Skip to content

Commit

Permalink
[Dep] Update zlib to 1.2.12 to fix CVE-2018-25032 notice
Browse files Browse the repository at this point in the history 
**Purpose:**
- zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. This vulnerability is based on memory corruption, which could also be triggered inadvertently and cause malfunctions.

- Ref Security Issue:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032
  • Loading branch information
@Meltie2013 @billy1arm
Meltie2013 authored and billy1arm committed Apr 15, 2022
1 parent 9e93176 commit a631176
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion dep
Submodule dep updated 20 files
+82 −82 bzip2/bzlib.h
+12 −12 bzip2/bzlib_private.h
+1 −1 zlib/CMakeLists.txt
+966 −292 zlib/crc32.c
+9,441 −436 zlib/crc32.h
+78 −30 zlib/deflate.c
+12 −15 zlib/deflate.h
+3 −2 zlib/gzguts.h
+5 −3 zlib/gzlib.c
+5 −7 zlib/gzread.c
+25 −13 zlib/gzwrite.c
+2 −1 zlib/infback.c
+14 −14 zlib/inffast.c
+39 −8 zlib/inflate.c
+3 −2 zlib/inflate.h
+3 −3 zlib/inftrees.c
+27 −48 zlib/trees.c
+123 −100 zlib/zlib.h
+2 −2 zlib/zutil.c
+12 −9 zlib/zutil.h

0 comments on commit a631176

Please sign in to comment.