> If you fix the vulnerabilities please also make sure to include the > CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.
I've submitted the backports for CVE-2025-70290, CVE-2025-70292 and CVE-2025-70293 in this MR, with the CVE IDs in debian/changelog: https://salsa.debian.org/debian/u-boot/-/merge_requests/54 CVE-2025-70291 does not apply to 2025.01, which has no do_mv(). -- Troy Mitchell
