poky/meta/recipes-bsp/u-boot
Hongxu Jia ecd87254c8 u-boot: fix CVE-2024-57259
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error
and resultant heap memory corruption for squashfs directory listing because the
path separator is not considered in a size calculation.

https://nvd.nist.gov/vuln/detail/CVE-2024-57259

(From OE-Core rev: e4b713ff07695487cc9307ffc3576a11775cde4d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-02-28 06:51:35 -08:00
..
files u-boot: fix CVE-2024-57259 2025-02-28 06:51:35 -08:00
libubootenv_0.3.2.bb meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers 2022-02-20 16:45:25 +00:00
u-boot_2022.01.bb u-boot: fix CVE-2024-57259 2025-02-28 06:51:35 -08:00
u-boot-common.inc u-boot: Inherit pkgconfig 2022-04-28 17:07:18 +01:00
u-boot-configure.inc u-boot: Split do_configure logic into separate file 2022-01-20 11:57:29 +00:00
u-boot-tools_2022.01.bb u-boot: upgrade 2021.10 -> 2022.01 2022-01-18 10:53:54 +00:00
u-boot-tools.inc Convert to new override syntax 2021-08-02 15:44:10 +01:00
u-boot.inc u-boot: Move UBOOT_INITIAL_ENV back to u-boot.inc 2024-03-12 04:06:19 -10:00