eos icon indicating copy to clipboard operation
eos copied to clipboard

Published 20 hours ago • verified publisher icon EOSIO

Fix boost:beast vulnerability 2.1

Open praphael opened this issue 3 years ago • 0 comments

Change Description

Boost::beast uses hardcoded zlib which was vulnerable to CVE-2016-9840. This updates unpinned builds, and build scripts to use newer version of Boost, and for pinned builds to apply patch to address the vulnerability.

Change Type

Select ONE:

  • [ ] Documentation
  • [x] Stability bug fix
  • [ ] Other
  • [ ] Other - special case

Testing Changes

Select ANY that apply:

  • [ ] New Tests
  • [ ] Existing Tests
  • [ ] Test Framework
  • [ ] CI System
  • [ ] Other

Consensus Changes

  • [ ] Consensus Changes

API Changes

  • [ ] API Changes

Documentation Additions

  • [ ] Documentation Additions

praphael avatar Dec 24 '21 02:12 praphael