Medium ELSA-2022-7106 1 CVE

Moderate: zlib security update (Oracle Linux 8)

Published Oct 26, 2022 · Updated Oct 26, 2022

Ecosystem: Oracle Linux

Summary

[1.2.11.19]
- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	zlib	0:1.2.11-19.el8_6
Oracle Linux · 8	zlib-devel	0:1.2.11-19.el8_6
Oracle Linux · 8	zlib-static	0:1.2.11-19.el8_6

Vulnerabilities 1

Critical 9.8

CVE-2022-37434 Public exploit EPSS 19%

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

openjpeg2 rsync fltk crash Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2022