debian: update build and packaging from Debian upstream

[pve-edk2-firmware.git] / debian / patches / brotlicompress-disable.diff

diff --git a/debian/patches/brotlicompress-disable.diff b/debian/patches/brotlicompress-disable.diff
new file mode 100644 (file)
index 0000000..1c131d8
--- /dev/null
+++ b/debian/patches/brotlicompress-disable.diff
@@ -0,0 +1,22 @@
+Description: Do not attempt to compile removed BrotliCompress source
+ BrotliCompress is not currently used, and including an embedded
+ copy of its source could cause false-positives when scanning for
+ security issues. This code is stripped from our orig.tar (at the request
+ of the Ubuntu security team), so we also need to disable the build.
+Author: dann frazier <dannf@debian.org>
+Forwarded: not-needed
+Last-Update: 2019-06-25
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+Index: edk2/BaseTools/Source/C/GNUmakefile
+===================================================================
+--- edk2.orig/BaseTools/Source/C/GNUmakefile
++++ edk2/BaseTools/Source/C/GNUmakefile
+@@ -48,7 +48,6 @@ all: makerootdir subdirs
+ LIBRARIES = Common\r
+ VFRAUTOGEN = VfrCompile/VfrLexer.h\r
+ APPLICATIONS = \\r
+-  BrotliCompress \\r
+   VfrCompile \\r
+   EfiRom \\r
+   GenFfs \\r