From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.90_1) id 1kUxtS-0006zY-6Q for mharc-grub-devel@gnu.org; Tue, 20 Oct 2020 16:06:03 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:49154) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kUxtP-0006yU-8r for grub-devel@gnu.org; Tue, 20 Oct 2020 16:05:59 -0400 Received: from youngberry.canonical.com ([91.189.89.112]:44172) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.90_1) (envelope-from ) id 1kUxtM-0004i2-BX for grub-devel@gnu.org; Tue, 20 Oct 2020 16:05:58 -0400 Received: from mail-wr1-f70.google.com ([209.85.221.70]) by youngberry.canonical.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from ) id 1kUxtJ-0007JV-IF for grub-devel@gnu.org; Tue, 20 Oct 2020 20:05:53 +0000 Received: by mail-wr1-f70.google.com with SMTP id b11so1283028wrm.3 for ; Tue, 20 Oct 2020 13:05:53 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:accept-language :references:mime-version:content-disposition:in-reply-to; bh=QyAIizgYet3Rp07FOctsveTTsGJ+1rILTG6+gvgxNPI=; b=BgW9eqLot6t8anCbn7vsLhyn/TC1EeefloVj9JLGQv+vU2CI85FgB9HG3BjpyclPDT 2p46U2f5XQmuyiikkQuI5IPzQAnodz9MsMPM42mi0hSAEvwiwF6nfsMWNj6StJquMkqD 3Vu3D61vXLfajF+Kay1TPNlfM5x94LknJxduXF3j2nvOhCM9l+UrloG9Z258SH75JL0i fXrau7JImUuaGBUCloBKnujbStkI3QNbNAmInTYfAk0ODwBjessROUTozt5F4Tvbohpc LzH+uF3qU0PV8i8S6FPVPgqpEf+5HKbBH8JZCD8/+vdxvjcMKG3y8JNOewoaA+4XWlYH HgXw== X-Gm-Message-State: AOAM530TRLD1krTsnWZf7kcvxcW953lp8uqL3lNrfTH+HXyo9QW+qp1T 7gJhoVmtu/Vuu6N/XISYNv4boKVl+lckigmRfLHCi4u4OYSDMDeGB/WA0lunPxrwyvHrMfOWiY/ PgUqnrDwpZNFPAuXoAEFccUATO+pQ X-Received: by 2002:a5d:5224:: with SMTP id i4mr115437wra.146.1603224352950; Tue, 20 Oct 2020 13:05:52 -0700 (PDT) X-Google-Smtp-Source: ABdhPJz4Mg/Bi46nPjEUWuZESLk+axAEHSJuPWZNs84dvNOXXuA0vXguNOdAoa6HV4Sggbt2kZG3hg== X-Received: by 2002:a5d:5224:: with SMTP id i4mr115422wra.146.1603224352701; Tue, 20 Oct 2020 13:05:52 -0700 (PDT) Received: from jak-t480s ([2a02:908:2814:7e40:c7:11fb:cbbe:68cf]) by smtp.gmail.com with ESMTPSA id w7sm5231505wre.9.2020.10.20.13.05.51 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 20 Oct 2020 13:05:51 -0700 (PDT) Date: Tue, 20 Oct 2020 22:05:50 +0200 From: Julian Andres Klode To: grub-devel@gnu.org Subject: Re: GRUB 2.06 release Message-ID: <20201020200550.wv272nck4u3m4kmi@jak-t480s> Accept-Language: de-DE, de, en-GB, en-US, en References: <20200219150138.sq76t2oyed6xa62y@tomti.i.net-space.pl> <20200303172603.2dm67gmy7ga7hj6k@tomti.i.net-space.pl> <20200311104735.3kzh5pqtln5h5dxq@tomti.i.net-space.pl> <20200316164129.vd2ujvqim3bcnzjt@tomti.i.net-space.pl> <20200422102440.jtb2qmvw7zt6t42n@tomti.i.net-space.pl> <20200529120729.4qa7bonugkkuannp@tomti.i.net-space.pl> <20200729174643.mlv6ip6jcf4bpcde@tomti.i.net-space.pl> <1b09ca4d-af2a-ffc3-21e5-cf5ea21d8138@akeo.ie> <20201020190002.24mlo6bt5fiu5q5b@jak-t480s> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="dcdrghee6gwrqib2" Content-Disposition: inline In-Reply-To: Received-SPF: none client-ip=91.189.89.112; envelope-from=julian.klode@canonical.com; helo=youngberry.canonical.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/10/20 15:00:05 X-ACL-Warn: Detected OS = Linux 3.1-3.10 X-Spam_score_int: -68 X-Spam_score: -6.9 X-Spam_bar: ------ X-Spam_report: (-6.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2020 20:05:59 -0000 --dcdrghee6gwrqib2 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Oct 20, 2020 at 03:12:49PM -0400, Eli Schwartz wrote: > On 10/20/20 3:00 PM, Julian Andres Klode wrote: > > On Mon, Oct 19, 2020 at 05:30:41PM +0100, Pete Batard wrote: > >> Just wanted to mention that the 2.06 release (btw, is GRUB jumping str= aight > >> from 2.04 [1] to 2.06 then?) delay with the BootHole fixes is starting= to > >> create some issues as folks (e.g. Rescuezilla) have started to take up= on > >> themselves to cherry pick from the BootHole patches and apply them to = things > >> like GRUB 2.02, instead of simply upgrading to a new official release,= that > >> would include these fixes. > >=20 > > That's a misunderstanding, nobody would upgrade existing OS to 2.06, you > > can't just upgrade the entire bootloader in a stable OS. You'd only > > upgrade the latest in-development version and cherry-pick fixes to old > > releases. >=20 > Well, only rolling release distros would. Sure >=20 > I'd like to instead propose a third option though. grub could benefit > from a policy to fork off maintenance branches for CVE fixes, and all > distros would upgrade to 2.04.1 (or 2.02.1), then later on a couple of > rolling release distros would upgrade to 2.06 once it is released. I don't know. It would have made the effort significantly harder to rebase to 2.04.1 instead of just appending the patches to the ton of patches we already have. --=20 debian developer - deb.li/jak | jak-linux.org - free software dev ubuntu core developer i speak de, en --dcdrghee6gwrqib2 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEET7WIqEwt3nmnTHeHb6RY3R2wP3EFAl+PQxsACgkQb6RY3R2w P3HJpA/+MzdHuQPBfO/65w55kehwUtx5b710+MAPzUYhWPfYxYlY8oInJ5UwtUQN AcOkV+SBF9LLg4PzdIOU0Fa7VSp87hw9PDcTTaphzqitH+o9YnJHX5So8Jp6xiEO cO95GnetCtxvkG7wH173RsKRwmMzRrJWBJeso+Q6RqkneDT+nAEgvrx4EZSi6nw9 9gYtwtyrCXHRUkieFFlYysDFvofx0YdrAlRT8rfFhGefCOOwfa3KJBgbysYOyjOb ivWAc0lHM1uClngQokPad/4+ePwIUVXwnVSnvdUkKtbSd2204ae4mwZfQsfv1Y6R qBkcJzkR+efZcxoQ/1SsjjFejJtTcXTJGIo1cZVR9MfXU/oJpN6qizDqjrLoxq7p 4hu4G06o+F1bOP/kMk/FqyeYTFkhDIaN+vHUXid0BK3/xMdiYqDd8sN6lkByPwCq qDgBTrj5E92Ku3nYFjUWfkXf2xJI9fw4IsApPYpubHNt+Cwh8UOgy6F40WkfO6c0 K5b1Qz5ji+wvo1iuozQIdwcubp9e31cwg3ADqJU+6fHxbwziXihVQOkKvGS5SsCa Q5syuD/Sy1T6NF8is39QYRV2ugyo1SxULmxTZEJYRq6cD5/2CQqAbHkAYb9aMbnE xZySG8PbUqzrpNqXJ1XW1VBabIXqN24pTfJ1gGvZ/Oech3f59nI= =M4a8 -----END PGP SIGNATURE----- --dcdrghee6gwrqib2--