Add security fixes

Hi Heinrich,

Thanks for contacting us and providing a debdiff. Are you also going to provide a debdiff for jammy and kinetic?

Hello Eduardo,

I would prefer to upgrade Jammy and Kinetic to

u-boot-nezha-2022.10-1089-g528ae9bc6c-0ubuntu2.debdiff

I have already tested this version of U-Boot with Jammy on the Nezha D1 and LicheeRV boards.

We have the build dependency OpenSBI in the Kinetic security pocket. It would have to be rebuilt in the Jammy security pocket.

Best regards

Heinrich

Can I please make this bug public?

I have update the debdiff to build for Ubuntu Mantic

This bug was fixed in the package u-boot-nezha - 2022.10-1089-g528ae9bc6c-0ubuntu2

---------------
u-boot-nezha (2022.10-1089-g528ae9bc6c-0ubuntu2) mantic; urgency=medium

  * Add security fixes (LP: #2012644)
    d/p/0001-usb-gadget-dfu-Fix-the-unchecked-length-field.patch
    d/p/0001-net-actually-better-deal-with-CVE-2022-30790-30552.patch
    d/p/0001-usb-gadget-dfu-Fix-check-of-transfer-direction.patch
  * Enable sbi command
    d/p/0001-enable-sbi-command.patch

 -- Heinrich Schuchardt <email address hidden> Mon, 19 Jun 2023 16:37:50 +0200

Hey Heinrich! Could you provide debdiffs for the stable series as well so that the security team can pick those up? (there is a lunar one, but it needs updating per the version number being used for mantic already I suppose)

This is the debdiff for Lunar

Debdiff for Jammy

u-boot-nezha - 2022.10-1089-g528ae9bc6c-0ubuntu1.23.04.0 (Lunar) is available in ppa:xypron/merge-from-debian.

u-boot-nezha - 2022.04+git20220405.7446a472-0ubuntu0.3 (Jammy) is available in ppa:xypron/gnu-efi

Unsubscribing ubuntu-sponsors and adjusting titles as this should not be SRUs but go via security as per comment #7

Hi Heinrich,

I see that you have u-boot-nezha for both jammy and lunar sitting in -proposed.
Whenever that gets published we will need a new set of debdiffs generated against this newer version.

Hi Heinrich,

Now the the packages are out of proposed, I've adapted your debdiffs for the new versions and have uploaded them to the security proposed ppa here:

https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+packages

Could you please test them and let me know if they work as expected, and I'll publish them as security updates.

Thanks!

Thanks Marc, I will test tomorrow.

Hello Marc,

I have tested

u-boot-nezha - 2022.10-1089-g528ae9bc6c-0ubuntu1.23.04.2
u-boot-nezha - 2022.04+git20220405.7446a472-0ubuntu0.4

on both Nezha D1 and LicheeRV Dock and experienced no problems in booting. USB is functional.

The OpenSBI binary is built into the U-Boot binaries. Please, ensure that the same OpenSBI that you used for your PPA builds is available for the build in the security archive.

Best regards

Heinrich

This bug was fixed in the package u-boot-nezha - 2022.04+git20220405.7446a472-0ubuntu0.4

---------------
u-boot-nezha (2022.04+git20220405.7446a472-0ubuntu0.4) jammy-security; urgency=medium

  [ Heinrich Schuchardt ]
  * Add security fixes (LP: #2012644)
    d/p/0001-net-Check-for-the-minimum-IP-fragmented-datagram-siz.patch
    d/p/0001-net-compare-received-length-to-sizeof-ip_hdr-not-siz.patch
    d/p/0001-usb-gadget-dfu-Fix-the-unchecked-length-field.patch
    d/p/0001-net-actually-better-deal-with-CVE-2022-30790-30552.patch
    d/p/0001-usb-gadget-dfu-Fix-check-of-transfer-direction.patch

 -- Marc Deslauriers <email address hidden> Tue, 28 Nov 2023 13:16:53 -0500

This bug was fixed in the package u-boot-nezha - 2022.10-1089-g528ae9bc6c-0ubuntu1.23.04.2

---------------
u-boot-nezha (2022.10-1089-g528ae9bc6c-0ubuntu1.23.04.2) lunar-security; urgency=medium

  [ Heinrich Schuchardt ]
  * Add security fixes (LP: #2012644)
    d/p/0001-usb-gadget-dfu-Fix-the-unchecked-length-field.patch
    d/p/0001-net-actually-better-deal-with-CVE-2022-30790-30552.patch
    d/p/0001-usb-gadget-dfu-Fix-check-of-transfer-direction.patch

 -- Marc Deslauriers <email address hidden> Tue, 28 Nov 2023 13:17:18 -0500