import from tagless source c8s

.gitignore

 SOURCES/grub-2.02.tar.xz
 SOURCES/theme.tar.bz2
 SOURCES/unifont-5.1.20080820.pcf.gz
+/grub-2.02.tar.xz
+/theme.tar.bz2
+/unifont-5.1.20080820.pcf.gz
+SOURCES/grub-2.02.tar.xz
+SOURCES/theme.tar.bz2
+SOURCES/unifont-5.1.20080820.pcf.gz

.grub2.metadata

-3d7eb6eaab28b88cb969ba9ab24af959f4d1b178 SOURCES/grub-2.02.tar.xz
-cf0b7763c528902da7e8b05cfa248f20c8825ce5 SOURCES/theme.tar.bz2
-87f8600ba24e521b5d20bdf6c4b71af8ae861e3a SOURCES/unifont-5.1.20080820.pcf.gz
+cc6eb0a42b5c8df2f671cc128ff725afb3ff1f8832a196022e433cf0d3b75decfca2316d0aa5fabea75747d55e88f3d021dd93508563f8ca80fd7b9e7fe1f088 SOURCES/grub-2.02.tar.xz
+0f6f914d5f801509403094b28b8cfe5169cb56ae9bdd808ae21a6780a8236b434161a068351508dd78729c25ee2fed066c124c1eef9e15102750b409b4576a5c SOURCES/theme.tar.bz2
+8939e2bc82ca97b60e6678f3ff079a2be7ba9b702f2e8ee289e853af5823695f7baafbf14b674fc5e41071f2a6de4f2dadd56bf8b4653849dd756d59622f1649 SOURCES/unifont-5.1.20080820.pcf.gz

SOURCES/0576-efi-http-change-uint32_t-to-uintn_t-for-grub_efi_htt.patch

+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: Matt Hsiao <matt.hsiao@hpe.com>
+Date: Mon, 24 Apr 2023 13:39:05 +0800
+Subject: [PATCH] efi/http: change uint32_t to uintn_t for
+ grub_efi_http_message_t
+
+Modify UINT32 to UINTN in EFI_HTTP_MESSAGE to be UEFI 2.9 compliant.
+
+Signed-off-by: Matt Hsiao <matt.hsiao@hpe.com>
+Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
+---
+ include/grub/efi/http.h | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/include/grub/efi/http.h b/include/grub/efi/http.h
+index c5e9a89f5050..ad164ba1913d 100644
+--- a/include/grub/efi/http.h
++++ b/include/grub/efi/http.h
+@@ -171,9 +171,9 @@ typedef struct {
+     grub_efi_http_request_data_t *request;
+     grub_efi_http_response_data_t *response;
+   } data;
+-  grub_efi_uint32_t header_count;
++  grub_efi_uintn_t header_count;
+   grub_efi_http_header_t *headers;
+-  grub_efi_uint32_t body_length;
++  grub_efi_uintn_t body_length;
+   void *body;
+ } grub_efi_http_message_t;
+ 

SOURCES/gating.yaml

+--- !Policy
+product_versions:
+  - rhel-8
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1-x86_64-legacy.functional}
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1-x86_64-efi.functional}
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1-ppc64le-of.functional}
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1-ppc64le-opal.functional}
+  - !PassingTestCaseRule {test_case_name: baseos-ci.brew-build.tier1-aarch64-efi.functional}

SOURCES/grub.patches

@@ -573,3 +573,4 @@ Patch0572: 0572-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
 Patch0573: 0573-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
 Patch0574: 0574-Enable-TDX-measurement-to-RTMR-register.patch
 Patch0575: 0575-Enable-shared-processor-mode-in-vector-5.patch
+Patch0576: 0576-efi-http-change-uint32_t-to-uintn_t-for-grub_efi_htt.patch

SOURCES/rocky-grub2.cer

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SOURCES/rocky-root-ca.cer

+-----BEGIN CERTIFICATE-----
+MIIElTCCA32gAwIBAgIUEGxXHO6vKSTAqoXlqrSFQpqx2IYwDQYJKoZIhvcNAQEL
+BQAwgdQxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhEZWxhd2FyZTEOMAwGA1UEBwwF
+RG92ZXIxLTArBgNVBAoMJFJvY2t5IEVudGVycHJpc2UgU29mdHdhcmUgRm91bmRh
+dGlvbjEhMB8GA1UECwwYUmVsZWFzZSBlbmdpbmVlcmluZyB0ZWFtMSgwJgYDVQQD
+DB9Sb2NreSBMaW51eCBTZWN1cmUgQm9vdCBSb290IENBMSYwJAYJKoZIhvcNAQkB
+FhdzZWN1cml0eUByb2NreWxpbnV4Lm9yZzAeFw0yMTA2MjAxNTA1MDFaFw0zMTA2
+MTgxNTA1MDFaMIHUMQswCQYDVQQGEwJVUzERMA8GA1UECAwIRGVsYXdhcmUxDjAM
+BgNVBAcMBURvdmVyMS0wKwYDVQQKDCRSb2NreSBFbnRlcnByaXNlIFNvZnR3YXJl
+IEZvdW5kYXRpb24xITAfBgNVBAsMGFJlbGVhc2UgZW5naW5lZXJpbmcgdGVhbTEo
+MCYGA1UEAwwfUm9ja3kgTGludXggU2VjdXJlIEJvb3QgUm9vdCBDQTEmMCQGCSqG
+SIb3DQEJARYXc2VjdXJpdHlAcm9ja3lsaW51eC5vcmcwggEiMA0GCSqGSIb3DQEB
+AQUAA4IBDwAwggEKAoIBAQDjxGsPWwj921H84Ek56ahTmx7wV67aLAUzX28tpHae
+22NAhnemIEs1xXXK3FxLpfjqGuHCR/rTwu/+UoOUFkKQsPITK6pzIuigQhs1AqgD
+3xBJvaA9lDVORCV4CESZwCNYY8xWSKBAi8vroP38kyJG30M2aQHwHbF/YjGgUL5W
+93g+LiKEb96KgcFJsZR++3zY90ogHjeekQXoX7+qTs1nycyeXReQf/10ZMSp4xsD
+A9I1oocq5OV0uMNWgnEMs+PMOKNRu1i5l742lZ5kMiXVpJSdATRez2g5nlZ0ctQi
+GzRGRBTCFBeIwxas6pr5hfEA+9kOoODP0T0sJNJZlKSlAgMBAAGjXTBbMB0GA1Ud
+DgQWBBRMLGvX1k7oFYHKuOmGZh9l4hZvxDAfBgNVHSMEGDAWgBRMLGvX1k7oFYHK
+uOmGZh9l4hZvxDAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIBhjANBgkqhkiG9w0B
+AQsFAAOCAQEAT7JzkK0TB/sfZgVljSF+qUjTkvwuFASb/0h9dNaJEq/ru1GRQ5rf
+K/6MU5xKhpYKe9R4sre/xmFf2Qy2QNTxsh4UdBDaQj+llUsi5Oz7qWrJFMXrAvkE
+CPhvUe1IndbAFB4AQtXLLKWonjCMc4zJsNB1glK47vJLhxigCa6TEWHtYo2My55Z
+BbJBaGfWW/0XbvSHWbu91xQHyup7RRrx/vVrCHhQqymi1EE1lrp2iddTXkYBVU8M
+RCp+fXhJhSsIKbXM5fT0eB9kMuCd46KfDabTfyn4ibvifRllVD9C5alLLjGYmioZ
+Drftw/lKymO4Q8OTe7skUBoVSFTDmioHMw==
+-----END CERTIFICATE-----

SOURCES/rpminspect.yaml

+---
+inspections:
+  # Not a Java package
+  javabytecode: off
+  
+  # These just flag when things change "too much"
+  changedfiles: off
+  filesize: off
+  patches: off
+  upstream: off
+
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2007427
+  manpage: off
+
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2007428
+  elf: off
+
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1961250
+  annocheck: off
+
+  # https://bugzilla.redhat.com/show_bug.cgi?id=2007431
+  permissions: off
+
+  # kernel executables have debug symbols.
+  debuginfo: off

SOURCES/sbat.csv.in

 sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
-grub,2,Free Software Foundation,grub,2.02,https://www.gnu.org/software/grub/
+grub,3,Free Software Foundation,grub,2.02,https://www.gnu.org/software/grub/
 grub.rhel8,2,Red Hat Enterprise Linux 8,grub2,@@VERSION_RELEASE@@,mail:secalert@redhat.com
 grub.rocky8,2,Rocky Linux 8,grub2,@@VERSION_RELEASE@@,mail:security@rockylinux.org

SPECS/grub2.spec

@@ -7,7 +7,7 @@
 Name:                 grub2
 Epoch:                1
 Version:              2.02
-Release:              148%{?dist}.rocky.0.1
+Release:              149%{?dist}.rocky.0.3
 Summary:              Bootloader with support for Linux, Multiboot and more
 Group:                System Environment/Base
 License:              GPLv3+
@@ -24,11 +24,10 @@ Source6:              gitignore
 Source8:              strtoull_test.c
 Source9:              20-grub.install
 Source12:             99-grub-mkconfig.install
-Source18:             redhatsecureboot701.cer
 Source19:             sbat.csv.in
 
-Source90000:          rocky-root-ca.der
-Source90001:          rocky-signing.der
+Source90000:          rocky-root-ca.cer
+Source90001:          rocky-grub2.cer
 
 
 %include %{SOURCE1}
@@ -45,7 +44,7 @@ Source90001:          rocky-signing.der
 %ifarch ppc64le
 %define old_sb_cer	%{SOURCE90000}
 %define sb_cer		%{SOURCE90001}
-%define sb_key		redhatsecureboot702
+%define sb_key		rockylinuxsecurebootkey
 %endif
 
 # generate with do-rebase
@@ -509,7 +508,7 @@ fi
 %endif
 
 %changelog
-* Wed Feb 08 2023 Release Engineering <releng@rockylinux.org> - 2.02-148.rocky.0.1
+* Thu Jun 15 2023 Release Engineering <releng@rockylinux.org> - 2.02.rocky.0.3
 - Removing redhat old cert sources entries (Sherif Nagy)
 - Preserving rhel8 sbat entry based on shim-review feedback ticket no. 194
 - Adding prod cert
@@ -518,6 +517,10 @@ fi
 - Cleaning up grup.macro extra signing certs
 - Adding Rocky testing CA, CERT and sbat files
 
+* Wed Jun 14 2023 Nicolas Frayer <nfrayer@redhat.com> - 2.02-149
+- efi/http: change uint32_t to uintn_t for grub_efi_http_message_t
+- Resolves: #2178388
+
 * Mon Feb 06 2023 Robbie Harwood <rharwood@redhat.com> - 2.02-148
 - ppc64le: cas5, take 3
 - Resolves: #2139508