1 files changed, 18 insertions, 0 deletions
diff --git a/meta-openbmc-mods/meta-ast2600/recipes-bsp/u-boot/u-boot-aspeed-sdk_%.bbappend b/meta-openbmc-mods/meta-ast2600/recipes-bsp/u-boot/u-boot-aspeed-sdk_%.bbappend
index 01f904a13..ce22b2057 100644
--- a/meta-openbmc-mods/meta-ast2600/recipes-bsp/u-boot/u-boot-aspeed-sdk_%.bbappend
+++ b/meta-openbmc-mods/meta-ast2600/recipes-bsp/u-boot/u-boot-aspeed-sdk_%.bbappend
@@ -1,5 +1,6 @@
 COMPATIBLE_MACHINE = "intel-ast2600"
 FILESEXTRAPATHS_append_intel-ast2600:= "${THISDIR}/files:"
+FILESEXTRAPATHS_append_intel-ast2600:= "${THISDIR}/files/CVE-2020-10648:"
 
 # the meta-phosphor layer adds this patch, which conflicts
 # with the intel layout for environment
@@ -21,6 +22,23 @@ SRC_URI_append_intel-ast2600 = " \
     file://0013-Add-a-workaround-to-cover-UART-interrupt-bug-in-AST2.patch \
     file://0014-Add-a-workaround-to-cover-eSPI-OOB-free-bug-in-AST26.patch \
     file://0015-net-phy-realtek-Change-LED-configuration.patch \
+    file://0016-Add-system-reset-status-support.patch \
+    file://0017-Manufacturing-mode-physical-presence-detection.patch \
+    file://0018-Add-a-workaround-to-cover-VGA-memory-size-bug-in-A0.patch \
+    file://0019-Apply-WDT-reset-mask-to-reset-needed-controller.patch \
+    file://0020-Add-BMC-running-indicator-LED-control.patch \
+    file://0022-Reboot-into-UBOOT-on-Watchdog-Failures.patch \
+    "
+
+# CVE-2020-10648 vulnerability fix
+SRC_URI_append_intel-ast2600 = " \
+    file://0001-image-Correct-comment-for-fit_conf_get_node.patch \
+    file://0002-image-Be-a-little-more-verbose-when-checking-signatu.patch \
+    file://0003-image-Return-an-error-message-from-fit_config_verify.patch \
+    file://0007-image-Check-hash-nodes-when-checking-configurations.patch \
+    file://0008-image-Load-the-correct-configuration-in-fit_check_si.patch \
+    file://0009-fit_check_sign-Allow-selecting-the-configuration-to-.patch \
+    file://0012-image-Use-constants-for-required-and-key-name-hint.patch \
     "
 
 PFR_SRC_URI = " \