[Bug 1999039] Re: Please merge u-boot 2022.10+dfsg-1 from Debian unstable.

[Launchpad Bug Tracker]

This bug was fixed in the package u-boot - 2022.10+dfsg-1ubuntu1

---------------
u-boot (2022.10+dfsg-1ubuntu1) lunar; urgency=medium

  * Merge from Debian unstable (LP: #1999039). Remaining changes:
    - d/p/rpi-config-tweaks.patch: Configuration adjustments to the RPi
      configs
    - Enable FIT signing support
      - Limit key names to keys within the keydir.
    - Enable Ubuntu support for the Nitrogen6x board
      - Add d/p/ubuntu-nitrogen6q2g-config-tweaks.patch to tweak the
        nitrogen6q2g configs to better fit our Ubuntu usage.
      - Start building the nitrogen6x2g target for u-boot.
    - d/p/rpi-board-dt.patch: use the board's device-tree instead of an
      embedded one
    - Add d/p/rpi-cm4-sdhci.patch for CM4 eMMC support
    - Add d/p/rpi-8gb-pci.patch for Pi400 and Pi4-8Gb support
    - Add d/p/rpi-maxargs.patch for new Core 18 boot-env
    - Removed d/u-boot-rpi.postinst. The task of copying the u-boot binaries
      to the boot partition is now performed by flash-kernel
    - Revert '* debian/rules: Ensure debugging symbols are enabled.' as it
      breaks riscv64 booting.
    - Implement u-boot-sifive.postinst to upgrade u-boot in loader1/loader2
      partitions upon package upgrades. Maybe this should move to flash-
      kernel, and update SPI too.
    - Provide compat symlinks for old unleashed & unmatched platform names
    - In postinst support Unmatched model name without A00 suffix, as used by
      meta-sifive kernels and may be contributed upstream in the future.
    - Re-added target for nitrogen6q2 u-boot binary (missed in prior merge)
    - Enable commands for displaying and configuring the UEFI environment
    - Fix nitrogen6q2g patch to build properly on armhf
    - In u-boot-sifive.postinst support partition names Loader1, Loader2 as
      the installer image uses these.
    - Remove the MIPS targets as the mips cross-compiler is currently
      uninstallable in Ubuntu
    - Add package for PolarFire SoC Icicle Kit
    - Adjust u-boot-microchip on PolarFire Icicle Kit for the changed memory
      layout of the HSS 2022.10 firmware
    - Enable reset via SBI on PolarFire Icicle Kit d/p/riscv64/enable-reset-
      via-SBI-on-PolarFire-Icicle-Kit.patch
    - Fix probing of virtio devices d/p/virtio-pci-fix-bug-of-
      virtio_pci_map_capability.patch
    - SECURITY UPDATE: unchecked length field in DFU implementation
      - debian/patches/CVE-2022-2347.patch: fix the unchecked length field in
        drivers/usb/gadget/f_dfu.c.
      - CVE-2022-2347
  * Removed patches obsoleted/merged by upstream:
    - System reset via the SRST extension in the SBI should be the default.
  * Refreshed patches:
    - d/p/rpi-config-tweaks.patch
    - d/p/rpi-cm4-sdhci.patch
    - d/p/rpi-8gb-pci.patch
    - d/p/rpi-maxargs.patch
  * d/p/ubuntu-nitrogen6q2g-config-tweaks.patch: enable SCSI which is now
    required for ENV_IS_IN_FAT

 -- Dave Jones <dave.jones at canonical.com>  Wed, 07 Dec 2022 12:37:17
+0000

** Changed in: u-boot (Ubuntu)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-2347

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to u-boot in Ubuntu.
https://bugs.launchpad.net/bugs/1999039

Title:
  Please merge u-boot 2022.10+dfsg-1 from Debian unstable.

Status in u-boot package in Ubuntu:
  Fix Released

Bug description:
  Please merge u-boot 2022.10+dfsg-1 from Debian unstable.

  Updated changelog and diff against Debian unstable to be attached
  below.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/u-boot/+bug/1999039/+subscriptions