Skip to content

Upgrade bundled zlib to 1.2.12 #3553

@dgrunwald

Description

@dgrunwald

The new zlib version addresses CVE-2018-25032.

I believe this vulnerability is not exploitable with the zlib settings that Poco uses (mem_level=8, Z_DEFAULT_STRATEGY) as the current exploits require either Z_FIXED or mem_level=1. But it would still be nice to update to be sure.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions