To mitigate CVE-2022-37434
pull/31019/head^2
Mikhail Lappo 2 years ago committed by GitHub
parent 1cbf6d64ae
commit 5ec616e6a8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 8
      bazel/grpc_deps.bzl
  2. 2
      third_party/zlib
  3. 2
      tools/run_tests/sanity/check_submodules.sh

@ -217,11 +217,11 @@ def grpc_deps():
http_archive(
name = "zlib",
build_file = "@com_github_grpc_grpc//third_party:zlib.BUILD",
sha256 = "ef47b0fbe646d69a2fc5ba012cb278de8e8946a8e9649f83a807cc05559f0eff",
strip_prefix = "zlib-21767c654d31d2dccdde4330529775c6c5fd5389",
sha256 = "90f43a9c998740e8a0db24b0af0147033db2aaaa99423129abbd76640757cac9",
strip_prefix = "zlib-04f42ceca40f73e2978b50e93806c2a18c1281fc",
urls = [
"https://storage.googleapis.com/grpc-bazel-mirror/github.com/madler/zlib/archive/21767c654d31d2dccdde4330529775c6c5fd5389.tar.gz",
"https://github.com/madler/zlib/archive/21767c654d31d2dccdde4330529775c6c5fd5389.tar.gz",
"https://storage.googleapis.com/grpc-bazel-mirror/github.com/madler/zlib/archive/04f42ceca40f73e2978b50e93806c2a18c1281fc.tar.gz",
"https://github.com/madler/zlib/archive/04f42ceca40f73e2978b50e93806c2a18c1281fc.tar.gz",
],
)

2
third_party/zlib vendored

@ -1 +1 @@
Subproject commit 21767c654d31d2dccdde4330529775c6c5fd5389
Subproject commit 04f42ceca40f73e2978b50e93806c2a18c1281fc

@ -39,7 +39,7 @@ third_party/opentelemetry 60fa8754d890b5c55949a8c68dcfd7ab5c2395df
third_party/protobuf 24487dd1045c7f3d64a21f38a3f0c06cc4cf2edb
third_party/re2 8e08f47b11b413302749c0d8b17a1c94777495d5
third_party/xds cb28da3451f158a947dfc45090fe92b07b243bc1
third_party/zlib 21767c654d31d2dccdde4330529775c6c5fd5389
third_party/zlib 04f42ceca40f73e2978b50e93806c2a18c1281fc
EOF
diff -u "$submodules" "$want_submodules"

Loading…
Cancel
Save