Hetvi Thakar e8b3d26d54 u-boot, u-boot-tools: Fix CVE-2026-46728 ...

This patch applies the upstream U-Boot fix referenced by the advisory in
[2], using the commit shown in [1]. The fix rebuilds the FIT signed-node
list from the selected configuration instead of trusting the
attacker-controlled hashed-nodes property.

[1] https://github.com/u-boot/u-boot/commit/2092322b31cc
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-46728

(From OE-Core rev: 04f18f976b3809e195433b6b31a6121014bdc37c)

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>

2026-09-21 08:53:18 +01:00

..

files

u-boot, u-boot-tools: Fix CVE-2026-46728

2026-09-21 08:53:18 +01:00

libubootenv_0.3.5.bb

libubootenv: upgrade 0.3.4 -> 0.3.5

2023-10-19 13:38:57 +01:00

u-boot_2024.01.bb

u-boot, u-boot-tools: Fix CVE-2026-46728

2026-09-21 08:53:18 +01:00

u-boot-common.inc

u-boot: share CVE_PRODUCT with u-boot-tools

2026-09-21 08:53:18 +01:00

u-boot-configure.inc

u-boot.inc: Refactor do_* steps into functions that can be overridden

2024-08-19 06:09:14 -07:00

u-boot-tools_2024.01.bb

u-boot, u-boot-tools: Fix CVE-2026-46728

2026-09-21 08:53:18 +01:00

u-boot-tools.inc

u-boot-tools: Package mkeficapsule

2024-04-11 08:46:49 +01:00

u-boot.inc

u-boot: share CVE_PRODUCT with u-boot-tools

2026-09-21 08:53:18 +01:00