update zlib to v1.2.12, fixing CVE-2018-25032

Author: LiberalArtist

LOG

@@ -2282,3 +2282,5 @@
     c/thread.c mats/foreign3.c s/mkheader.ss
 - update lz4 to version 1.9.3
     configure
+- update zlib to version 1.2.12 (which fixes CVE-2018-25032)
+    configure c/Mf-*le

c/Mf-a6le

@@ -40,7 +40,7 @@ ${Scheme}: ${Kernel} ${KernelLinkDeps} ${Main}
 	$C -rdynamic -o ${Scheme} ${Main} ${Kernel} ${mdclib} ${KernelLinkLibs} ${LDFLAGS}
 
 ../zlib/configure.log:
-	(cd ../zlib; CFLAGS="${CFLAGS} -m64" ./configure --64)
+	(cd ../zlib; CFLAGS="${CFLAGS} -m64 -fPIC" ./configure --64)
 
 ../lz4/lib/liblz4.a: ${LZ4Sources}
 	(cd ../lz4/lib; CFLAGS="${CFLAGS} -m64" ${MAKE} liblz4.a)

c/Mf-arm32le

@@ -40,7 +40,7 @@ ${Scheme}: ${Kernel} ${KernelLinkDeps} ${Main}
 	$C -rdynamic -o ${Scheme} ${Main} ${Kernel} ${mdclib} ${KernelLinkLibs} ${LDFLAGS}
 
 ../zlib/configure.log:
-	(cd ../zlib; ./configure)
+	(cd ../zlib; CFLAGS="${CFLAGS} -fPIC" ./configure)
 
 ../lz4/lib/liblz4.a: ${LZ4Sources}
 	(cd ../lz4/lib; ${MAKE} liblz4.a)

c/Mf-i3le

@@ -40,7 +40,7 @@ ${Scheme}: ${Kernel} ${KernelLinkDeps} ${Main}
 	$C -rdynamic -o ${Scheme} ${Main} ${Kernel} ${mdclib} ${KernelLinkLibs} ${LDFLAGS}
 
 ../zlib/configure.log:
-	(cd ../zlib; CFLAGS="${CFLAGS} -m32" ./configure)
+	(cd ../zlib; CFLAGS="${CFLAGS} -m32 -fPIC" ./configure)
 
 ../lz4/lib/liblz4.a: ${LZ4Sources}
 	(cd ../lz4/lib; CFLAGS="${CFLAGS} -m32" ${MAKE} liblz4.a)

c/Mf-ppc32le

@@ -40,7 +40,7 @@ ${Scheme}: ${Kernel} ${KernelLinkDeps} ${Main}
 	$C -rdynamic -o ${Scheme} ${Main} ${Kernel} ${mdclib} ${KernelLinkLibs} ${LDFLAGS}
 
 ../zlib/configure.log:
-	(cd ../zlib; CFLAGS="${CFLAGS} -m32" ./configure)
+	(cd ../zlib; CFLAGS="${CFLAGS} -m32 -fPIC" ./configure)
 
 ../lz4/lib/liblz4.a: ${LZ4Sources}
 	(cd ../lz4/lib; CFLAGS="${CFLAGS} -m32" ${MAKE} liblz4.a)

c/Mf-ta6le

@@ -40,7 +40,7 @@ ${Scheme}: ${Kernel} ${KernelLinkDeps} ${Main}
 	$C -rdynamic -o ${Scheme} ${Main} ${Kernel} ${mdclib} ${KernelLinkLibs} ${LDFLAGS}
 
 ../zlib/configure.log:
-	(cd ../zlib; CFLAGS="${CFLAGS} -m64" ./configure --64)
+	(cd ../zlib; CFLAGS="${CFLAGS} -m64 -fPIC" ./configure --64)
 
 ../lz4/lib/liblz4.a: ${LZ4Sources}
 	(cd ../lz4/lib; CFLAGS="${CFLAGS} -m64" ${MAKE} liblz4.a)

c/Mf-ti3le

@@ -40,7 +40,7 @@ ${Scheme}: ${Kernel} ${KernelLinkDeps} ${Main}
 	$C -rdynamic -o ${Scheme} ${Main} ${Kernel} ${mdclib} ${KernelLinkLibs} ${LDFLAGS}
 
 ../zlib/configure.log:
-	(cd ../zlib; CFLAGS="${CFLAGS} -m32" ./configure)
+	(cd ../zlib; CFLAGS="${CFLAGS} -m32 -fPIC" ./configure)
 
 ../lz4/lib/liblz4.a: ${LZ4Sources}
 	(cd ../lz4/lib; CFLAGS="${CFLAGS} -m32" ${MAKE} liblz4.a)

c/Mf-tppc32le

@@ -40,7 +40,7 @@ ${Scheme}: ${Kernel} ${KernelLinkDeps} ${Main}
 	$C -rdynamic -o ${Scheme} ${Main} ${Kernel} ${mdclib} ${KernelLinkLibs} ${LDFLAGS}
 
 ../zlib/configure.log:
-	(cd ../zlib; CFLAGS="${CFLAGS} -m32" ./configure)
+	(cd ../zlib; CFLAGS="${CFLAGS} -m32 -fPIC" ./configure)
 
 ../lz4/lib/liblz4.a: ${LZ4Sources}
 	(cd ../lz4/lib; CFLAGS="${CFLAGS} -m32" ${MAKE} liblz4.a)

configure

@@ -420,7 +420,7 @@ else
   if [ "${zlibDep}" != "" ] ; then
     if [ ! -f 'zlib/configure' ] ; then
       rmdir zlib > /dev/null 2>&1
-      (curl -L -o v1.2.11.tar.gz https://github.com/madler/zlib/archive/v1.2.11.tar.gz && tar -xzf v1.2.11.tar.gz && mv zlib-1.2.11 zlib && rm v1.2.11.tar.gz) || exit 1
+      (curl -L -o v1.2.12.tar.gz https://github.com/madler/zlib/archive/v1.2.12.tar.gz && tar -xzf v1.2.12.tar.gz && mv zlib-1.2.12 zlib && rm v1.2.12.tar.gz) || exit 1
     fi
   fi