Release date:
2022-08-17 18:20:05 UTC
Description:
* SECURITY UPDATE: possible buffer overflow when getting a gzip header
extra field with inflate()
- debian/patches/CVE-2022-37434.patch: ensure that space the user
provided with inflateGetHeader() is enough when multiple calls
of inflate() delivers an extra header data.
- CVE-2022-37434
Updated packages:
-
lib32z1_1.2.8.dfsg-2ubuntu4.3+tuxcare.els2_amd64.deb
sha:9ba28de970590c14f7d14e489af8a3b8eeed5fa0
-
lib32z1-dev_1.2.8.dfsg-2ubuntu4.3+tuxcare.els2_amd64.deb
sha:2d00b6c1383fc6fd535156681b241b9ed06db390
-
libx32z1_1.2.8.dfsg-2ubuntu4.3+tuxcare.els2_amd64.deb
sha:4369cbb9f0b0075686324af1b9b42b9e2099fe51
-
libx32z1-dev_1.2.8.dfsg-2ubuntu4.3+tuxcare.els2_amd64.deb
sha:eb31687a6e5666254272b8e4169d981ae19b1002
-
zlib1g_1.2.8.dfsg-2ubuntu4.3+tuxcare.els2_amd64.deb
sha:d31336540951508539260290fb35fc6942eb16d3
-
zlib1g-dev_1.2.8.dfsg-2ubuntu4.3+tuxcare.els2_amd64.deb
sha:8fdcd5a6aece2bf6fe8f23b5344974b3796bd973
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.