<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 21:20:45 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[CDRIVER-4377] Bundled zlib 1.2.11 is outdated and vulnerable</title>
                <link>https://jira.mongodb.org/browse/CDRIVER-4377</link>
                <project id="10030" key="CDRIVER">C Driver</project>
                    <description>&lt;h4&gt;&lt;a name=&quot;Summary&quot;&gt;&lt;/a&gt;Summary&lt;/h4&gt;
&lt;p&gt;The bundled version zlib 1.2.11 is outdated and is affected by a known vulnerability.&lt;/p&gt;

&lt;p&gt;The changelog of the recently released zlib 1.2.12 recommends to update.&lt;br/&gt;
Quote from &lt;a href=&quot;https://zlib.net/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://zlib.net/&lt;/a&gt;&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;Due to the bug fixes, any installations of 1.2.11 should be replaced with 1.2.12.&lt;/p&gt;&lt;/blockquote&gt;

&lt;p&gt;Check this CVE for more info&lt;br/&gt;
&lt;a href=&quot;https://nvd.nist.gov/vuln/detail/CVE-2018-25032&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://nvd.nist.gov/vuln/detail/CVE-2018-25032&lt;/a&gt;&lt;/p&gt;</description>
                <environment></environment>
        <key id="2037567">CDRIVER-4377</key>
            <summary>Bundled zlib 1.2.11 is outdated and vulnerable</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="10300" iconUrl="https://jira.mongodb.org/images/icons/priorities/medium.svg">Unknown</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="colby.pike@mongodb.com">Colby Pike</assignee>
                                    <reporter username="spam.dump.one@gmail.com">Agostino Sturaro</reporter>
                        <labels>
                    </labels>
                <created>Mon, 2 May 2022 16:04:19 +0000</created>
                <updated>Sat, 28 Oct 2023 11:28:06 +0000</updated>
                            <resolved>Mon, 9 May 2022 19:06:32 +0000</resolved>
                                    <version>1.21.1</version>
                                    <fixVersion>1.21.2</fixVersion>
                                                        <votes>0</votes>
                                    <watches>2</watches>
                                                                                                                <comments>
                            <comment id="4548557" author="xgen-internal-githook" created="Sun, 15 May 2022 15:08:55 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;vector-of-bool&apos;, &apos;email&apos;: &apos;vectorofbool@gmail.com&apos;, &apos;username&apos;: &apos;vector-of-bool&apos;}
&lt;p&gt;Message: Update bundled zlib to 1.2.12 (#981)&lt;/p&gt;

&lt;ul&gt;
	&lt;li&gt;Update bundled zlib to 1.2.12 &lt;span class=&quot;error&quot;&gt;&amp;#91;Close CDRIVER-4377&amp;#93;&lt;/span&gt;&lt;br/&gt;
Branch: r1.21&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-c-driver/commit/4b8ec0a7e289e7a0bee2e24fc7fa807354aafbf8&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-c-driver/commit/4b8ec0a7e289e7a0bee2e24fc7fa807354aafbf8&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
</comment>
                            <comment id="4524074" author="xgen-internal-githook" created="Tue, 3 May 2022 21:30:48 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;vector-of-bool&apos;, &apos;email&apos;: &apos;vectorofbool@gmail.com&apos;, &apos;username&apos;: &apos;vector-of-bool&apos;}
&lt;p&gt;Message: Update bundled zlib to 1.2.12 (#981)&lt;/p&gt;

&lt;ul&gt;
	&lt;li&gt;Update bundled zlib to 1.2.12 &lt;span class=&quot;error&quot;&gt;&amp;#91;Close CDRIVER-4377&amp;#93;&lt;/span&gt;&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-c-driver/commit/1a62f76eb8cb91448460389ac8590d952fa20cd3&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-c-driver/commit/1a62f76eb8cb91448460389ac8590d952fa20cd3&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                                        </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|i0c8y0:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>