tocsin

Debian/u-boot: medium 6.8

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.

Action: Upgrade u-boot to 2023.01+dfsg-2+deb12u2 or later.

Affected

introducedfixedlast affected
02023.01+dfsg-2+deb12u2-

Fixed versions

2023.01+dfsg-2+deb12u2

Sources

published · modified · JSON