Lucene search
CentOS ProjectCESA-2023:1095HistoryMar 08, 2023 - 4:30 p.m.
minizip, zlib security update
2023-03-0816:30:28
CentOS Project
lists.centos.org
233
0.003 Low
EPSS
Percentile
71.4%
CentOS Errata and Security Advisory CESA-2023:1095
The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.
Security Fix(es):
- zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2023-March/086387.html
Affected packages:
minizip
minizip-devel
zlib
zlib-devel
zlib-static
Upstream details at:
https://access.redhat.com/errata/RHSA-2023:1095
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 7 | i686 | minizip | <Â 1.2.7-21.el7_9 | minizip-1.2.7-21.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | minizip | <Â 1.2.7-21.el7_9 | minizip-1.2.7-21.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | minizip-devel | <Â 1.2.7-21.el7_9 | minizip-devel-1.2.7-21.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | minizip-devel | <Â 1.2.7-21.el7_9 | minizip-devel-1.2.7-21.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | zlib | <Â 1.2.7-21.el7_9 | zlib-1.2.7-21.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | zlib | <Â 1.2.7-21.el7_9 | zlib-1.2.7-21.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | zlib-devel | <Â 1.2.7-21.el7_9 | zlib-devel-1.2.7-21.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | zlib-devel | <Â 1.2.7-21.el7_9 | zlib-devel-1.2.7-21.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | zlib-static | <Â 1.2.7-21.el7_9 | zlib-static-1.2.7-21.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | zlib-static | <Â 1.2.7-21.el7_9 | zlib-static-1.2.7-21.el7_9.x86_64.rpm |
Related
nessus
nessus
SUSE SLES12 Security Update : zlib (SUSE-SU-2022:2846-1)
2022-08-20 00:00:00
Amazon Linux AMI : zlib (ALAS-2022-1650)
2022-12-10 00:00:00
AIX 7.3 TL 0 : zlib (IJ46030)
2023-07-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-08-09 02:04:05
cloudfoundry
cloudfoundry
USN-5570-1: zlib vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5573-1: rsync vulnerability | Cloud Foundry
2023-01-19 00:00:00
USN-5570-1: zlib vulnerability | Cloud Foundry
2022-08-25 00:00:00
oraclelinux
oraclelinux
zlib security update
2022-11-02 00:00:00
zlib security update
2022-11-09 00:00:00
zlib security update
2023-03-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for zlib (EulerOS-SA-2023-1211)
2023-01-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2846-1)
2022-08-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2847-1)
2022-08-19 00:00:00
debiancve
debiancve
CVE-2022-37434
2022-08-05 07:15:00
rocky
rocky
zlib security update
2022-11-02 13:50:56
zlib security update
2022-10-25 07:22:56
rsync security and enhancement update
2022-11-08 06:29:11
almalinux
almalinux
Moderate: rsync security and enhancement update
2022-11-08 00:00:00
Moderate: rsync security and bug fix update
2022-11-15 00:00:00
Moderate: zlib security update
2022-10-25 00:00:00
ibm
ibm
Security Bulletin: IBM Planning Analytics Workspace has addressed a vulnerability in GNU zlib (CVE-2022-37434)
2023-06-07 21:00:25
cloudlinux
cloudlinux
Fixed CVE-2022-37434 in zlib
2022-08-17 18:47:33
Fixed CVE-2022-37434 in rsync
2022-08-25 15:56:39
ubuntu
ubuntu
zlib vulnerability
2022-10-17 00:00:00
rsync vulnerability
2022-08-18 00:00:00
zlib vulnerability
2022-08-17 00:00:00
osv
osv
Moderate: rsync security and enhancement update
2022-11-08 06:29:11
Moderate: rsync security and bug fix update
2022-11-15 06:20:39
CVE-2022-37434
2022-08-05 07:15:07
debian
debian
[SECURITY] [DSA 5218-1] zlib security update
2022-08-25 19:51:59
[SECURITY] [DLA 3103-1] zlib security update
2022-09-12 09:01:16
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Zlib
2022-09-30 10:20:36
Exploit for Out-of-bounds Write in Zlib
2022-09-14 07:28:23
Exploit for Out-of-bounds Write in Zlib
2024-02-02 14:25:28
f5
f5
K67213091 : Zlib vulnerability CVE-2022-37434
2022-10-21 00:00:00
suse
suse
Security update for zlib (important)
2022-09-01 00:00:00
Security update for zlib (important)
2022-08-31 00:00:00
redos
redos
ROS-20221207-01
2022-12-07 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0236
2022-08-23 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0236
2022-08-23 00:00:00
amazon
amazon
redhat
redhat
(RHSA-2024:0254) Moderate: rsync security update
2024-01-15 15:28:49
(RHSA-2023:1095) Moderate: zlib security update
2023-03-07 08:56:16
(RHSA-2022:8291) Moderate: rsync security and bug fix update
2022-11-15 06:20:39
cgr
cgr
CVE-2022-37434 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2022-37434
2022-08-05 07:15:00
cbl_mariner
cbl_mariner
CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2
2022-09-13 22:36:39
CVE-2022-37434 affecting package zlib 1.2.12-1
2022-08-24 22:05:05
slackware
slackware
[slackware-security] zlib
2022-10-15 20:38:53
fedora
fedora
[SECURITY] Fedora 37 Update: zlib-1.2.12-5.fc37
2022-09-14 00:23:02
[SECURITY] Fedora 36 Update: zlib-1.2.11-33.fc36
2022-09-02 09:55:06
[SECURITY] Fedora 35 Update: zlib-1.2.11-32.fc35
2022-09-16 01:46:40
qt
qt
Security advisory: zlib in Qt
2022-09-12 00:00:00
freebsd
freebsd
FreeBSD -- zlib heap buffer overflow
2022-08-30 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:13.zlib
2022-08-30 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2131
2023-03-14 14:13:27
wolfi
wolfi
CVE-2022-37434 vulnerabilities
2024-05-19 21:07:17
cvelist
cvelist
CVE-2022-37434
2022-08-05 00:00:00
mageia
mageia
Updated zlib packages fix security vulnerability
2022-09-16 22:39:55
redhatcve
redhatcve
CVE-2022-37434
2022-08-09 06:36:51
aix
aix
AIX is vulnerable to denial of service due to zlib and zlibNX
2023-07-25 11:05:17
prion
prion
Heap overflow
2022-08-05 07:15:00
ubuntucve
ubuntucve
CVE-2022-37434
2022-08-05 00:00:00
cve
cve
CVE-2022-37434
2022-08-05 07:15:00