[jdk11u] Withdrawn: 8295530: Update Zlib Data Compression Library to Version 1.2.13
Stewart X Addison
duke at openjdk.org
Wed Mar 1 13:37:17 UTC 2023
On Wed, 1 Mar 2023 13:19:20 GMT, Stewart X Addison <duke at openjdk.org> wrote:
> Backporting zlib 1.2.13 from JDK17u due to https://nvd.nist.gov/vuln/detail/CVE-2022-37434 (9.8 CVSS score)
> Verified on Windows which is generally the only platform I use which uses bundled zlib. This makes the `zlib` directory in the source identical to the one for JDK17u so should not cause any problems. I'll look at the feasibility of doing the same to JDK8 too.
This pull request has been closed without being integrated.
-------------
PR: https://git.openjdk.org/jdk11u/pull/69
More information about the jdk-updates-dev
mailing list