From 0993c9225f8086bab6c4c0a2d7206897d1cc688c Mon Sep 17 00:00:00 2001 From: xiaochenfan Date: Mon, 14 Nov 2022 11:49:06 -0800 Subject: [PATCH] Fix broken dependency: update zlib from 1.2.12 to 1.2.13 (#10833) Summary: zlib(https://zlib.net/) has released v1.2.13. 1.2.12 is no longer available for downloading and Makefile for rocksdb will be broken due to can't find the source .tar.gz. https://nvd.nist.gov/vuln/detail/CVE-2022-37434 This pr update the version number and the shasum of new .tar.gz file. (1.2.13) Fixes https://github.com/facebook/rocksdb/issues/10876 Pull Request resolved: https://github.com/facebook/rocksdb/pull/10833 Reviewed By: hx235 Differential Revision: D40575954 Pulled By: ajkr fbshipit-source-id: 3e560e453ddf58d045214fc4e64f83bef91f22e5 --- Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 87c8eac83..06f2e32a2 100644 --- a/Makefile +++ b/Makefile @@ -2092,8 +2092,8 @@ ROCKSDB_JAVADOCS_JAR = rocksdbjni-$(ROCKSDB_JAVA_VERSION)-javadoc.jar ROCKSDB_SOURCES_JAR = rocksdbjni-$(ROCKSDB_JAVA_VERSION)-sources.jar SHA256_CMD = sha256sum -ZLIB_VER ?= 1.2.12 -ZLIB_SHA256 ?= 91844808532e5ce316b3c010929493c0244f3d37593afd6de04f71821d5136d9 +ZLIB_VER ?= 1.2.13 +ZLIB_SHA256 ?= b3a24de97a8fdbc835b9833169501030b8977031bcb54b3b3ac13740f846ab30 ZLIB_DOWNLOAD_BASE ?= http://zlib.net BZIP2_VER ?= 1.0.8 BZIP2_SHA256 ?= ab5a03176ee106d3f0fa90e381da478ddae405918153cca248e682cd0c4a2269