OESA-2026-2994

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2994
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-2994.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-2994
Upstream
Published
2026-07-19T03:47:19Z
Modified
2026-07-19T04:00:18.328053423Z
Summary
uboot-tools security update
Details

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment.

Security Fix(es):

U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfsreadlinkreply() (net/nfs-common.c) when CONFIGCMDNFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfspathbuff buffer by returning multiple relative symlink targets that are appended without cumulative length validation. Attackers can send two or more READLINK responses containing relative symlink targets of approximately 1100 bytes each to corrupt adjacent BSS variables including nfsserverip, nfsservermountport, nfsserverport, nfsourport, nfsstate, and rpc_id, potentially achieving memory corruption and control over the NFS client state machine.(CVE-2026-29009)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
uboot-tools

Package

Name
uboot-tools
Purl
pkg:rpm/openEuler/uboot-tools&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2020.07-12.oe2003sp4

Ecosystem specific 

{
    "noarch": [
        "uboot-images-armv8-2020.07-12.oe2003sp4.noarch.rpm",
        "uboot-tools-help-2020.07-12.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "uboot-images-elf-2020.07-12.oe2003sp4.aarch64.rpm",
        "uboot-tools-2020.07-12.oe2003sp4.aarch64.rpm",
        "uboot-tools-debuginfo-2020.07-12.oe2003sp4.aarch64.rpm",
        "uboot-tools-debugsource-2020.07-12.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "uboot-tools-2020.07-12.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "uboot-tools-2020.07-12.oe2003sp4.x86_64.rpm",
        "uboot-tools-debuginfo-2020.07-12.oe2003sp4.x86_64.rpm",
        "uboot-tools-debugsource-2020.07-12.oe2003sp4.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2994.json"
openEuler:22.03-LTS-SP4
uboot-tools

Package

Name
uboot-tools
Purl
pkg:rpm/openEuler/uboot-tools&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2021.10-13.oe2203sp4

Ecosystem specific 

{
    "noarch": [
        "uboot-images-armv8-2021.10-13.oe2203sp4.noarch.rpm",
        "uboot-tools-help-2021.10-13.oe2203sp4.noarch.rpm"
    ],
    "aarch64": [
        "uboot-images-elf-2021.10-13.oe2203sp4.aarch64.rpm",
        "uboot-tools-2021.10-13.oe2203sp4.aarch64.rpm",
        "uboot-tools-debuginfo-2021.10-13.oe2203sp4.aarch64.rpm",
        "uboot-tools-debugsource-2021.10-13.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "uboot-tools-2021.10-13.oe2203sp4.x86_64.rpm",
        "uboot-tools-debuginfo-2021.10-13.oe2203sp4.x86_64.rpm",
        "uboot-tools-debugsource-2021.10-13.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "uboot-tools-2021.10-13.oe2203sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2994.json"
openEuler:24.03-LTS-SP1
uboot-tools

Package

Name
uboot-tools
Purl
pkg:rpm/openEuler/uboot-tools&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2024.01-5.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "uboot-images-armv8-2024.01-5.oe2403sp1.noarch.rpm",
        "uboot-tools-help-2024.01-5.oe2403sp1.noarch.rpm"
    ],
    "aarch64": [
        "uboot-images-elf-2024.01-5.oe2403sp1.aarch64.rpm",
        "uboot-tools-2024.01-5.oe2403sp1.aarch64.rpm",
        "uboot-tools-debuginfo-2024.01-5.oe2403sp1.aarch64.rpm",
        "uboot-tools-debugsource-2024.01-5.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "uboot-tools-2024.01-5.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "uboot-tools-2024.01-5.oe2403sp1.x86_64.rpm",
        "uboot-tools-debuginfo-2024.01-5.oe2403sp1.x86_64.rpm",
        "uboot-tools-debugsource-2024.01-5.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2994.json"
openEuler:24.03-LTS-SP3
uboot-tools

Package

Name
uboot-tools
Purl
pkg:rpm/openEuler/uboot-tools&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2024.01-5.oe2403sp3

Ecosystem specific 

{
    "noarch": [
        "uboot-images-armv8-2024.01-5.oe2403sp3.noarch.rpm",
        "uboot-tools-help-2024.01-5.oe2403sp3.noarch.rpm"
    ],
    "aarch64": [
        "uboot-images-elf-2024.01-5.oe2403sp3.aarch64.rpm",
        "uboot-tools-2024.01-5.oe2403sp3.aarch64.rpm",
        "uboot-tools-debuginfo-2024.01-5.oe2403sp3.aarch64.rpm",
        "uboot-tools-debugsource-2024.01-5.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "uboot-tools-2024.01-5.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "uboot-tools-2024.01-5.oe2403sp3.x86_64.rpm",
        "uboot-tools-debuginfo-2024.01-5.oe2403sp3.x86_64.rpm",
        "uboot-tools-debugsource-2024.01-5.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2994.json"
openEuler:24.03-LTS-SP4
uboot-tools

Package

Name
uboot-tools
Purl
pkg:rpm/openEuler/uboot-tools&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2024.01-5.oe2403sp4

Ecosystem specific 

{
    "noarch": [
        "uboot-images-armv8-2024.01-5.oe2403sp4.noarch.rpm",
        "uboot-tools-help-2024.01-5.oe2403sp4.noarch.rpm"
    ],
    "aarch64": [
        "uboot-images-elf-2024.01-5.oe2403sp4.aarch64.rpm",
        "uboot-tools-2024.01-5.oe2403sp4.aarch64.rpm",
        "uboot-tools-debuginfo-2024.01-5.oe2403sp4.aarch64.rpm",
        "uboot-tools-debugsource-2024.01-5.oe2403sp4.aarch64.rpm"
    ],
    "src": [
        "uboot-tools-2024.01-5.oe2403sp4.src.rpm"
    ],
    "x86_64": [
        "uboot-tools-2024.01-5.oe2403sp4.x86_64.rpm",
        "uboot-tools-debuginfo-2024.01-5.oe2403sp4.x86_64.rpm",
        "uboot-tools-debugsource-2024.01-5.oe2403sp4.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-2994.json"