mirror of
https://git.yoctoproject.org/poky
synced 2026-07-15 15:37:03 +00:00
lz4: Remove a reference to the rejected CVE-2025-62813
The CVE-2025-62813 is rejected so do not reference it anymore. So keep the patch but without referencing the CVE identifier. The CVE database indicates the following reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. (From OE-Core rev: 99706716626324605c049a9130f705f2090a9f91) Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> (cherry picked from commit 9c840a69b62a5fdffb3679a44d68dd5630b2916c) Signed-off-by: Deepak Rathore <deeratho@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
committed by
Paul Barker
parent
f4122d12cf
commit
6acd7c46b5
-1
@@ -8,7 +8,6 @@ Content-Type: text/plain; charset=UTF-8
|
||||
Content-Transfer-Encoding: 8bit
|
||||
|
||||
Upstream-Status: Backport [Upstream commit https://github.com/lz4/lz4/commit/f64efec011c058bd70348576438abac222fe6c82]
|
||||
CVE: CVE-2025-62813
|
||||
|
||||
Signed-off-by: David Nyström <david.nystrom@est.tech>
|
||||
---
|
||||
@@ -14,8 +14,8 @@ SRCREV = "5ff839680134437dbf4678f3d0c7b371d84f4964"
|
||||
|
||||
SRC_URI = "git://github.com/lz4/lz4.git;branch=release;protocol=https \
|
||||
file://run-ptest \
|
||||
file://CVE-2025-62813.patch \
|
||||
"
|
||||
file://fix-null-error-handling.patch \
|
||||
"
|
||||
UPSTREAM_CHECK_GITTAGREGEX = "v(?P<pver>.*)"
|
||||
|
||||
S = "${WORKDIR}/git"
|
||||
|
||||
Reference in New Issue
Block a user