u-boot (2021.01+dfsg-5+deb11u3) bullseye-security; urgency=high
authorAndreas Henriksson <andreas@fatal.se>
Tue, 23 Jun 2026 19:07:40 +0000 (21:07 +0200)
committerAndreas Henriksson <andreas@fatal.se>
Tue, 23 Jun 2026 19:07:40 +0000 (21:07 +0200)
commit77912f5daa0f5ecd5e15d88b54664458613a024d
treede9a5a5652b9c302b0551eb7b4d453c217c0cd5b
parentdf707a8698e63750556f5c63fb92f9ffa529af0e
parent3669ae07791f133c85a7622d00f497d5e4396187
u-boot (2021.01+dfsg-5+deb11u3) bullseye-security; urgency=high

  * Non-maintainer upload by the LTS Team.
  * CVE-2024-42040: buffer overread vulnerability in the DHCP implementation.
    (Closes: #1081557)
  * CVE-2026-46728: mishandles use of unit addresses in a FIT.
    (Closes: #1136954)
  * Remove avr32 arch support removed in dpkg 1.22.0 (Closes: #1056750)
    - now also leads to DAK rejecting the upload even for older suites.

[dgit import unpatched u-boot 2021.01+dfsg-5+deb11u3]
122 files changed:
debian/bin/generate-qcom
debian/bin/u-boot-install-rockchip
debian/bin/u-boot-install-sunxi
debian/bin/u-boot-install-targets
debian/bin/update-lintian-overrides
debian/bin/update-substvars
debian/changelog
debian/control
debian/copyright
debian/env-configs/efikamx.config
debian/env-configs/guruplug.config
debian/env-configs/kurobox_pro.config
debian/env-configs/linkstation-mini.config
debian/env-configs/linkstation_pro_live.config
debian/env-configs/lsmipsel.config
debian/env-configs/lsppchg.config
debian/env-configs/mx6cuboxi.config
debian/env-configs/openmoko_gta01.config
debian/env-configs/openmoko_gta02.config
debian/env-configs/openrd.config
debian/env-configs/qnap_ts101.config
debian/env-configs/qnap_ts109-209.config
debian/env-configs/qnap_ts119-219.config
debian/env-configs/sheevaplug.config
debian/env-configs/udoo_quad.config
debian/env-configs/wandboard.config
debian/gbp.conf
debian/manpages/u-boot-install-sunxi.8
debian/patches/CVE-2021-27097-1.patch
debian/patches/CVE-2021-27097-2.patch
debian/patches/CVE-2021-27097-3.patch
debian/patches/CVE-2021-27097-4.patch
debian/patches/CVE-2021-27138-1.patch
debian/patches/CVE-2021-27138-2.patch
debian/patches/CVE-2022-2347.patch
debian/patches/CVE-2022-30767.patch
debian/patches/CVE-2022-30790.patch
debian/patches/CVE-2022-33103.patch
debian/patches/CVE-2022-33967.patch
debian/patches/CVE-2022-34835.patch
debian/patches/CVE-2024-42040.patch
debian/patches/CVE-2024-57254.patch
debian/patches/CVE-2024-57255.patch
debian/patches/CVE-2024-57256.patch
debian/patches/CVE-2024-57257.patch
debian/patches/CVE-2024-57258-1.patch
debian/patches/CVE-2024-57258-2.patch
debian/patches/CVE-2024-57258-3.patch
debian/patches/CVE-2024-57259.patch
debian/patches/CVE-2026-46728-1.patch
debian/patches/CVE-2026-46728-2.patch
debian/patches/add-debian-revision-to-u-boot-version
debian/patches/am57xx/omap5_distro_bootcmd
debian/patches/arndale/board-spl-rule.diff
debian/patches/ensure-config-sandbox-for-make-env.patch
debian/patches/exynos/0001-arm-config-fix-default-console-only-to-specify-the-d.patch
debian/patches/mx53loco
debian/patches/n900/bootz_and_raw_initrd.patch
debian/patches/pinetab/0001-configs-add-PineTab-defconfig.patch
debian/patches/riscv64/qemu-riscv64_smode-sifive-fu540-fix-extlinux-define-.patch
debian/patches/rk3399/disable-preboot
debian/patches/series
debian/patches/test-imagetools-test-fixes
debian/patches/tools-generic-builds.patch
debian/patches/upstream/0001-efi_loader-switch-to-non-secure-mode-later.patch
debian/rules
debian/source/format
debian/source/include-binaries
debian/targets
debian/u-boot-amlogic.docs
debian/u-boot-amlogic.install
debian/u-boot-amlogic.lintian-overrides
debian/u-boot-exynos.docs
debian/u-boot-exynos.install
debian/u-boot-exynos.lintian-overrides
debian/u-boot-imx.README.Debian
debian/u-boot-imx.install
debian/u-boot-imx.links
debian/u-boot-imx.lintian-overrides
debian/u-boot-mvebu.docs
debian/u-boot-mvebu.install
debian/u-boot-mvebu.lintian-overrides
debian/u-boot-omap.README.Debian
debian/u-boot-omap.docs
debian/u-boot-omap.install
debian/u-boot-omap.lintian-overrides
debian/u-boot-qcom.README.Debian
debian/u-boot-qcom.install
debian/u-boot-qcom.lintian-overrides
debian/u-boot-qemu.README.Debian
debian/u-boot-qemu.install
debian/u-boot-qemu.lintian-overrides
debian/u-boot-rockchip.NEWS
debian/u-boot-rockchip.README.Debian
debian/u-boot-rockchip.docs
debian/u-boot-rockchip.install
debian/u-boot-rockchip.lintian-overrides
debian/u-boot-rpi.README.Debian
debian/u-boot-rpi.install
debian/u-boot-rpi.lintian-overrides
debian/u-boot-sifive.docs
debian/u-boot-sifive.install
debian/u-boot-sifive.lintian-overrides
debian/u-boot-sunxi.README.Debian
debian/u-boot-sunxi.docs
debian/u-boot-sunxi.install
debian/u-boot-sunxi.links
debian/u-boot-sunxi.lintian-overrides
debian/u-boot-sunxi.manpages
debian/u-boot-tegra.README.Debian
debian/u-boot-tegra.install
debian/u-boot-tegra.links.arm64
debian/u-boot-tegra.lintian-overrides
debian/u-boot-tools.docs
debian/u-boot-tools.examples
debian/u-boot-tools.install
debian/u-boot-tools.manpages
debian/u-boot.README.Debian
debian/u-boot.install
debian/u-boot.lintian-overrides
debian/upstream/signing-key.asc
debian/watch