-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 24 Jun 2026 11:07:15 +0200
Source: u-boot
Binary: u-boot-tools u-boot-tools-dbgsym
Architecture: amd64
Version: 2025.01-3+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 u-boot-tools - companion tools for Das U-Boot bootloader
Closes: 1081557 1136954
Changes:
 u-boot (2025.01-3+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2024-42040: buffer overread vulnerability in the DHCP implementation.
     (Closes: #1081557)
   * CVE-2026-46728: mishandles use of unit addresses in a FIT.
     (Closes: #1136954)
Checksums-Sha1:
 fba3424f72e2b1c721774cbda5275a63bd6dc844 946572 u-boot-tools-dbgsym_2025.01-3+deb13u1_amd64.deb
 d303134b65fe4671b389589436d1ca487b37d9c7 338932 u-boot-tools_2025.01-3+deb13u1_amd64.deb
 cee7bfba5722a2d161f885c349a31e2e92c8ecca 7887 u-boot_2025.01-3+deb13u1_amd64-buildd.buildinfo
Checksums-Sha256:
 efe602ff8c6784ae64510abe4ac5afd3ec1a90a7d2859d34d89caf42297bc8cb 946572 u-boot-tools-dbgsym_2025.01-3+deb13u1_amd64.deb
 059e15b46ae05c13d3d255f8a8d0ec559206d76979375a533423002992183a62 338932 u-boot-tools_2025.01-3+deb13u1_amd64.deb
 ccbf38492aa3a0e398056450e91a89a5ff3e1478f9fcc69402807d9823042671 7887 u-boot_2025.01-3+deb13u1_amd64-buildd.buildinfo
Files:
 c9bdcae0f97369aff5bdb9b47fd7b2ac 946572 debug optional u-boot-tools-dbgsym_2025.01-3+deb13u1_amd64.deb
 517b0fc33aaa57ce5bfd37a924f1d814 338932 admin optional u-boot-tools_2025.01-3+deb13u1_amd64.deb
 7882203042c077cdd423ed457196b8c2 7887 admin optional u-boot_2025.01-3+deb13u1_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmpYp94ACgkQTwt/65ON
6zcB8A/+O8MXMuKn0OWyIM16C/N2BgY5i0SpoisRyXxhCcGbEOAyI/leWemH/5zn
yXyqiKX9NjMGgFW0sKs37Oy++QnkSGvR/pTM325TdkArrQC6HZXVNUz0JsT85vh1
GCtAeM7QZ/1eRLXNo3Ze8PdS1CQyYiiwvFrwxFjrsSs9N0gTGqnJEd3NSxJ/+WxO
GWl6N3DfR5phXdnzU5z/hK4J26KyxdQr/kVzniFiIUc1TSl3DHGn12Rc/hOF8Yi+
zY9dc5B0VsMM0l75EX5hAOvqgEalIG4XiJkRFsfRNvATA3d89FVCFeZReclhdzXI
A9pCFVZaCpCbdKiR+n1V+GA5iXF5xnXE839i34HKrdmRr/2KDsRTNXIXbde9aRVO
T43KK5cu3l1bSqFbu419GUMZcCfYKDqjQvBfMhvaw3pvuMZI0e2OMc/LHcRyL1SU
hLfgiEq54KfWT+wLJ8X75/Py9fqOMM2lTO7/NKdjXkwSagMnPEndhOKSKtdzWZWX
Py9MVh09IyL3zDieIrVsYTr2ypS1ox05a5nrU9Th6xE2sMsm2Z8eg82+lbibbwcO
Xc4cYdgfRk4S7j3t1jq89VkvbksxUXhHnb8Y7p2kjY0s/Zi6jdlfvA+zauKo7ESw
NU4xdoAhBLESLgGRcPEoLovz73cO5Rt9CfGthyo6bjkq39A+v+w=
=hhl6
-----END PGP SIGNATURE-----