v4: - add fix for CVE-2026-16288 - fix format string (Luigi). v3: - just drop debug function instead of trying to fix it. - add three more CVE fixes.
Gerd Hoffmann (6): hw/uefi: add sanity check hw/uefi: remove debug function hw/uefi: check lower limit for signature list size hw/uefi: account variable policy entries against storage size hw/uefi: add post_load checks hw/uefi: make SetupMode read-only hw/uefi/var-service-auth.c | 7 ++++ hw/uefi/var-service-core.c | 14 +++++++- hw/uefi/var-service-json.c | 5 +++ hw/uefi/var-service-policy.c | 68 ++++++++++++++++------------------- hw/uefi/var-service-siglist.c | 3 ++ hw/uefi/var-service-vars.c | 19 ++++++++++ 6 files changed, 78 insertions(+), 38 deletions(-) -- 2.55.0
