Please pull net-20260603

Jerome Forissier jerome.forissier at arm.com
Wed Jun 3 18:15:16 CEST 2026


Hi Tom,

The following changes since commit 30b77f6aa146c96b831cb4ece038130b655b6a41:

  CI: Sage: Drop rpi_arm64 lwIP variants (2026-05-29 11:03:25 -0600)

are available in the Git repository at:

  https://source.denx.de/u-boot/custodians/u-boot-net.git/ tags/net-20260603

for you to fetch changes up to fac46e5aa7c448444764044467e0cceb9d12f3f0:

  boot: pxe_utils: Fix potential initrd_filesize buffer overflow (2026-06-03 17:22:24 +0200)

----------------------------------------------------------------
Pull request net-20260603.

net:
- ti: icssg: Fix portname buffer overflow
- pxe: Fix potential initrd_filesize buffer overflow

net-legacy:
- bootp, dhcpv6: Prevent out-of-bound reads and buffer overflow
- sntp: Check packet length in sntp_handler

----------------------------------------------------------------
Francois Berder (6):
      net: ti: icssg: Fix portname buffer overflow
      net: sntp: Check packet length in sntp_handler
      net: dhcpv6: Prevent buffer overflow during BOOTFILE_URL parsing
      net: dhcpv6: Prevent out-of-bounds reads while parsing options
      net: bootp: Prevent out-of-bounds read in dhcp_message_type
      boot: pxe_utils: Fix potential initrd_filesize buffer overflow

 boot/pxe_utils.c              |  2 +-
 drivers/net/ti/icssg_prueth.c |  5 +++--
 net/bootp.c                   |  8 ++++----
 net/dhcpv6.c                  | 32 ++++++++++++++++++++++++++++++++
 net/sntp.c                    |  3 +++
 5 files changed, 43 insertions(+), 7 deletions(-)

CI link: https://source.denx.de/u-boot/custodians/u-boot-net/-/pipelines/30329

Thanks,
-- 
Jerome


More information about the U-Boot mailing list