Skip to content

Commit 2d0cd66

Browse files
committed
Bump to zlib version 1.3.1 used in examples
While zlib is not linked into UR libraries, only one of the example applications, we should still avoid using versions with known CVEs.
1 parent 70e4cdc commit 2d0cd66

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

third_party/deps.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ dependencies:
2525
- libssh2=1.11.0
2626
- libstdcxx-ng=13.1.0
2727
- libuv=1.44.2
28-
- libzlib=1.2.13
28+
- libzlib=1.3.1
2929
- llvm-spirv=14.0.0
3030
- llvm-tools=14.0.6
3131
- llvmdev=14.0.6
@@ -35,5 +35,5 @@ dependencies:
3535
- rhash=1.4.3
3636
# don't upgrade xz utils due to CVE-2024-3094
3737
- xz=5.2.6
38-
- zlib=1.2.13
38+
- zlib=1.3.1
3939
- zstd=1.5.2

0 commit comments

Comments
 (0)