Package "u-boot-tools"
| Name: |
u-boot-tools
|
Description: |
companion tools for Das U-Boot bootloader
|
| Latest version: |
2022.01+dfsg-2ubuntu2.8 |
| Release: |
jammy (22.04) |
| Level: |
updates |
| Repository: |
main |
| Head package: |
u-boot |
| Homepage: |
https://www.denx.de/wiki/U-Boot/ |
Links
Download "u-boot-tools"
Other versions of "u-boot-tools" in Jammy
Changelog
|
u-boot (2022.01+dfsg-2ubuntu2.8) jammy-security; urgency=medium
* SECURITY UPDATE: Integer overflow in ZFS filesystem metadata parsing
- debian/patches/CVE-2025-70290.patch: Prevent integer overflow in
zfs_nvlist_lookup in fs/zfs/zfs.c.
- CVE-2025-70290
* SECURITY UPDATE: Integer overflow in ext4 block group descriptor sizing
- debian/patches/CVE-2025-70293.patch: Prevent integer overflow in
ext4fs_get_bgdtable in fs/ext4/ext4_write.c.
- CVE-2025-70293
* SECURITY UPDATE: Stale IP defragmentation state after datagram reassembly
- debian/patches/CVE-2026-15390_1.patch: Clear IP defragmentation state
after returning a complete packet in net/net.c.
- debian/patches/CVE-2026-15390_2.patch: Add IP defragmentation
duplicate-fragment regression test in test/dm/Makefile,
test/dm/net_defrag.c.
- CVE-2026-15390
* SECURITY UPDATE: Out-of-bounds write in IP fragment reassembly
- debian/patches/CVE-2026-71971_1.patch: Fix out-of-bounds write in IP
fragment reassembly in net/net.c.
- debian/patches/CVE-2026-71971_2.patch: Add regression test for IP
reassembly overflow in test/dm/net_defrag.c.
- CVE-2026-71971
-- Shafayat Hossain Majumder Thu, 01 Oct 2026 16:02:44 -0400
|
| Source diff to previous version |
| CVE-2025-70290 |
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed |
| CVE-2025-70293 |
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation |
| CVE-2026-15390 |
Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fra |
| CVE-2026-71971 |
U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in net/net.c |
|
|
u-boot (2022.01+dfsg-2ubuntu2.7) jammy-security; urgency=medium
* SECURITY UPDATE: Integer overflow in sqfs_inode_size
- debian/patches/CVE-2024-57254.patch: check for overflow in
fs/squashfs/sqfs_inode.c.
- CVE-2024-57254
* SECURITY UPDATE: Integer overflow in sqfs_resolve_symlink
- debian/patches/CVE-2024-57255.patch: check for overflow in
fs/squashfs/sqfs.c.
- CVE-2024-57255
* SECURITY UPDATE: Integer overflow in ext4fs_read_symlink
- debian/patches/CVE-2024-57256.patch: check for overflow in
fs/ext4/ext4_common.c.
- CVE-2024-57256
* SECURITY UPDATE: Stack consumption issue in sqfs_size
- debian/patches/CVE-2024-57257.patch: limit nesting levels in
fs/squashfs/sqfs.c.
- CVE-2024-57257
* SECURITY UPDATE: Integer overflows in memory allocation
- debian/patches/CVE-2024-57258-1.patch: fix ptrdiff_t in
arch/x86/include/asm/posix_types.h.
- debian/patches/CVE-2024-57258-2.patch: fix overflow check in
common/dlmalloc.c.
- debian/patches/CVE-2024-57258-3.patch: make sure that the new break
is within mem_malloc_start and mem_malloc_end before making progress
in common/dlmalloc.c.
- CVE-2024-57258
* SECURITY UPDATE: Heap memory corruption in sqfs_search_dir
- debian/patches/CVE-2024-57259.patch: fix off-by-one in
fs/squashfs/sqfs.c.
- CVE-2024-57259
-- Marc Deslauriers <email address hidden> Wed, 11 Feb 2026 13:08:14 -0500
|
| Source diff to previous version |
| CVE-2024-57254 |
An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. |
| CVE-2024-57255 |
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xfffffff |
| CVE-2024-57256 |
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 fil |
| CVE-2024-57257 |
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting. |
| CVE-2024-57258 |
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or becaus |
| CVE-2024-57259 |
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing bec |
|
|
u-boot (2022.01+dfsg-2ubuntu2.6) jammy; urgency=medium
* d/p/0001-rsa-adds-rsa3072-algorithm.patch: Add RSA3072 support
(LP: #2078395)
-- Ethan Hsieh <email address hidden> Fri, 30 Aug 2024 11:32:40 +0800
|
| Source diff to previous version |
| 2078395 |
[SRU] Add RSA3072 support to jammy |
|
|
u-boot (2022.01+dfsg-2ubuntu2.5) jammy; urgency=medium
* Support mkeficapsule command to generate capsule file (LP: #2036406)
* mkeficapsule with the patches applied matches U-Boot v2022.04.
* Update test script related to efi_capsule
-- Aristo Chen <email address hidden> Mon, 18 Sep 2023 11:02:43 +0800
|
| Source diff to previous version |
| 2036406 |
[SRU] backport mkeficapsule to jammy |
|
|
u-boot (2022.01+dfsg-2ubuntu2.4) jammy; urgency=medium
* Rebuild against updated OpenSBI (LP: #2026588)
* Enable sbi command on riscv64 to check OpenSBI version
-- Heinrich Schuchardt <email address hidden> Thu, 20 Jul 2023 11:42:59 +0200
|
| 2026588 |
[SRU] Copy OpenSBI 1.3 to Jammy and Lunar |
|
About
-
Send Feedback to @ubuntu_updates
