minilzo: Update to minilzo-2.08

Browse Source

This patch updates the miniLZO library to a newer version, which among other
things fixes "CVE-2014-4607 - lzo: lzo1x_decompress_safe() integer overflow"
that is present in the current used in GRUB.

It also updates the "GRUB Developers Manual", to mention that the library is
used and describes the process to update it to a newer release when needed.

Resolves: http://savannah.gnu.org/bugs/?42635

Signed-off-by: Peter Jones <pjones@redhat.com>
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

...

This commit is contained in:

Peter Jones authored and Daniel Kiper committed 2020-02-11 21:30:30 +01:00

1 parent 598de14d93

commit 3165efcfc2

5 files changed

+4769 -2129

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

grub-core/lib/minilzo/minilzo.c

+2775 -1284

File diff suppressed because it is too large. Load diff