linux/poky.git/meta/recipes-bsp/u-boot, branch yocto-5.0.14

u-boot: fix CVE-2024-42040

2025-11-03T15:17:02+00:00

Backport a patch [1] from upstrem to fix CVE-2024-42040 [2] [1] https://source.denx.de/u-boot/u-boot/-/commit/81e5708cc2c865df606e49aed5415adb2a662171 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-42040 (From OE-Core rev: 5c086db3f44d44f31e90f95ccb429639a1ff481d) Signed-off-by: Hongxu Jia Signed-off-by: Steve Sakoman

uboot: Allow for customizing installed/deployed file names

2025-07-07T14:42:58+00:00

Backport from master: https://git.openembedded.org/openembedded-core/commit/?id=debc691853e2954bd325bad395b8829939afaa08 When assembling all of the various filenames that are installed/deployed from u-boot, we have been including the PV and PR in the filenames. This change introduces a single variable to replace these two in the filenames. This change should not be disruptive since the default value for the new UBOOT_VERSION variable is "${PV}-${PR}". In one case (UBOOT_EXTLINUX_SYMLINK [1]), PR was used without PV, this patch assumes this was a mistake and corrects it as PR would not be of much use alone. [1] https://git.openembedded.org/openembedded-core/commit/?h=master-next&id=33df3a65f3e8e136811da715d0cc247ce66ae0ea (From OE-Core rev: 58ad450e84db35d5b38dab65edbbc33bc6fef750) Signed-off-by: Ryan Eatmon Signed-off-by: Steve Sakoman

u-boot: fix CVE-2024-57259

2025-02-28T14:45:14+00:00

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation. https://nvd.nist.gov/vuln/detail/CVE-2024-57259 (From OE-Core rev: 8fad176e6258a44d1ba1eed224cd27745b6a57cf) Signed-off-by: Hongxu Jia Signed-off-by: Steve Sakoman

u-boot: fix CVE-2024-57258

2025-02-28T14:45:14+00:00

Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64. https://nvd.nist.gov/vuln/detail/CVE-2024-57258 (From OE-Core rev: 12e1d55ae2427b6aaca6a1f7d8f947f0d6bbd28d) Signed-off-by: Hongxu Jia Signed-off-by: Steve Sakoman

u-boot: fix CVE-2024-57257

2025-02-28T14:45:14+00:00

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting. https://nvd.nist.gov/vuln/detail/CVE-2024-57257 (From OE-Core rev: 890597539246c0f2b427d60965d5665cf7f4731c) Signed-off-by: Hongxu Jia Signed-off-by: Steve Sakoman

u-boot: fix CVE-2024-57256

2025-02-28T14:45:14+00:00

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. https://nvd.nist.gov/vuln/detail/CVE-2024-57256 (From OE-Core rev: 21e6ac6e53112b9dddc5a84f27be5851469b9c46) Signed-off-by: Hongxu Jia Signed-off-by: Steve Sakoman

u-boot: fix CVE-2024-57255

2025-02-28T14:45:14+00:00

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. https://nvd.nist.gov/vuln/detail/CVE-2024-57255 (From OE-Core rev: c3784c108f003c6663ca969585414e4a90f06606) Signed-off-by: Hongxu Jia Signed-off-by: Steve Sakoman

u-boot: fix CVE-2024-57254

2025-02-28T14:45:14+00:00

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. https://nvd.nist.gov/vuln/detail/CVE-2024-57254 (From OE-Core rev: eea9fee59bc7576bef94f0da466887e4daff0356) Signed-off-by: Hongxu Jia Signed-off-by: Steve Sakoman

u-boot.inc: Refactor do_* steps into functions that can be overridden

2024-08-19T13:09:14+00:00

The looping logic for handling (and not handling) UBOOT_CONFIG has led to the various do_* functions to be large and unwieldy. In order to modify one of the functional blocks inside of a loop (or in the else condition) means you either have to replace the function entirely, or append the function and undo something it did and then do what you need for your change. This refactor breaks out all of the inner loops and else clauses into new functions that themselves can be overridden without needing to worry about the bulk of the looping logic. It should not break any existing recipes doing prepends, appends, or overrides. None of the functional blocks were changed, just refactored out into new functions. Backport from master: https://git.openembedded.org/openembedded-core/commit/?id=937bcc229502fcc154cc676b4fcc93c561873def (From OE-Core rev: bbb8db8fec7fbee56fcdbc665a758b911d73a767) Signed-off-by: Ryan Eatmon Signed-off-by: Steve Sakoman

u-boot-tools: Package mkeficapsule

2024-04-11T07:46:49+00:00

mkeficapsule is a tool provided by U-Boot (as part of the tools-only targets) for generating UEFI capsule update archives. Install mkeficapsule into a u-boot-tools-mkeficapsule package. (From OE-Core rev: ab9380cd969cc0762a55e5e2c7a8ea6b697e3ae1) Signed-off-by: Peter Hoyes Signed-off-by: Richard Purdie