On Mon, Jul 20, 2026 at 04:32:36PM +0200, Gerd Hoffmann wrote:
v4:
- add fix for CVE-2026-16288
- fix format string (Luigi).
v3:
- just drop debug function instead of trying to fix it.
- add three more CVE fixes.
Gerd Hoffmann (6):
hw/uefi: add sanity check
hw/uefi: remove debug function
hw/uefi: check lower limit for signature list size
hw/uefi: account variable policy entries against storage size
hw/uefi: add post_load checks
hw/uefi: make SetupMode read-only
hw/uefi/var-service-auth.c | 7 ++++
hw/uefi/var-service-core.c | 14 +++++++-
hw/uefi/var-service-json.c | 5 +++
hw/uefi/var-service-policy.c | 68 ++++++++++++++++-------------------
hw/uefi/var-service-siglist.c | 3 ++
hw/uefi/var-service-vars.c | 19 ++++++++++
6 files changed, 78 insertions(+), 38 deletions(-)
--
2.55.0
Acked-by: Luigi Leonardi <[email protected]>
