PT-2023-36347 · U-Boot · U-Boot

Publicado 2023-11-20 · Atualizado 2023-11-20

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions U-boot version 2023.01

Description The issue occurs when U-boot is upgraded to version 2023.01 on RPI 4/CM4 boards, causing it to fail to boot. The log reports finding the EFI removable media binary efi/boot/bootaa64.efi, but reading the file would overwrite reserved memory. The updated package resolves this issue by allowing U-boot to load properly bootaa64.efi.

Recommendations For U-boot version 2023.01, update the package to the latest version to resolve the boot issue.

Identificadores relacionados

MGASA-2023-0323

Produtos afetados

U-Boot

Referências · 4

• https://advisories.mageia.org/MGASA-2023-0323.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2023-0323 · Aviso do Fabricante
• https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=269181 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=32526 · Nota