Petr Štetiar 7df6795d4c zlib: backport fix for heap-based buffer over-read (CVE-2022-37434)
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field. NOTE: only
applications that call inflateGetHeader are affected. Some common
applications bundle the affected zlib source code but may be unable to
call inflateGetHeader.

Fixes: CVE-2022-37434
References: https://github.com/ivd38/zlib_overflow
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-08-06 15:00:08 +02:00
..
2022-08-05 14:10:42 +02:00
2022-07-15 07:07:59 +02:00
2022-08-05 14:10:42 +02:00
2022-08-05 18:31:24 +02:00
2022-07-17 13:43:48 +02:00