HCE2-SA-2023-0113 Critical HCE 2.0 Security Fix(es): The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT. (CVE-2021-27138) The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. (CVE-2021-27097) nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. (CVE-2022-30767) HCE 2.0 uboot-tools-2021.10-7.hce2.aarch64.rpm uboot-tools-help-2021.10-7.hce2.noarch.rpm uboot-tools-2021.10-7.hce2.x86_64.rpm