The openNURBS 7 and openNURBS 6 toolkit uses zlib version 1.2.3. Our tool reported zlib 1.2.3 as vulnerable. The most recent version of zlib.available on “ https://zlib.net/ ” is 1.2.11. Are there any plans to move to move to zlib version 1.2.11 in openNURBS 7.0? Thank you Mallikarjuna Bathala PTC…

No plans that I am aware of, but I have logged your request as RH-63503 Update OpenNURBS zlib to 1.2.11. If you have links to vulnerability reports regarding the current zlib version please share them here, too.

Maybe he’s referring to CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 ?

From the change log there have been a lot of bug fixes and some performance improvements too. Worth a look…

ZLIB 1.2.11 also fixes a bunch of issues with symbol visibility: [image] OpenNURBS and ZLIB? Rhino Developer Hi, I’m trying to incorporate OpenNURBS into my project and am running into some linking errors with ZLIB: 14>zlibd.lib(inflate.obj) : error LNK2005: inflatePrim…

Here are the vulnerability reports: CVE-2016-9841 CVE-2016-9843 CVE-2016-9840 CVE-2016-9842 This is a critical issue for us and want to fix it as soon as possible. Can I update zlib library to 1.2.11 at our end and validate it? Is it legal? Thanks Mallikarjuna Bathala

Hi @mbathala1 , Thanks for pointing out the vulnerability issues. We’ll take these into consideration for the next release of Rhino and openNURBS. https://mcneel.myjetbrains.com/youtrack/issue/RH-63503 Upgrading the version of zlib used by openNURBS will require a lot of careful backward compatibi…

Hi @darbyjohnston , [image] darbyjohnston: ZLIB 1.2.11 also fixes a bunch of issues with symbol visibility: I suspect you are statically linking two zlibs into the same exe/dll. I suggest you use opennurbs as a DLL. We use the zlib approved way to decorate the public symbols. Thanks, – Dal…

Hi @dale , if I remember correctly the issue is that earlier versions of zlib don’t have all of the symbols decorated with the Z_PREFIX macro. I believe ZLIB 1.2.11 fixes most but not all of these. I have an old branch on GitHub where I tried fixing these up and was able to link a static version of Z…

[image] darbyjohnston: would there be any interest in merging that if I submitted a PR? Thanks, but we have a developer working on this… – Dale

I noticed that this would be considered for 8.x? Could you let us know the tentative release schedule of 8.x?

Zlib version

openNURBS

brian (Brian Gillespie) March 18, 2025, 9:49pm 18

RH-63503 is fixed in Rhino WIP

Topic		Replies	Views
Zlib update in opennurbs openNURBS windows	3	526	March 15, 2023
Zlib update in OpenNURBS 7/8? openNURBS windows	1	205	February 27, 2024
OpenNURBS and ZLIB? Rhino Developer	4	1727	December 19, 2019
Zlib opennurbs Rhino Developer windows , mac	2	107	October 17, 2025
How do I properly set up Visual Studio with openNURBS? Rhino Developer opennurbs	1	494	October 23, 2018

Zlib version

Related topics