An update for uboot-tools is now available for openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-2994 Final 1.0 1.0 2026-07-19 Initial 2026-07-19 2026-07-19 openEuler SA Tool V1.0 2026-07-19 uboot-tools security update An update for uboot-tools is now available for openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1 This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot's environment. Security Fix(es): U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfs_path_buff buffer by returning multiple relative symlink targets that are appended without cumulative length validation. Attackers can send two or more READLINK responses containing relative symlink targets of approximately 1100 bytes each to corrupt adjacent BSS variables including nfs_server_ip, nfs_server_mount_port, nfs_server_port, nfs_our_port, nfs_state, and rpc_id, potentially achieving memory corruption and control over the NFS client state machine.(CVE-2026-29009) An update for uboot-tools is now available for openEuler-24.03-LTS-SP3,openEuler-24.03-LTS-SP4,openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP4,openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High uboot-tools https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2994 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-29009 https://nvd.nist.gov/vuln/detail/CVE-2026-29009 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS-SP1 uboot-images-elf-2024.01-5.oe2403sp3.aarch64.rpm uboot-tools-2024.01-5.oe2403sp3.aarch64.rpm uboot-tools-debuginfo-2024.01-5.oe2403sp3.aarch64.rpm uboot-tools-debugsource-2024.01-5.oe2403sp3.aarch64.rpm uboot-images-elf-2024.01-5.oe2403sp4.aarch64.rpm uboot-tools-2024.01-5.oe2403sp4.aarch64.rpm uboot-tools-debuginfo-2024.01-5.oe2403sp4.aarch64.rpm uboot-tools-debugsource-2024.01-5.oe2403sp4.aarch64.rpm uboot-images-elf-2020.07-12.oe2003sp4.aarch64.rpm uboot-tools-2020.07-12.oe2003sp4.aarch64.rpm uboot-tools-debuginfo-2020.07-12.oe2003sp4.aarch64.rpm uboot-tools-debugsource-2020.07-12.oe2003sp4.aarch64.rpm uboot-images-elf-2021.10-13.oe2203sp4.aarch64.rpm uboot-tools-2021.10-13.oe2203sp4.aarch64.rpm uboot-tools-debuginfo-2021.10-13.oe2203sp4.aarch64.rpm uboot-tools-debugsource-2021.10-13.oe2203sp4.aarch64.rpm uboot-images-elf-2024.01-5.oe2403sp1.aarch64.rpm uboot-tools-2024.01-5.oe2403sp1.aarch64.rpm uboot-tools-debuginfo-2024.01-5.oe2403sp1.aarch64.rpm uboot-tools-debugsource-2024.01-5.oe2403sp1.aarch64.rpm uboot-tools-2024.01-5.oe2403sp3.src.rpm uboot-tools-2024.01-5.oe2403sp4.src.rpm uboot-tools-2020.07-12.oe2003sp4.src.rpm uboot-tools-2021.10-13.oe2203sp4.src.rpm uboot-tools-2024.01-5.oe2403sp1.src.rpm uboot-tools-2024.01-5.oe2403sp3.x86_64.rpm uboot-tools-debuginfo-2024.01-5.oe2403sp3.x86_64.rpm uboot-tools-debugsource-2024.01-5.oe2403sp3.x86_64.rpm uboot-tools-2024.01-5.oe2403sp4.x86_64.rpm uboot-tools-debuginfo-2024.01-5.oe2403sp4.x86_64.rpm uboot-tools-debugsource-2024.01-5.oe2403sp4.x86_64.rpm uboot-tools-2020.07-12.oe2003sp4.x86_64.rpm uboot-tools-debuginfo-2020.07-12.oe2003sp4.x86_64.rpm uboot-tools-debugsource-2020.07-12.oe2003sp4.x86_64.rpm uboot-tools-2021.10-13.oe2203sp4.x86_64.rpm uboot-tools-debuginfo-2021.10-13.oe2203sp4.x86_64.rpm uboot-tools-debugsource-2021.10-13.oe2203sp4.x86_64.rpm uboot-tools-2024.01-5.oe2403sp1.x86_64.rpm uboot-tools-debuginfo-2024.01-5.oe2403sp1.x86_64.rpm uboot-tools-debugsource-2024.01-5.oe2403sp1.x86_64.rpm uboot-images-armv8-2024.01-5.oe2403sp3.noarch.rpm uboot-tools-help-2024.01-5.oe2403sp3.noarch.rpm uboot-images-armv8-2024.01-5.oe2403sp4.noarch.rpm uboot-tools-help-2024.01-5.oe2403sp4.noarch.rpm uboot-images-armv8-2020.07-12.oe2003sp4.noarch.rpm uboot-tools-help-2020.07-12.oe2003sp4.noarch.rpm uboot-images-armv8-2021.10-13.oe2203sp4.noarch.rpm uboot-tools-help-2021.10-13.oe2203sp4.noarch.rpm uboot-images-armv8-2024.01-5.oe2403sp1.noarch.rpm uboot-tools-help-2024.01-5.oe2403sp1.noarch.rpm U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfs_path_buff buffer by returning multiple relative symlink targets that are appended without cumulative length validation. Attackers can send two or more READLINK responses containing relative symlink targets of approximately 1100 bytes each to corrupt adjacent BSS variables including nfs_server_ip, nfs_server_mount_port, nfs_server_port, nfs_our_port, nfs_state, and rpc_id, potentially achieving memory corruption and control over the NFS client state machine. 2026-07-19 CVE-2026-29009 openEuler-24.03-LTS-SP3 openEuler-24.03-LTS-SP4 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS-SP1 High 8.2 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H uboot-tools security update 2026-07-19 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2994