Fix broken dependency: update zlib from 1.2.12 to 1.2.13 #10833
Conversation
|
LGTM :-) @jay-zhuang can you merge it please? |
|
@siying has imported this pull request. If you are a Meta employee, you can view this diff on Phabricator. |
|
@siying I believe this is also dependent on @jay-zhuang uploading the latest zlib binary to the rocksdb S3 bucket - hence the CI failures. |
xiaochenfan
force-pushed
the
update_zlib_to_1.2.13
branch
from
d9e8ae8
to
14ef8b5
Compare
|
@xiaochenfan has updated the pull request. You must reimport the pull request before landing. |
|
@xiaochenfan has updated the pull request. You must reimport the pull request before landing. |
|
@xiaochenfan Can we get this merged ASAP to |
|
@xiaochenfan has updated the pull request. You must reimport the pull request before landing. |
|
@ajkr has imported this pull request. If you are a Meta employee, you can view this diff on Phabricator. |
Update dependency to fix CVE https://nvd.nist.gov/vuln/detail/CVE-2022-37434. RocksDB fix: facebook/rocksdb#10833.
Update dependency to fix CVE https://nvd.nist.gov/vuln/detail/CVE-2022-37434. RocksDB fix: facebook/rocksdb#10833.
zlib(https://zlib.net/) has released v1.2.13.
1.2.12 is no longer available for downloading and Makefile for rocksdb will be broken due to can't find the source .tar.gz.
https://nvd.nist.gov/vuln/detail/CVE-2022-37434
This pr update the version number and the shasum of new .tar.gz file. (1.2.13)
Fixes #10876