summaryrefslogtreecommitdiff
path: root/recipes-bsp/imx-mkimage/imx-mkimage-patches.inc
diff options
context:
space:
mode:
Diffstat (limited to 'recipes-bsp/imx-mkimage/imx-mkimage-patches.inc')
-rw-r--r--recipes-bsp/imx-mkimage/imx-mkimage-patches.inc9
1 files changed, 9 insertions, 0 deletions
diff --git a/recipes-bsp/imx-mkimage/imx-mkimage-patches.inc b/recipes-bsp/imx-mkimage/imx-mkimage-patches.inc
new file mode 100644
index 0000000..b05a1ad
--- /dev/null
+++ b/recipes-bsp/imx-mkimage/imx-mkimage-patches.inc
@@ -0,0 +1,9 @@
+FILESEXTRAPATHS:prepend := "${THISDIR}/files/:"
+
+# additional patches addressing U-Boot secure boot SPL Authentication Vulnerability (CVE-2023-39902)
+# (plus patches LFU-573* in downstream U-Boot)
+SRC_URI:append = " \
+ file://0001-LFOPTEE-126-Add-spl-and-sld-Blocks-info.patch \
+ file://0002-LFU-573-1-imx8m-Generate-hash-of-FIT-FDT-structure-t.patch\
+ file://0003-LFU-573-2-imx8m-Reserve-new-IVT-CSF-for-FIT-FDT-sign.patch \
+"