On Tue Oct 13, 2026 at 11:58 AM CEST, Roopa via lists.openembedded.org Kalmath wrote: > Backport commit[1] which fixes this vulnerability as mentioned NVD > report in [2]. > > [1] > https://git.u-boot-project.org/u-boot/u-boot/-/commit/d6694018eaddefac6aae974f9cec72fd6e58f1bc > [2] https://nvd.nist.gov/vuln/detail/cve-2026-29009 > > Signed-off-by: Roopa Kalmath <[email protected]> > --- > .../u-boot/files/CVE-2026-29009.patch | 38 +++++++++++++++++++ > meta/recipes-bsp/u-boot/u-boot_2026.01.bb | 4 +- > 2 files changed, 41 insertions(+), 1 deletion(-) > create mode 100644 meta/recipes-bsp/u-boot/files/CVE-2026-29009.patch > > diff --git a/meta/recipes-bsp/u-boot/files/CVE-2026-29009.patch > b/meta/recipes-bsp/u-boot/files/CVE-2026-29009.patch > new file mode 100644 > index 0000000000..afdbc80519 > --- /dev/null > +++ b/meta/recipes-bsp/u-boot/files/CVE-2026-29009.patch > @@ -0,0 +1,38 @@ > +From 2b88f08722584cf235f7dacaa190af3d24deb40f Mon Sep 17 00:00:00 2001 > +From: Roopa Kalmath <[email protected]> ^ (again) please keep the original author
> +Date: Fri, 9 Oct 2026 08:38:23 +0000 > +Subject: net: nfs: fix buffer overflow in nfs_readlink_reply() > + (again) please keep the original commit message > +CVE: CVE-2026-29009 > + > +Upstream-Status: Backport > [https://git.u-boot-project.org/u-boot/u-boot/-/commit/d6694018eaddefac6aae974f9cec72fd6e58f1bc] > + > +Fixes: cf3a4f1e86 ("net: nfs: Fix CVE-2019-14195") > +Cc: [email protected] > +Signed-off-by: Sebastian Alba Vives <[email protected]> > +Reviewed-by: Jerome Forissier <[email protected]> > +Signed-off-by: Roopa Kalmath <[email protected]> -- Yoann Congal Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#247714): https://lists.openembedded.org/g/openembedded-core/message/247714 Mute This Topic: https://lists.openembedded.org/mt/121729890/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
