Intel IPP with zlib 1.2.12 patch

[shengzc]

As zlib 1.2.12 has been released for a lone time. Latest IPP 2021.6.0 version still just provides patch for zlib 1.2.11. When Intel will release the new IPP version with zlib 1.2.12 patch? 

Thanks.

[Abhinav_S_Intel]

We don't have a timeline on IPP to support zlib 1.2.12. It will be part of a future release. We will post the update in our release notes.

[shengzc]

Some security threatens are fixed in zlib 1.2.12. Waiting Intel can release the IPP lib for it soon. Thanks.

[Chao_Y_Intel]

Hello,

For the  CVE issue,   the Intel® IPP zlib 1.2.11 patch available with Intel® IPP 2021.6 enables building the well-known zlib library (https://zlib.net/) with Intel® IPP to speed up several data compression and decompression operations. This Intel® IPP zlib 1.2.11 patch file includes a mitigation which alleviates the memory corruption issue reported as CVE-2018-25032 against zlib 1.2.11.   Check IPP release note for the update: Intel® Integrated Performance Primitives Release Notes for Intel®...

thanks,

Chao 

[shengzc]

Thanks, Chao.

As you know, zlib 1.2.12 was released in March and fixed more vulnerabilities of zlib 1.2.11.  We are waiting for the new Intel IPP version with zlib 1.2.12 patch. 

Thanks.