Medium ELSA-2022-7314 1 CVE

Moderate: zlib security update (Oracle Linux 9)

Published Nov 2, 2022 · Updated Nov 2, 2022

Ecosystem: Oracle Linux

Summary

[1.2.11-32]
- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	zlib	0:1.2.11-32.el9_0
Oracle Linux · 9	zlib-devel	0:1.2.11-32.el9_0
Oracle Linux · 9	zlib-static	0:1.2.11-32.el9_0

Vulnerabilities 1

Critical 9.8

CVE-2022-37434 Public exploit EPSS 19%

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

openjpeg2 rsync fltk crash Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2022