ZDI-CAN-24679: New Vulnerability Report

[Tom Rini]

On Fri, Jun 20, 2025 at 02:23:26PM +0000, zdi-disclosures at trendmicro.com wrote:

> Hi,
> Can you confirm if any fix was made for this vulnerability?

There's still just 4 likely rarely used platforms which enable JFFS2 and
so we've not had any interest in looking at the relevant code.

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20250620/3e7d8d7a/attachment.sig>