Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update zlib to 1.2.13. #10786

Merged
merged 1 commit into from
Oct 20, 2022
Merged

Update zlib to 1.2.13. #10786

merged 1 commit into from
Oct 20, 2022

Conversation

benjaminp
Copy link
Contributor

This pulls in the fix for CVE-2022-37434.

This pulls in the fix for CVE-2022-37434.
@googleberg googleberg added bazel dependencies Pull requests that update a dependency file labels Oct 20, 2022
strip_prefix = "zlib-1.2.13",
urls = [
"https://github.com/madler/zlib/releases/download/v1.2.13/zlib-1.2.13.tar.xz",
"https://zlib.net/zlib-1.2.13.tar.xz",
Copy link
Member

@deannagarcia deannagarcia Oct 20, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why did this URL need to be added?

Copy link
Contributor Author

@benjaminp benjaminp Oct 20, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It doesn't need to be added, but it does allow Bazel to fallback if the github.com url doesn't work.

@deannagarcia
Copy link
Member

Thanks for the fix!

@deannagarcia deannagarcia merged commit 4fb7c17 into protocolbuffers:main Oct 20, 2022
@benjaminp benjaminp deleted the patch-1 branch October 20, 2022 18:55
zhangskz added a commit that referenced this pull request Oct 25, 2022
This pulls in the fix for CVE-2022-37434.

(PR'ed to main already in #10786)
@zhangskz zhangskz mentioned this pull request Oct 25, 2022
zhangskz added a commit that referenced this pull request Oct 25, 2022
This pulls in the fix for CVE-2022-37434.

(PR'ed to main already in #10786)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bazel dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants