Re: [CVE] zlib (< 1.2.12) memory corruption

2022-04-12 Thread Nick Clifton via Gcc
Hi Luis, There is a CVE [1] for zlib < 1.2.12 (released march 27th). GCC currently uses zlib 1.2.11, and binutils-gdb imports the zlib directory from GCC. The recommendation is to get it updated to 1.2.12, which contains the proper fix [2]. Right - I have now updated the binutils-gdb

Re: [CVE] zlib (< 1.2.12) memory corruption

2022-04-12 Thread Luis Machado via Gcc
Hi Nick, On 4/8/22 14:36, Nick Clifton wrote: Hi Luis, There is a CVE [1] for zlib < 1.2.12 (released march 27th). GCC currently uses zlib 1.2.11, and binutils-gdb imports the zlib directory from GCC. The recommendation is to get it updated to 1.2.12, which contains the proper fix [2]. I

Re: [CVE] zlib (< 1.2.12) memory corruption

2022-04-08 Thread Nick Clifton via Gcc
Hi Luis, There is a CVE [1] for zlib < 1.2.12 (released march 27th). GCC currently uses zlib 1.2.11, and binutils-gdb imports the zlib directory from GCC. The recommendation is to get it updated to 1.2.12, which contains the proper fix [2]. I am all for updating the binutils-gdb copy of

[CVE] zlib (< 1.2.12) memory corruption

2022-04-05 Thread Luis Machado via Gcc
Hi, There is a CVE [1] for zlib < 1.2.12 (released march 27th). GCC currently uses zlib 1.2.11, and binutils-gdb imports the zlib directory from GCC. The recommendation is to get it updated to 1.2.12, which contains the proper fix [2]. It might not affect gcc/binutils/gdb since the code