u-boot (2022.01+dfsg-2ubuntu2.7) jammy-security; urgency=medium

  * SECURITY UPDATE: Integer overflow in sqfs_inode_size
    - debian/patches/CVE-2024-57254.patch: check for overflow in
      fs/squashfs/sqfs_inode.c.
    - CVE-2024-57254
  * SECURITY UPDATE: Integer overflow in sqfs_resolve_symlink
    - debian/patches/CVE-2024-57255.patch: check for overflow in
      fs/squashfs/sqfs.c.
    - CVE-2024-57255
  * SECURITY UPDATE: Integer overflow in ext4fs_read_symlink
    - debian/patches/CVE-2024-57256.patch: check for overflow in
      fs/ext4/ext4_common.c.
    - CVE-2024-57256
  * SECURITY UPDATE: Stack consumption issue in sqfs_size
    - debian/patches/CVE-2024-57257.patch: limit nesting levels in
      fs/squashfs/sqfs.c.
    - CVE-2024-57257
  * SECURITY UPDATE: Integer overflows in memory allocation
    - debian/patches/CVE-2024-57258-1.patch: fix ptrdiff_t in
      arch/x86/include/asm/posix_types.h.
    - debian/patches/CVE-2024-57258-2.patch: fix overflow check in
      common/dlmalloc.c.
    - debian/patches/CVE-2024-57258-3.patch: make sure that the new break
      is within mem_malloc_start and mem_malloc_end before making progress
      in common/dlmalloc.c.
    - CVE-2024-57258
  * SECURITY UPDATE: Heap memory corruption in sqfs_search_dir
    - debian/patches/CVE-2024-57259.patch: fix off-by-one in
      fs/squashfs/sqfs.c.
    - CVE-2024-57259

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 11 Feb 2026 13:08:14 -0500

u-boot (2022.01+dfsg-2ubuntu2.6) jammy; urgency=medium

  * d/p/0001-rsa-adds-rsa3072-algorithm.patch: Add RSA3072 support
    (LP: #2078395)

 -- Ethan Hsieh <ethan.hsieh@canonical.com>  Fri, 30 Aug 2024 11:32:40 +0800

u-boot (2022.01+dfsg-2ubuntu2.5) jammy; urgency=medium

  * Support mkeficapsule command to generate capsule file (LP: #2036406)
  * mkeficapsule with the patches applied matches U-Boot v2022.04.
  * Update test script related to efi_capsule

 -- Aristo Chen <aristo.chen@canonical.com>  Mon, 18 Sep 2023 11:02:43 +0800

u-boot (2022.01+dfsg-2ubuntu2.4) jammy; urgency=medium

  * Rebuild against updated OpenSBI (LP: #2026588)
  * Enable sbi command on riscv64 to check OpenSBI version

 -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Thu, 20 Jul 2023 11:42:59 +0200

u-boot (2022.01+dfsg-2ubuntu2.3) jammy-security; urgency=medium

  * SECURITY UPDATE: unchecked length field in DFU implementation
    - debian/patches/CVE-2022-2347-pre1.patch: handle short frame result of
      UPLOAD in state_dfu_idle in drivers/usb/gadget/f_dfu.c.
    - debian/patches/CVE-2022-2347.patch: fix the unchecked length field in
      drivers/usb/gadget/f_dfu.c.
    - CVE-2022-2347
  * SECURITY UPDATE: buffer overflow via invalid packets
    - debian/patches/CVE-2022-30552_30790.patch: check for the minimum IP
      fragmented datagram size in include/net.h, net/net.c.
    - CVE-2022-30552
    - CVE-2022-30790
  * SECURITY UPDATE: incomplete fix for CVE-2019-14196
    - debian/patches/CVE-2022-30767.patch: switch length to unsigned int in
      net/nfs.c.
    - CVE-2022-30767
  * SECURITY UPDATE: out of bounds write via sqfs_readdir()
    - debian/patches/CVE-2022-33103.patch: prevent arbitrary code execution
      in fs/squashfs/sqfs.c, include/fs.h.
    - CVE-2022-33103
  * SECURITY UPDATE: heap buffer overflow in metadata reading
    - debian/patches/CVE-2022-33967.patch: use kcalloc when relevant in
      fs/squashfs/sqfs.c.
    - CVE-2022-33967
  * SECURITY UPDATE: stack overflow in i2c md command
    - debian/patches/CVE-2022-34835.patch: switch to unsigned int in
      cmd/i2c.c.
    - CVE-2022-34835

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 24 Nov 2022 14:40:06 -0500

u-boot (2022.01+dfsg-2ubuntu2.1) jammy; urgency=medium

  * Add package u-boot-microchip (LP: #1995848)
  * Add u-boot-sifive.README.Debian
  * Enable reset via SBI
    d/p/riscv64/sysreset-sbi.patch
    d/p/enable-reset-via-SBI-on-PolarFire-Icicle-Kit.patch

 -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Fri, 18 Nov 2022 12:11:50 +0100

u-boot (2022.01+dfsg-2ubuntu2) jammy; urgency=medium

  * d/patches: Add SiFive Unmatched PCIe fix (LP: #1965321)

 -- Alexandre Ghiti <alexandre.ghiti@canonical.com>  Fri, 25 Mar 2022 11:15:18 +0100

u-boot (2022.01+dfsg-2ubuntu1) jammy; urgency=medium

  [ Dave Jones ]
  * Merge from Debian unstable (LP: #1964365). Remaining changes:
    - d/p/rpi-config-tweaks.patch: Configuration adjustments to the RPi
      configs
    - Enable FIT signing support
      - Limit key names to keys within the keydir.
    - Enable Ubuntu support for the Nitrogen6x board
      - Add d/p/ubuntu-nitrogen6q2g-config-tweaks.patch to tweak the
        nitrogen6q2g configs to better fit our Ubuntu usage.
      - Start building the nitrogen6x2g target for u-boot.
    - d/p/rpi-board-dt.patch: use the board's device-tree instead of an
      embedded one
    - Add d/p/rpi-cm4-sdhci.patch for CM4 eMMC support
    - Add d/p/rpi-8gb-pci.patch for Pi400 and Pi4-8Gb support
    - Add d/p/rpi-maxargs.patch for new Core 18 boot-env
    - Removed d/u-boot-rpi.postinst. The task of copying the u-boot binaries
      to the boot partition is now performed by flash-kernel
    - Revert '* debian/rules: Ensure debugging symbols are enabled.' as it
      breaks riscv64 booting.
    - Implement u-boot-sifive.postinst to upgrade u-boot in loader1/loader2
      partitions upon package upgrades. Maybe this should move to flash-
      kernel, and update SPI too.
    - Provide compat symlinks for old unleashed & unmatched platform names
    - sifive boards: re-enable back USE_PREBOOT< it used to be there in
      2021.01 releases, and I suspect it affects unleashed bootability.
    - In postinst support Unmatched model name without A00 suffix, as used by
      meta-sifive kernels and may be contributed upstream in the future.
    - Fix Unleashed name typo that resulted in an unbootable image due to
      missing OpenSBI.
  * Removed obsolete patches/changes:
    - fix cmd_sysconfig in qemu
    - set default fdtfile names for sifive boards
    - Drop unleashed hunk from
      riscv64/qemu-riscv64_smode-sifive-fu540-fix-extlinux-define-.patch, as
      the same preboot is specified in unleashed board include.
    - Cherrypick patch from Heinrich Schuchardt (xypron) to fix failure to
      boot on Unmatched.
    - Drop 75efe7dc996ddb9835590b1a8970f19b5c4b1ade.patch included upstream.
    - Remove unreferenced fe01f41d57b79d9ca94604503a25e55175744d42.patch,
      included as riscv64/0013-riscv-sifive-Set-default-fdtfile-names.patch.
    - Build against opensbi with reboot support on Unmatched
    - Add missing trailing n to arch/arm/mach-stm32mp/cmd_stm32prog/Kconfig.
      Fixes a rare (but reliable) FTBFS from check-config.sh. In the original
      case on LP armhf, mach-imx/Kconfig sorted immediately after
      cmd_stm32prog/Kconfig, causing lines to run together and the sed to not
      match the "config HAS_CAAM" line, causing the dh_imx6 defconfig to
      appear invalid.
    - Import meta-sifive patch series.
    - Refreshed rk3399 patches for new release
  * Refreshed patches for new release
  * Re-added target for nitrogen6q2 u-boot binary (missed in prior merge)
  * Fixed nitrogen6q2g patch to build properly on armhf

  [ Heinrich Schuchardt ]
  * d/p/efivars-commands.patch: Enable commands for displaying and configuring
    the UEFI environment
  * d/p/efi-part-list.patch: Permit listing of non-contiguous partitions in
    GPT tables
  * d/p/efi-loader-copy-guid.patch: Copy GUID in InstallProtocolInterface to
    avoid crash with systemd-boot

 -- Dave Jones <dave.jones@canonical.com>  Thu, 10 Mar 2022 16:54:01 +0000

u-boot (2022.01+dfsg-2) unstable; urgency=medium

  * debian/patches: Fix building qemu-ppce500 target with binutils
    2.38. Thanks to Aurelien Jarno! (Closes: #1003490)
  * debian/patches: Update to newer riscv64 default ISA spec.
    Thanks to Aurelien Jarno! (Closes: #1003490)
  * debian/control: Add versioned Build-Depends on binutils.
  * debian/control: Update versioned Build-Depends on opensbi.

 -- Vagrant Cascadian <vagrant@debian.org>  Wed, 26 Jan 2022 11:58:27 -0800

u-boot (2022.01+dfsg-1) unstable; urgency=medium

  * New upstream release.

 -- Vagrant Cascadian <vagrant@debian.org>  Mon, 10 Jan 2022 14:07:13 -0800

# For older changelog entries, run 'apt-get changelog u-boot-tools'
