mirror of
https://git.yoctoproject.org/poky
synced 2026-09-24 22:36:21 +02:00
e8b3d26d54
This patch applies the upstream U-Boot fix referenced by the advisory in [2], using the commit shown in [1]. The fix rebuilds the FIT signed-node list from the selected configuration instead of trusting the attacker-controlled hashed-nodes property. [1] https://github.com/u-boot/u-boot/commit/2092322b31cc [2] https://nvd.nist.gov/vuln/detail/CVE-2026-46728 (From OE-Core rev: 04f18f976b3809e195433b6b31a6121014bdc37c) Signed-off-by: Hetvi Thakar <hthakar@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
17 lines
535 B
BlitzBasic
17 lines
535 B
BlitzBasic
require u-boot-common.inc
|
|
require u-boot.inc
|
|
|
|
DEPENDS += "bc-native dtc-native python3-pyelftools-native"
|
|
|
|
SRC_URI += "file://CVE-2024-57254.patch \
|
|
file://CVE-2024-57255.patch \
|
|
file://CVE-2024-57256.patch \
|
|
file://CVE-2024-57257.patch \
|
|
file://CVE-2024-57258-1.patch \
|
|
file://CVE-2024-57258-2.patch \
|
|
file://CVE-2024-57258-3.patch \
|
|
file://CVE-2024-57259.patch \
|
|
file://CVE-2024-42040.patch \
|
|
file://CVE-2026-46728.patch \
|
|
"
|