-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 22 Jun 2026 10:38:07 +0200 Source: u-boot Binary: u-boot-tools u-boot-tools-dbgsym Architecture: s390x Version: 2023.01+dfsg-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Andreas Henriksson Description: u-boot-tools - companion tools for Das U-Boot bootloader Closes: 1056750 1081557 1136954 Changes: u-boot (2023.01+dfsg-2+deb12u3) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2024-42040: buffer overread vulnerability in the DHCP implementation. (Closes: #1081557) * CVE-2026-46728: mishandles use of unit addresses in a FIT. (Closes: #1136954) * Remove avr32 arch support removed in dpkg 1.22.0 (Closes: #1056750) - now also leads to dak rejecting uploads even for older suites Checksums-Sha1: 22b7fa3ae0e1eb1a837aeb3ff433b8ce06a56697 737216 u-boot-tools-dbgsym_2023.01+dfsg-2+deb12u3_s390x.deb d9e5598d700602c6c07aba9258e68b43b4e1acb3 189100 u-boot-tools_2023.01+dfsg-2+deb12u3_s390x.deb 51dab964f45aa66d73eb763d20f8675d87a2e416 7934 u-boot_2023.01+dfsg-2+deb12u3_s390x-buildd.buildinfo Checksums-Sha256: 88e148dea309a01ccd046647f338b0cd5864ec75a76b3c838366601b25e2827f 737216 u-boot-tools-dbgsym_2023.01+dfsg-2+deb12u3_s390x.deb 2ab039dc3ffd108abf83be41af75f664ecf0182772c760173104b168e1e7b98e 189100 u-boot-tools_2023.01+dfsg-2+deb12u3_s390x.deb 28ea343a7b773ebe02232456e173605f1bd4cbc475feeab5e42e6d93efcc4d4e 7934 u-boot_2023.01+dfsg-2+deb12u3_s390x-buildd.buildinfo Files: 0d5cc3ab6ae41cb4874311a470f47f74 737216 debug optional u-boot-tools-dbgsym_2023.01+dfsg-2+deb12u3_s390x.deb 76a310c23bd4ff9f443ab05eddcb083a 189100 admin optional u-boot-tools_2023.01+dfsg-2+deb12u3_s390x.deb deb697f022f77e8c13cac38aa64bacd9 7934 admin optional u-boot_2023.01+dfsg-2+deb12u3_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmo4/eIACgkQkaCrxAR3 BY0NLBAAlXDEGqqszION8zbXycSLp/U3rewx8584tMaHTmBCFirTIuCNj0G0I3M2 yqlBwln0/V3N2LPnZ4s+AMutW6MUbzps2wRUEm77ceyhdaEcaMAuz1jqyzAfjsM/ n9w9rKFseXBmDqYHeVgXlYQTy1otfKDAabGIFyNti7OE/NV2vm4hA3uf1634DLiG oRRgRI2jRwVJ/EWWmH0A/Togk1P8ZYufXz8XXmZppr5WuwSuNaTjI7LGfUYUaNrc st7IjAGGrA12Jxr6gH5Zya0ZgKMLUYXTIMZn4vv25uK5jxkjCk5JYxgfznva08cf pndhSOzJ9kIQz4qT3Jvor2KLf2p8Ut0brdowIrFFdsVdeDkB6R0CZ12YErTl+4ew 6Z/WT+0xIldan5CwFD6k5kFHhnf6h4lbc3FCMAOodEXOs8LNBiY2QljmjFa89anU rDoQPWHtM9/8JO/EE/oyggupD0B9ctUvngoJ0K03+WCwyc720oyuwjgCSaKn+1wz S/BKCu9OkB7EwOxjNkWKaJtD/sj+uApm1XNKKVl1nsWXmZpXmO8BvtWezWLlgue3 GAn2/QJC9t2na0h/NpGtVDzZPoQr43DTE1Z4zRyNYLsHs866dS8L7hOeaDP96Ykq elaGsRcA3PKwv+pWtEf3y9xBbNlpVArJpv7yGhd0dFGP2+I8Tlk= =mDgy -----END PGP SIGNATURE-----