gh-98689: Update Windows builds to zlib v1.2.13 (GH-98968)

This commit is contained in:
Zachary Ware 2022-11-01 13:02:51 -05:00 committed by GitHub
parent f042646595
commit c0859743d9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 4 additions and 2 deletions

View file

@ -0,0 +1,2 @@
Update Windows builds to zlib v1.2.13. v1.2.12 has CVE-2022-37434, but
the vulnerable ``inflateGetHeader`` API is not used by Python.

View file

@ -59,7 +59,7 @@ if NOT "%IncludeTkinterSrc%"=="false" set libraries=%libraries% tcl-core-8.6.12.
if NOT "%IncludeTkinterSrc%"=="false" set libraries=%libraries% tk-8.6.12.1
if NOT "%IncludeTkinterSrc%"=="false" set libraries=%libraries% tix-8.4.3.6
set libraries=%libraries% xz-5.2.5
set libraries=%libraries% zlib-1.2.12
set libraries=%libraries% zlib-1.2.13
for %%e in (%libraries%) do (
if exist "%EXTERNALS_DIR%\%%e" (

View file

@ -71,7 +71,7 @@
<opensslOutDir>$(ExternalsDir)openssl-bin-1.1.1q\$(ArchName)\</opensslOutDir>
<opensslIncludeDir>$(opensslOutDir)include</opensslIncludeDir>
<nasmDir>$(ExternalsDir)\nasm-2.11.06\</nasmDir>
<zlibDir>$(ExternalsDir)\zlib-1.2.12\</zlibDir>
<zlibDir>$(ExternalsDir)\zlib-1.2.13\</zlibDir>
<!-- Suffix for all binaries when building for debug -->
<PyDebugExt Condition="'$(PyDebugExt)' == '' and $(Configuration) == 'Debug'">_d</PyDebugExt>