u-boot 2020.10+dfsg-1ubuntu0~18.04.3 source package in Ubuntu

Changelog

u-boot (2020.10+dfsg-1ubuntu0~18.04.3) bionic-security; urgency=medium

  * SECURITY UPDATE: unchecked length field in DFU implementation
    - debian/patches/CVE-2022-2347-pre1.patch: handle short frame result of
      UPLOAD in state_dfu_idle in drivers/usb/gadget/f_dfu.c.
    - debian/patches/CVE-2022-2347.patch: fix the unchecked length field in
      drivers/usb/gadget/f_dfu.c.
    - CVE-2022-2347
  * SECURITY UPDATE: buffer overflow via invalid packets
    - debian/patches/CVE-2022-30552_30790.patch: check for the minimum IP
      fragmented datagram size in include/net.h, net/net.c.
    - CVE-2022-30552
    - CVE-2022-30790
  * SECURITY UPDATE: incomplete fix for CVE-2019-14196
    - debian/patches/CVE-2022-30767.patch: switch length to unsigned int in
      net/nfs.c.
    - CVE-2022-30767
  * SECURITY UPDATE: out of bounds write via sqfs_readdir()
    - debian/patches/CVE-2022-33103.patch: prevent arbitrary code execution
      in fs/squashfs/sqfs.c, include/fs.h.
    - CVE-2022-33103
  * SECURITY UPDATE: heap buffer overflow in metadata reading
    - debian/patches/CVE-2022-33967.patch: use kcalloc when relevant in
      fs/squashfs/sqfs.c.
    - CVE-2022-33967
  * SECURITY UPDATE: stack overflow in i2c md command
    - debian/patches/CVE-2022-34835.patch: switch to unsigned int in
      cmd/i2c.c.
    - CVE-2022-34835

 -- Marc Deslauriers <email address hidden>  Fri, 25 Nov 2022 10:33:01 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
linux-any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main admin
Bionic security main admin

Downloads

File Size SHA-256 Checksum
u-boot_2020.10+dfsg.orig.tar.xz 12.7 MiB f16cd0189d1991aa7f56853348b2476c826a32f8af3d20ff5c941e45b7db9c50
u-boot_2020.10+dfsg-1ubuntu0~18.04.3.debian.tar.xz 56.2 KiB e314cb4c80d004c1ebfe1ddc8ae1e7e96e260ed7dc5b00a8ff3958b4966b46f1
u-boot_2020.10+dfsg-1ubuntu0~18.04.3.dsc 3.5 KiB c4f99db76eb6b336391dc218ff633d6227698696c19bd1bae6539b8be59dde29

View changes file

Binary packages built by this source

u-boot: A boot loader for embedded systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.

u-boot-amlogic: A boot loader for amlogic systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various amlogic platforms.
 .
 Included platforms:
 khadas-vim
 khadas-vim2
 libretech-cc
 nanopi-k2
 odroid-c2

u-boot-exynos: A boot loader for exynos systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various Exynos platforms.
 .
 Included platforms:
 arndale
 odroid
 odroid-xu3

u-boot-imx: A boot loader for imx systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various imx platforms.
 .
 Included platforms:
 dh_imx6
 mx53loco
 mx6cuboxi
 mx6qsabrelite
 nitrogen6q
 nitrogen6q2g
 novena
 novena-rawsd
 udoo
 usbarmory
 wandboard

u-boot-mvebu: A boot loader for marvell systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various Marvell platforms.
 .
 Included platforms:
 mvebu_espressobin-88f3720

u-boot-omap: A boot loader for omap systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various omap and related
 platforms.
 .
 Included platforms:
 am335x_boneblack
 am335x_evm
 am57xx_evm
 dra7xx_evm
 igep00x0
 nokia_rx51
 omap3_beagle
 omap4_panda

u-boot-qcom: A boot loader for qcom systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various qcom platforms.
 .
 Included platforms:
 dragonboard410c
 dragonboard820c

u-boot-qemu: A boot loader for qemu

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for qemu/kvm.
 .
 Included platforms:
 qemu-ppce500
 qemu-riscv64
 qemu-riscv64_smode
 qemu-x86
 qemu-x86_64
 qemu_arm
 qemu_arm64

u-boot-rockchip: A boot loader for rockchip systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various Rockchip platforms.
 .
 Included platforms:
 firefly-rk3288

u-boot-rpi: A boot loader for Raspberry PI systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various Raspberry PI
 platforms.
 .
 Included platforms:
 rpi_2
 rpi_3_32b
 rpi_4_32b

u-boot-sunxi: A boot loader for sunxi systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various Allwinner/sunxi
 platforms.
 .
 Included platforms:
 A10-OLinuXino-Lime
 A10s-OLinuXino-M
 A20-OLinuXino-Lime
 A20-OLinuXino-Lime2
 A20-OLinuXino-Lime2-eMMC
 A20-OLinuXino_MICRO
 A20-Olimex-SOM-EVB
 Bananapi
 Bananapi_M2_Ultra
 Bananapro
 CHIP
 Cubieboard
 Cubieboard2
 Cubieboard4
 Cubietruck
 Cubietruck_plus
 Lamobo_R1
 Linksprite_pcDuino
 Linksprite_pcDuino3
 Mini-X
 Sinovoip_BPI_M3
 bananapi_m2_berry
 nanopi_neo
 nanopi_neo_air
 orangepi_plus
 orangepi_zero

u-boot-tegra: A boot loader for NVIDIA Tegra systems

 Das U-Boot is a cross-platform bootloader for embedded systems,
 used as the default boot loader by several board vendors. It is
 intended to be easy to port and to debug, and runs on many
 supported architectures, including PPC, ARM, MIPS, x86, m68k,
 NIOS, and Microblaze.
 .
 This package includes boot loaders for various NVIDIA Tegra platforms.
 .
 Included platforms:
 jetson-tk1

u-boot-tools: companion tools for Das U-Boot bootloader

 This package includes programs for generating and listing U-Boot
 images in various formats:
  - mkimage
  - dumpimage
  - mksunxiboot
  - mkenvimage