grub-2.16

[Bruce Dubbs]

New minor version.

It appears that the new version is at ​https://gitlab.freedesktop.org/api/v4/projects/26558/packages/generic/source-assets/grub-2.16/grub-2.16.tar.xz

I could find no announcement of a permanent change for grub releases. grub-2.14 and previous tarballs are still at ​https://ftpmirror.gnu.org/grub/. The home page at ​https://www.gnu.org/software/grub/ does not mention any location changes.

I did find from April: ​https://lore.freedesktop.org/grub-devel/CA+04=DYvy=PgVf8tx7n347ziKcuDvDcevsdVc2SLu3OGJ4AVtw@mail.gmail.com/T/#t

[Bruce Dubbs]

New (short version) in 2.16:

• libgcrypt 1.12.2.
• libtasn1 4.21.0.
• ML-DSA post-quantum signature support for appended signatures.
• Certificate revocation (dbx) checks for appended signatures.
• PKCS#7 signedAttrs verification and X.509 validity period checking.
• NVMe native disk support.
• NVMe over Fibre Channel and multiple NVMe boot paths on IEEE 1275.
• virtio-net driver.
• AMBA PL011 UART support.
• DHCPv6 support and network configuration from the UEFI device path.
• Argon2 password hashing for GRUB users and the grub-mkpasswd-argon2 utility.
• Access levels for authentication in grub-mkconfig.
• MFA key protector.
• TPCM (Trusted Platform Control Module) verifier on x86_64 EFI.
• New tpm_record_pcrs command exposing a TPM PCR snapshot to the OS.
• New efibootnext module and 31_efi_bootnext script for one-shot boot entries.
• New connectefi, lsefivar, btrfs-info, btrfs-list-subvols and btrfs-get-default-subvol commands.
• Downstream SBAT support and SBAT level validation in grub-mkimage.
• Serial port addresses restricted to firmware-described UARTs under lockdown.
• Drop UGA Draw and Console Control protocols support.
• GitLab CI with multi-architecture builds, clang jobs and weekly Coverity scans.
• Cygwin and mingw cross-build fixes.
• Filesystems hardening and fixes.
• Video readers and font fixes found by fuzzing.
• EFI code improvements and fixes.
• Network stack fixes.
• Coverity and memory leak fixes.
• ofpath and grub-install host utility robustness fixes.
• Tests improvements.
• Documentation improvements.
• ... and tons of other fixes and cleanups...

[Xi Ruoyao]

Note to myself: arm64 branch needs ​https://gitlab.freedesktop.org/gnu-grub/grub/-/merge_requests/274.

[Bruce Dubbs]

Fixed at commit 14b288663.

Update to grub-2.16.
Update to iana-etc-20261009.
Update to linux-7.2.10.
Update to markupsafe-3.0.4.
Update to pkgconf-3.0.8.
Update to sqlite-3.54.0.