Medium ELSA-2023-1095 1 CVE

Moderate: zlib security update (Oracle Linux 7)

Published Mar 8, 2023 · Updated Mar 8, 2023

Ecosystem: Oracle Linux

Summary

[1.2.7-21]
- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	minizip	0:1.2.7-21.el7_9
Oracle Linux · 7	minizip-devel	0:1.2.7-21.el7_9
Oracle Linux · 7	zlib	0:1.2.7-21.el7_9
Oracle Linux · 7	zlib-devel	0:1.2.7-21.el7_9
Oracle Linux · 7	zlib-static	0:1.2.7-21.el7_9

Vulnerabilities 1

Critical 9.8

CVE-2022-37434 Public exploit EPSS 19%

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip heade…

openjpeg2 rsync fltk crash Debian Ubuntu Azure Linux Alpine Wolfi

Aug 5, 2022