-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 22 Jun 2026 10:38:07 +0200 Source: u-boot Binary: u-boot-tools u-boot-tools-dbgsym Architecture: mips64el Version: 2023.01+dfsg-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Andreas Henriksson Description: u-boot-tools - companion tools for Das U-Boot bootloader Closes: 1056750 1081557 1136954 Changes: u-boot (2023.01+dfsg-2+deb12u3) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2024-42040: buffer overread vulnerability in the DHCP implementation. (Closes: #1081557) * CVE-2026-46728: mishandles use of unit addresses in a FIT. (Closes: #1136954) * Remove avr32 arch support removed in dpkg 1.22.0 (Closes: #1056750) - now also leads to dak rejecting uploads even for older suites Checksums-Sha1: 416f799ade6ea37f49a289fc104fb8be677a70c7 782464 u-boot-tools-dbgsym_2023.01+dfsg-2+deb12u3_mips64el.deb 40c5eb998521cbc9a23f14067ebb56e73a9fb7f9 191708 u-boot-tools_2023.01+dfsg-2+deb12u3_mips64el.deb 218582de4f18076ad82960099db047030de4cda2 7851 u-boot_2023.01+dfsg-2+deb12u3_mips64el-buildd.buildinfo Checksums-Sha256: f7eba1ad9ebf5b428b89b4e2437dadad1ad08614b69f3e913b33a10afd9ade56 782464 u-boot-tools-dbgsym_2023.01+dfsg-2+deb12u3_mips64el.deb 81065e9e53f0c38655115c798f50b70e2573316f961191153f538f7c95ed9a78 191708 u-boot-tools_2023.01+dfsg-2+deb12u3_mips64el.deb ccfcd8a713b229811c9467f412c903de8a016f38ea1281ca2056ae5c9a0ef9af 7851 u-boot_2023.01+dfsg-2+deb12u3_mips64el-buildd.buildinfo Files: 3461f692887e00a97f4cf0a16c3afacc 782464 debug optional u-boot-tools-dbgsym_2023.01+dfsg-2+deb12u3_mips64el.deb 65347d3b366c2f5d95e94e736e445a01 191708 admin optional u-boot-tools_2023.01+dfsg-2+deb12u3_mips64el.deb dd10e722496d1d5fa956e8e91e2f234c 7851 admin optional u-boot_2023.01+dfsg-2+deb12u3_mips64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmo4+8sACgkQ/qmHKZss fSA4Ag//VYsszF0cwk1wf+RVWBItY1Vn/4hO+8KCjosXX6e1xtJ9Y+ejJhpss8Ju 63Z1o5aZFJXuAQiAh4/wXwAjZ72VDfeDvWHFl6rWkeWCM6fQrqOgnQdiH6l7RmhZ snFtmaO13+1rcIF06k34gNXpimnfffs38CL8cw8AuRSGlAIHwO4oU1U/DaZOa7N5 GUb7mWE5524sGR1ltVGPa44idBof/EUBHLJrdOCBH5lVtZGO/hfGygHaI+aUa+5h MSkAK0yjLcpab2XlzgoykYtKeRJ+O0VDqIlhdTJ6lhHAN6sN0JbWzuphnv2B5mkn uR3kAPbKVIF8JVdSDkes4DxSk+HJ+8MAE/NaBcSWjWYZiJ8f1Nz2fNCx1K1rljDw +FQxnnlsqXLc+ICoW2igFb3zX0WdDestsm7euAEA2eN8QSVUQQn0Xaw1UwndD2NU 91d455//JtP5qOwjgB3KMwethMow70RQwD6LVXoi8VhiiPC99Di/xk9bpU75FleR BVOn4eZkzUwH1smPTZ6hrkQ5D0fuKKJQPKWOEcu9GcIgYlFIOeZRicxrt+JaiOXN HgohDkjkbLrGdp0Hb8z+WXtIHva9TF8iHE5OXWRPjz/TrKLc1uw/hgkTyEvo65j8 6EkWlQoInde3DfBUD606QS5f9aHnc4qJePeztGqbzdaC4aNXPLM= =gzwp -----END PGP SIGNATURE-----