High ELSA-2022-9987 1 CVE

Important: zlib security update (Oracle Linux 7)

Published Nov 9, 2022 · Updated Nov 9, 2022

Ecosystem: Oracle Linux

Summary

[1.2.7-20.0.1]
- Resolves: CVE-2022-37434 [Orabug: 34752508]

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	minizip	0:1.2.7-20.0.1.el7_9
Oracle Linux · 7	minizip-devel	0:1.2.7-20.0.1.el7_9
Oracle Linux · 7	zlib	0:1.2.7-20.0.1.el7_9
Oracle Linux · 7	zlib-devel	0:1.2.7-20.0.1.el7_9
Oracle Linux · 7	zlib-static	0:1.2.7-20.0.1.el7_9

Vulnerabilities 1

Critical 9.8

CVE-2022-37434 Public exploit EPSS 19%

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

openjpeg2 rsync fltk crash Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2022