-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 22 Jun 2026 10:38:07 +0200
Source: u-boot
Binary: u-boot-qemu
Architecture: all
Version: 2023.01+dfsg-2+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 u-boot-qemu - A boot loader for qemu
Closes: 1056750 1081557 1136954
Changes:
 u-boot (2023.01+dfsg-2+deb12u3) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2024-42040: buffer overread vulnerability in the DHCP implementation.
     (Closes: #1081557)
   * CVE-2026-46728: mishandles use of unit addresses in a FIT.
     (Closes: #1136954)
   * Remove avr32 arch support removed in dpkg 1.22.0 (Closes: #1056750)
     - now also leads to dak rejecting uploads even for older suites
Checksums-Sha1:
 b3be0b36a94ed15eddbed0bb4426b15e48fda3b8 1830604 u-boot-qemu_2023.01+dfsg-2+deb12u3_all.deb
 1b37d514d8ae19bedc189c61ddf2d7078fc65d6e 11356 u-boot_2023.01+dfsg-2+deb12u3_all-buildd.buildinfo
Checksums-Sha256:
 02a14f0876b76c0d7d7934e9b83a77515c5bdbad1e00af84c445bfeb1e6b8665 1830604 u-boot-qemu_2023.01+dfsg-2+deb12u3_all.deb
 b09e981bdb421829b093f71a3bc2b38d8af28d88e9647e34d9de5a06363a8659 11356 u-boot_2023.01+dfsg-2+deb12u3_all-buildd.buildinfo
Files:
 a4a404ddfa3bbbea355aba211e8f2eff 1830604 admin optional u-boot-qemu_2023.01+dfsg-2+deb12u3_all.deb
 98d3e37f3a7d98d53f8490228a1e0fdf 11356 admin optional u-boot_2023.01+dfsg-2+deb12u3_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmo4/G8ACgkQmgPNRvTf
/zdxlBAAvaxjLTuNXlt7aELoIvdkz0YFrbJ5cXPL4irM/AS1LKlFku8v2B4Kkupy
mg75QWhylaCnPjA3mtgEemUkMEeXVNf6Mr5HkVRth2Sh9JZV9oxxkjZC6EiMfFmt
P+o+Cor4TsdTiW93+tOexVfifLiRm8aMLnC+lfjx/kHCaXl/1OjDITqNFQFX9O8F
8u2Ge5hPTXVR55K9ii2y9LCVona/WaPvwmL8xS5HOvAgXZVEbgTaXPFhrc7Fnynd
Qzdr05o53ObeFkOQVeGxvaUOc1bcKFXr4MZLa73KADmYxWWyOXprCfOePtKgCdku
z1cv/bXF8DxArnO7585kBlbGp6FL230Au4Rare+JIvEoU3aa/C5vwb5Uq1UrtRgs
wGxmn1Ci/U/9yexsYPiM6AO1r3WV7KlISjRIpacFbJqPzar9hfedi29i7bxn0KeY
uQPrlJKzpGZwPryr/lAoK/xgvXwSXXLvweP6uUOtn5kRzyNFI5FTqvrl9PDYSvZK
KfuAT4VS0ZLhD5Lo//GqaDX7L3b0SdtXj+o6I11/SOXXfwgezPC42nBMHUHi+UlU
SV8SlUo+AONG9ASaFBjlBiThn9VD0MCFZEAIH9TlgsJl8Y7BBfqNnWcbeWvAm1tx
l7rBj28SvbipqK0fvEUb582/NkebJ/9wI3zB/C640wIobG7AZXA=
=ymma
-----END PGP SIGNATURE-----