[IMPALA-12063] Upgrade to a version of zlib with fix for CVE-2022-37434

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 4.3.0
• Fix Version/s: Impala 4.3.0
• Component/s: Backend
• Epic Color: ghx-label-8
• Assignee: Joe McDonnell
• Reporter: Joe McDonnell
• Created: 14/Apr/23 22:39
• Updated: 20/Apr/23 16:08
• Resolved: 20/Apr/23 16:08

Description

Zlib fixed CVE-2022-37434 in version 1.2.13. This impacts inflateGetHeader(), which we do not use, so this is not expected to have any impact on Impala. Moving to the new zlib 1.2.13 avoids any uncertainty about this.