BSD PortsVulnerable: version a8e0c4a17c197cc85922a292f16365733e75de64 is affected by 20 known vulnerabilities. See below.
wip/u-boot-rock5b a8e0c4a17c197cc85922a292f16365733e75de64 NetBSD
- System
- NetBSD
- Repository
- pkgsrc-wip
- Categories
- wip
Description
U-Boot is a bootloader for embedded boards based on PowerPC, ARM, MIPS and several other processors, which can be installed in a boot ROM and used to initialize and test the hardware or to download and run application code.
This package provides Collabora's U-Boot for the rk3588-based Rock 5B from Radxa.
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/u-boot-rock5b && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right (to build, as it needs nothing to run); at most 8 of each. "Dependencies" below lists them all.
Dependencies
Build dependencies 1
No port depends on this one.
Known vulnerabilities 20
- u-boot: multiple-vulnerabilities
- u-boot: weak-cryptography (CVE-2017-3225)
- u-boot: denial-of-service (CVE-2017-3226)
- u-boot: input-validation (CVE-2018-1000205)
- u-boot: denial-of-service (CVE-2018-18439)
- u-boot: denial-of-service (CVE-2018-18440)
- u-boot: buffer-overflow (CVE-2019-11059)
- u-boot: insufficiently-random-numbers (CVE-2019-11690)
- u-boot: stack-overflow (CVE-2019-13103)
- u-boot: out-of-bounds-write (CVE-2019-13104)
- u-boot: double-free (CVE-2019-13105)
- u-boot: out-of-bounds-write (CVE-2019-13106)
- u-boot: security-bypass (CVE-2020-10648)
- u-boot: double-free (CVE-2020-8432)
- u-boot: unspecified (CVE-2021-27097)
- u-boot: unspecified (CVE-2021-27138)
- u-boot: buffer-overflow (CVE-2022-2347)
- u-boot: buffer-overflow (CVE-2022-30552)
- u-boot: buffer-overflow (CVE-2022-30767)
- u-boot: buffer-overflow (CVE-2022-30790)