RHSA-2022:7106: Moderate: zlib security update
The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.Security Fix(es): zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:7106?
The severity of RHSA-2022:7106 is classified as important due to the potential impact of heap-based buffer over-read or buffer overflow in the zlib library.
How do I fix RHSA-2022:7106?
To fix RHSA-2022:7106, you should update the zlib packages to version 1.2.11-19.el8_6 or newer.
What vulnerability does RHSA-2022:7106 address?
RHSA-2022:7106 addresses a heap-based buffer over-read or buffer overflow in the inflate function of the zlib library.
Which systems are affected by RHSA-2022:7106?
RHSA-2022:7106 affects systems running vulnerable versions of the zlib package on Red Hat Enterprise Linux 8.
Is there a reference for more information about RHSA-2022:7106?
Yes, more information about RHSA-2022:7106 can be found in the Red Hat advisory documentation.