- zlib prior to 1.2.3 improperly handled invalid data streams which could lead a denial of service or arbitrary code execution. Tavis Ormandy CAN-2005-2096

package/zlib/zlib.mk

@@ -3,7 +3,7 @@
 # zlib
 #
 #############################################################
-ZLIB_VER=1.2.2
+ZLIB_VER=1.2.3
 ZLIB_SOURCE=zlib-$(ZLIB_VER).tar.bz2
 ZLIB_SITE=http://$(BR2_SOURCEFORGE_MIRROR).dl.sourceforge.net/sourceforge/libpng
 ZLIB_DIR=$(BUILD_DIR)/zlib-$(ZLIB_VER)