Re: [PATCH 0/4] zlib: Address CVE-2016-9841

Tom Rini
2024-03-28T20:02:12Z

[-- Attachment #1: Type: text/plain, Size: 759 bytes --]

On Wed, Mar 27, 2024 at 03:14:49PM +0100, Michal Simek wrote:
> Hi,
>
> it looks like that only CVE-2016-9841 is not fixed and this series is
> trying to address it. The first two patches are just preparation based on
> changes which happened in past. The third one is actual fix and the last
> one is following what has been done in Linux kernel long time ago and don't
> use incorrect zlib version string.
>
> I tested it with and I can't see any issue.
> ./test/py/test.py --bd sandbox --build -s
>
> And gitlab CI is also not showing any issue.

Thanks for taking this on. I've given it a quick spin on some Pi
platforms as well as before/after and I see that it's also reducing the
overall binary size everywhere as well.

--
Tom

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 659 bytes --]