tocsin

Debian/u-boot: low 2.4

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

Action: Upgrade u-boot to 2023.01+dfsg-2+deb12u2 or later.

Affected

introducedfixedlast affected
02023.01+dfsg-2+deb12u2-

Fixed versions

2023.01+dfsg-2+deb12u2

Sources

published · modified · JSON