File _patchinfo of Package patchinfo.25181
<patchinfo incident="25181">
<issue tracker="cve" id="2022-30552"/>
<issue tracker="cve" id="2022-30790"/>
<issue tracker="bnc" id="1200364">VUL-0: CVE-2022-30790: u-boot-rpi3,u-boot: Hole Descriptor Overwrite in IP Packet Defragmentation Leads to Arbitrary Out of Bounds Write Primitive</issue>
<issue tracker="bnc" id="1200363">VUL-0: CVE-2022-30552: u-boot-rpi3,u-boot: Large buffer overflow leads to DoS in IP Packet Defragmentation Code</issue>
<issue tracker="cve" id="2022-34835"/>
<issue tracker="bnc" id="1201214">VUL-0: CVE-2022-34835: u-boot,u-boot-rpi3: integer overflow in do_i2c_md() may lead to arbitrary code execution</issue>
<packager>mbrugger</packager>
<rating>critical</rating>
<category>security</category>
<summary>Security update for u-boot</summary>
<description>This update for u-boot fixes the following issues:
- CVE-2022-30790: Fixed an arbitrary out-of-bounds write in the IP defragmentation (bsc#1200364).
- CVE-2022-30552: Fixed an out-of-bounds write in the IP defragmentation (bsc#1200363).
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
</description>
</patchinfo>