]> code.ossystems Code Review - openembedded-core.git/commit
Code Review / openembedded-core.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: ce51f42) | patch
u-boot: Fix CVE-2021-27097, CVE-2021-27138
authorScott Murray <scott.murray@konsulko.com>
Mon, 22 Mar 2021 02:53:55 +0000 (22:53 -0400)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 23 Mar 2021 22:51:20 +0000 (22:51 +0000)
commitb6c2df341d7e6da5defca9a5567fdb7212489efa
treeef02e7282ea87d3f3eda84de15e9116d9be5c60ctree | snapshot
parentce51f42b87b154a5a12fb77fc9dd965ba59f2403commit | diff
u-boot: Fix CVE-2021-27097, CVE-2021-27138

Backport fixes for CVE-2021-27097 and CVE-2021-27138 as well as
a precursor fdt validation fix that allows using the upstream
patches for the CVEs without significant rebasing.  Note that
the additional upstream changes to add new U-Boot fit image tests
have been left out to keep the patch count down.  Those tests are
currently not used for ptest or oe-selftest, so it is believed
their absence should not be problematic.

Signed-off-by: Scott Murray <scott.murray@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-bsp/u-boot/files/0001-add-valid-fdt-check.patch [new file with mode: 0644] blob
meta/recipes-bsp/u-boot/files/CVE-2021-27097-1.patch [new file with mode: 0644] blob
meta/recipes-bsp/u-boot/files/CVE-2021-27097-2.patch [new file with mode: 0644] blob
meta/recipes-bsp/u-boot/files/CVE-2021-27097-3.patch [new file with mode: 0644] blob
meta/recipes-bsp/u-boot/files/CVE-2021-27097-4.patch [new file with mode: 0644] blob
meta/recipes-bsp/u-boot/files/CVE-2021-27138-1.patch [new file with mode: 0644] blob
meta/recipes-bsp/u-boot/files/CVE-2021-27138-2.patch [new file with mode: 0644] blob
meta/recipes-bsp/u-boot/u-boot-common.inc diff | blob | history
Mirror of the official openembedded-core repository