RHSA-2023:1095: Moderate: zlib security update
The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.<br>Security Fix(es):<br><li> zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1095?
The severity of RHSA-2023:1095 is classified as moderate due to a potential heap-based buffer over-read and overflow.
How do I fix RHSA-2023:1095?
To fix RHSA-2023:1095, update the zlib, minizip, and other affected packages to version 1.2.7-21.el7_9 or later.
What are the affected packages in RHSA-2023:1095?
The affected packages in RHSA-2023:1095 include zlib, minizip, minizip-devel, and their debug versions.
What vulnerability is addressed in RHSA-2023:1095?
RHSA-2023:1095 addresses CVE-2022-37434, which involves a heap-based buffer over-read and overflow.
Is there a need for reboot after applying RHSA-2023:1095?
A reboot is not typically required after applying the updates from RHSA-2023:1095.