-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 24 Jun 2026 11:07:15 +0200
Source: u-boot
Binary: u-boot-tools u-boot-tools-dbgsym
Architecture: i386
Version: 2025.01-3+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 u-boot-tools - companion tools for Das U-Boot bootloader
Closes: 1081557 1136954
Changes:
 u-boot (2025.01-3+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2024-42040: buffer overread vulnerability in the DHCP implementation.
     (Closes: #1081557)
   * CVE-2026-46728: mishandles use of unit addresses in a FIT.
     (Closes: #1136954)
Checksums-Sha1:
 216d460e44587081f1d688b61e428f2d4bd3cf5f 841432 u-boot-tools-dbgsym_2025.01-3+deb13u1_i386.deb
 5ab087db9a6f3e283ef710940ad9743d6a321711 346552 u-boot-tools_2025.01-3+deb13u1_i386.deb
 3a65b5398406d5df0d86fae5d7d849caa3bd3fd0 7788 u-boot_2025.01-3+deb13u1_i386-buildd.buildinfo
Checksums-Sha256:
 8111a81af4d42ccef042c841065b5ce1c32868fc81209f3a3c9aa7d51f153a6c 841432 u-boot-tools-dbgsym_2025.01-3+deb13u1_i386.deb
 32e7f7601d55a62f4f8496639e3e815ece703c2f18a302dc7496df5c0f7528cd 346552 u-boot-tools_2025.01-3+deb13u1_i386.deb
 9ee23966423caeba5bbd330602888d2af4145f598c7afabe7829f45ba1acbae5 7788 u-boot_2025.01-3+deb13u1_i386-buildd.buildinfo
Files:
 f7914e2e7255025f6c4d7b39bb8e6bda 841432 debug optional u-boot-tools-dbgsym_2025.01-3+deb13u1_i386.deb
 8786686ce222da0845543608bd48a9db 346552 admin optional u-boot-tools_2025.01-3+deb13u1_i386.deb
 0780ec224509b373d4bfc045eca29bcc 7788 admin optional u-boot_2025.01-3+deb13u1_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=I7vP
-----END PGP SIGNATURE-----