB](https://www.gnu.org/software/grub/) to boot your operating |
|
30 |
|
system; on ARM(chromebooks), we provide *U-Boot* (as a coreboot payload). |
|
31 |
|
|
|
32 |
|
We also provide an experimental U-Boot setup on x86, as a coreboot payload for |
|
33 |
|
providing a minimal UEFI implementation. |
|
34 |
|
|
|
35 |
|
### Regarding revision 10 |
|
36 |
|
|
|
37 |
|
Normally, revisions would only be documented on |
|
38 |
|
the [Libreboot 20241206 revisions page](libreboot20241206.Revisions.md), but |
|
39 |
|
this revision contains *critical security fixes*, so it was decided that there |
|
40 |
|
should be a full announcement, to ensure that more people see it. |
|
41 |
|
|
|
42 |
|
Summarised list of changes |
|
43 |
|
------------------------ |
|
44 |
|
|
|
45 |
|
### Revision updates |
|
46 |
|
|
|
47 |
|
GRUB released *73 patches* to its main branch, fixing a large number of |
|
48 |
|
security issues. You can read about them here: |
|
49 |
|
|
|
50 |
|
<https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html> |
|
51 |
|
|
|
52 |
|
This updates GRUB to revision `4dc6166571645780c459dde2cdc1b001a5ec844c` |
|
53 |
|
from 18 February 2025. Several OOB heap writes, buffer overflows, use after |
|
54 |
|
frees and so on, are now prevented with this update. |
|
55 |
|
|
|
56 |
|
### Feature changes |
|
57 |
|
|
|
58 |
|
In addition to the security fixes, several out-of-tree fixes from Libreboot's |
|
59 |
|
main branch have been merged for GRUB, fixing bugs in the xHCI driver, and |
|
60 |
|
adding support for non-root USB2 hubs on platforms that use the `xhci` GRUB |
|
61 |
|
tree. |
|
62 |
|
|
|
63 |
|
### Configuration changes |
|
64 |
|
|
|
65 |
|
Changes to the GRUB configuration have been made, to make scanning of LVM |
|
66 |
|
volume/group names more reliable, including on full-disk-encryption setups. |
|
67 |
|
More such changes are planned for the next major release; the current changes |
|
68 |
|
are very minor. |