Package "u-boot-tools"

u-boot (2025.10-0ubuntu0.24.04.3) noble-security; urgency=medium

  * SECURITY UPDATE: Integer overflow in ZFS filesystem metadata parsing
    - debian/patches/CVE-2025-70290.patch: Prevent integer overflow in
      zfs_nvlist_lookup in fs/zfs/zfs.c.
    - CVE-2025-70290
  * SECURITY UPDATE: Integer overflow in ext4 block group descriptor sizing
    - debian/patches/CVE-2025-70293.patch: Prevent integer overflow in
      ext4fs_get_bgdtable in fs/ext4/ext4_write.c.
    - CVE-2025-70293
  * SECURITY UPDATE: Stale IP defragmentation state after datagram reassembly
    - debian/patches/CVE-2026-15390_1.patch: Clear IP defragmentation state
      after returning a complete packet in net/net.c.
    - debian/patches/CVE-2026-15390_2.patch: Add IP defragmentation
      duplicate-fragment regression test in test/dm/Makefile,
      test/dm/net_defrag.c.
    - CVE-2026-15390
  * SECURITY UPDATE: Out-of-bounds write in IP fragment reassembly
    - debian/patches/CVE-2026-71971_1.patch: Fix out-of-bounds write in IP
      fragment reassembly in net/net.c.
    - debian/patches/CVE-2026-71971_2.patch: Add regression test for IP
      reassembly overflow in test/dm/net_defrag.c.
    - CVE-2026-71971

 -- Shafayat Hossain Majumder Thu, 01 Oct 2026 16:02:47 -0400

  u-boot (2025.10-0ubuntu0.24.04.2) noble-security; urgency=medium

  * No-change rebuild into -security pocket.
    - CVE-2024-57254, CVE-2024-57255, CVE-2024-57256, CVE-2024-57257,
      CVE-2024-57258, CVE-2024-57259

 -- Marc Deslauriers <email address hidden> Wed, 11 Feb 2026 13:04:28 -0500

  u-boot (2025.10-0ubuntu0.24.04.1) noble; urgency=medium

  [ Heinrich Schuchardt ]
  * New upstream release
    - Refreshed patches:
      - d/p/rpi-config-tweaks.patch
      - d/p/qemu/efi-secure-boot.patch
      - d/p/sitara/Don-t-attempt-to-build-final-firmware-images.patch
    - Updated d/copyright to remove redundant patterns and fix lintian
      notices
  * Removed patches obsoleted/merged by upstream:
    - d/p/riscv64/starfive/*
    - d/p/riscv64/star64/*
    - d/p/riscv64/mpfs-icicle-kit_fdtfile.patch
    - d/p/use-cryptographically-safe-RNG.patch
  * Added patches to support for StarFive VisionFive Lite and Milk-V Mars CM
    (LP: #2121690):
    - d/p/riscv64/starfive/0001-riscv-dts-starfive-prune-redundant-jh7110-common-ove.patch
    - d/p/riscv64/starfive/0002-riscv-dts-starfive-sync-visionfive2-overrides-with-u.patch
    - d/p/riscv64/starfive/0003-riscv-dts-starfive-visionfive2-depend-on-SYS_CPU-aut.patch
    - d/p/riscv64/starfive/0004-configs-starfive-Use-visionfive2-DEVICE_TREE_INCLUDE.patch
    - d/p/riscv64/starfive/0005-starfive-avoid-NULL-dereference-in-fdt_check_header.patch
    - d/p/riscv64/starfive/0006-eeprom-starfive-Simplify-get_ddr_size_from_eeprom.patch
    - d/p/riscv64/starfive/0007-eeprom-starfive-Correct-get_pcb_revision_from_eeprom.patch
    - d/p/riscv64/starfive/0008-eeprom-starfive-Support-eeprom-data-format-v3.patch
    - d/p/riscv64/starfive/0009-pcie-starfive-Add-a-optional-power-gpio-support.patch
    - d/p/riscv64/starfive/0010-configs-visionfive2-Add-VisionFive-2-Lite-DT-to-OF_L.patch
    - d/p/riscv64/starfive/0011-board-starfive-spl-Support-VisionFive-2-Lite.patch
    - d/p/riscv64/starfive/0012-board-starfive-visionfive2-Add-VisionFive-2-Lite-fdt.patch
    - d/p/riscv64/starfive/0013-riscv-dts-starfive-prune-redundant-jh7110-overrides.patch
    - d/p/riscv64/starfive/0014-board-starfive-visionfive2-Add-Milk-V-Mars-CM-and-Ma.patch
    - d/p/riscv64/starfive/0015-configs-starfive-Add-Milk-V-Mars-CM-and-Mars-CM-Lite.patch
    - d/p/riscv64/starfive/0016-Update-device-trees-from-Linux.patch
    - d/p/riscv64/starfive/0017-starfive-add-bootph-pre-ram-to-MMC1-clk-pins.patch
    - d/p/riscv64/starfive/0018-starfive-add-starfive-jh7110-compatible-property-val.patch

  [ Dave Jones ]
  * d/p/rpi-squashfs.patch: Enable squashfs support on rpi and amd64/arm64
    QEMU builds for internal image testing (LP: #2091618)

 -- Heinrich Schuchardt <email address hidden> Wed, 19 Nov 2025 18:26:40 +0100

  u-boot (2025.01-0ubuntu0.24.04.2) noble; urgency=medium

  * Rename u-boot-amlogic to u-boot-amlogic-binaries, with Provides clause
    (LP: #2110301)

 -- Dave Jones <email address hidden> Mon, 28 Jul 2025 15:28:53 +0100

  u-boot (2025.01-0ubuntu0.24.04.1) noble; urgency=medium

  * Backport from questing to enable boot on Pine64 Star64 and DeepComputing
    FML13V01 (LP: #2110301)

 -- Dave Jones <email address hidden> Fri, 09 May 2025 10:52:48 +0100