Mailing List Archive: Need help on security vulnerability zlib 1.2.11

Need help on security vulnerability zlib 1.2.11

Apr 19, 2022, 2:07 PM

Post #1 of 3 (246 views)

Hi All,

We are facing some issue with the zlib package 1.2.11. Recently there was a vulnerability in zlib and we had to upgrade to 1.2.12 on all supported platforms
We did that in all platforms including windows, python39.dll is now showing 1.2.12 but the problem is we use pyinstaller to generate application exe.
This exe is still referring to 1.2.11 we tried lot of things to find how it is linking to 1.2.11, there is no line of sight on this.

Can any one please provide some input on this

Thanks,
Raghu

Internal Use - Confidential

Re: Need help on security vulnerability zlib 1.2.11 [ In reply to ]

python-dev at python

Apr 19, 2022, 11:39 PM

Post #2 of 3 (244 views)

Permalink

> On 19 Apr 2022, at 23:07, Prasad, PCRaghavendra <Pcraghavendra.Prasad@dell.com> wrote:
>
> Hi All,
>
> We are facing some issue with the zlib package 1.2.11. Recently there was a vulnerability in zlib and we had to upgrade to 1.2.12 on all supported platforms
> We did that in all platforms including windows, python39.dll is now showing 1.2.12 but the problem is we use pyinstaller to generate application exe.
> This exe is still referring to 1.2.11 we tried lot of things to find how it is linking to 1.2.11, there is no line of sight on this.
>
> Can any one please provide some input on this

Please ask the pyinstaller developers about this.

Ronald

—

Twitter / micro.blog: @ronaldoussoren
Blog: https://blog.ronaldoussoren.net/

Re: Need help on security vulnerability zlib 1.2.11 [ In reply to ]

matti.picus at gmail

Apr 20, 2022, 12:06 AM

Post #3 of 3 (244 views)

Permalink

The pyinstaller docs https://pyinstaller.org/en/stable/ refer to the google group pyinstaller@googlegroups.com or you can try their issue tracker https://github.com/pyinstaller/pyinstaller/issues
_______________________________________________
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-leave@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at https://mail.python.org/archives/list/python-dev@python.org/message/HUYWJCJAGM2PBVYYTUUDSHHLGMW6P6WC/
Code of Conduct: http://python.org/psf/codeofconduct/