[gdal-dev] zlib vulnerability CVE-2018-25032 affecting GAL

Mateusz Loskot mateusz at loskot.net
Thu Apr 7 03:34:49 PDT 2022


On Thu, 7 Apr 2022 at 12:29, prashanti seri <seri.prashanti at gmail.com> wrote:
>  Does zlib vulnerability CVE-2018-25032 affect GDAL as it uses this lib?

Hints:
https://github.com/OSGeo/gdal/blob/master/frmts/zlib/zlib.h#L40
https://github.com/OSGeo/gdal/blob/patch/3.2.2.1/gdal/frmts/zlib/zlib.h#L40
https://github.com/OSGeo/gdal/blob/release/3.4/gdal/frmts/zlib/zlib.h#L40

Hint on solution:
https://gdal.org/build_hints.html#zlib

Best regards,
-- 
Mateusz Loskot, http://mateusz.loskot.net


More information about the gdal-dev mailing list