Red Hat Security AdvisoryRHSA-2022:7314
zlib security update
Released 2022-11-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) zlib-static-1.2.11-32.el9_0
- Red Hat Enterprise Linux AppStream (v. 9) zlib-devel-1.2.11-32.el9_0
- Red Hat Enterprise Linux BaseOS (v. 9) zlib-1.2.11-32.el9_0
Fixes 1 record
Priority HIGH 75
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.19243 · Published 2022-08-05 · Partial fix CWE-120
