Hongxu Jia ecd87254c8 u-boot: fix CVE-2024-57259 ...

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error
and resultant heap memory corruption for squashfs directory listing because the
path separator is not considered in a size calculation.

https://nvd.nist.gov/vuln/detail/CVE-2024-57259

(From OE-Core rev: e4b713ff07695487cc9307ffc3576a11775cde4d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-02-28 06:51:35 -08:00

..

acpid

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

alsa-state

alsa-state: correct license

2022-07-25 15:11:46 +01:00

apmd

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

efibootmgr

efibootmgr: update compilation with musl

2022-12-23 23:05:50 +00:00

efivar

efivar: backport 5 patches to fix build with gold

2023-09-08 16:09:41 -10:00

formfactor

formfactor: Add machine config for qemuppc64

2021-03-11 14:00:36 +00:00

gnu-efi

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

grub

grub: ignore CVE-2024-1048 and CVE-2023-4001

2024-12-09 07:54:03 -08:00

keymaps

keymaps: Clean up license handling

2022-04-01 23:11:37 +01:00

libacpi

libacpi: Build libacpi also for 'aarch64' machines

2022-03-04 17:14:15 +00:00

lrzsz

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

opensbi

opensbi: Upgrade to 1.0

2022-02-16 09:46:29 +00:00

pciutils

pciutils: avoid lspci conflict with busybox

2022-06-07 11:53:26 +01:00

pm-utils

pm-utils: fix multilib conflictions

2023-07-01 08:37:24 -10:00

setserial

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

u-boot

u-boot: fix CVE-2024-57259

2025-02-28 06:51:35 -08:00

usbinit

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20 16:45:25 +00:00

usbutils

meta, meta-selftest: Replace more non-SPDX license identifiers

2022-03-01 23:44:59 +00:00

v86d

v86d: Improve kernel dependency

2023-07-12 05:11:38 -10:00