{"id":"CVE-2022-37434","aliases":["ALPINE-CVE-2022-37434","ALSA-2022:7106","ALSA-2022:7314","ALSA-2022:7793","ALSA-2022:8291","AZL-10470","AZL-41380","AZL-42760","AZL-43906","AZL-44121","AZL-44136","AZL-44268","AZL-44358","AZL-44769","AZL-44991","AZL-45096","AZL-45276","BELL-CVE-2022-37434","CLSA-2022-1660757579","CLSA-2022-1660758906","CLSA-2022-1660759457","CLSA-2022-1660760405","CLSA-2022-1660762053","CLSA-2022-1661442133","CLSA-2022-1661442999","CLSA-2022-1661443683","CLSA-2022-1661443990","CLSA-2023-1699380056","DEBIAN-CVE-2022-37434","DLA-3103-1","DSA-5218-1","EUVD-2022-40062","GHSA-cfmr-vrgj-vqwv","JLSEC-2026-478","MGASA-2022-0328","OESA-2022-1843","OESA-2022-1853","OESA-2022-1892","OESA-2022-1973","OESA-2022-2003","OESA-2023-1285","RHSA-2022:7106","RHSA-2022:7314","RHSA-2022:7793","RHSA-2022:8291","RHSA-2023:1095","RHSA-2024:0254","RLSA-2022:7106","RLSA-2022:7314","RLSA-2022:7793","RLSA-2022:8291","SUSE-SU-2022:2845-1","SUSE-SU-2022:2846-1","SUSE-SU-2022:2847-1","SUSE-SU-2022:2947-1","UBUNTU-CVE-2022-37434","USN-5570-1","USN-5570-2","USN-5573-1","USN-6736-1","USN-6736-2","openSUSE-SU-2022:2947-1","openSUSE-SU-2023:0365-1","openSUSE-SU-2023:0366-1","openSUSE-SU-2024:12270-1","openSUSE-SU-2024:12298-1","openSUSE-SU-2024:12367-1","openSUSE-SU-2024:12843-1","openSUSE-SU-2024:13367-1","openSUSE-SU-2024:14386-1"],"status":"published","title":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.19243,"percentile":0.97352,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-120","CWE-787"],"published":"2022-08-05T00:00:00Z","modified":"2026-11-05T13:11:05Z","exploits":[{"source":"pocgithub","id":"xen0bit/CVE-2022-37434_poc","title":"xen0bit/CVE-2022-37434_poc","date":"2022-10-15","url":"https://github.com/xen0bit/CVE-2022-37434_poc"},{"source":"pocgithub","id":"Trinadh465/external_zlib_CVE-2022-37434","title":"Trinadh465/external_zlib_CVE-2022-37434","date":"2024-02-02","url":"https://github.com/Trinadh465/external_zlib_CVE-2022-37434"}],"fixes":[{"ecosystem":"Alpine:v3.11","package":"zlib","fixed_in":["1.2.11-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"zlib","fixed_in":["1.2.12-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"zlib-ng","fixed_in":["2.0.6-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zlib","fixed_in":["1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zlib-devel","fixed_in":["1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"zlib-static","fixed_in":["1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"zlib","fixed_in":["1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"zlib-devel","fixed_in":["1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"zlib-static","fixed_in":["1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rsync","fixed_in":["3.1.3-19.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"rsync-daemon","fixed_in":["3.1.3-19.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rsync","fixed_in":["3.2.3-18.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rsync-daemon","fixed_in":["3.2.3-18.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"zlib","fixed_in":["1.2.12-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"crash","fixed_in":["8.0.4-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cloud-hypervisor-cvm","fixed_in":["38.0.72.2-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"teckit","fixed_in":["2.5.12-4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zlib","fixed_in":["1.2.11-17.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zlib-devel","fixed_in":["1.2.11-17.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"zlib-static","fixed_in":["1.2.11-17.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zlib","fixed_in":["1.2.11-17.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zlib-devel","fixed_in":["1.2.11-17.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"zlib-static","fixed_in":["1.2.11-17.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"minizip","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"minizip-devel","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"zlib","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"zlib-devel","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"zlib-static","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1-dev","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1-dev","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g-dev","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"minizip","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"minizip-devel","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"zlib","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"zlib-devel","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"zlib-static","fixed_in":["1.2.3-29.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"rsync","fixed_in":["3.0.6-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"rsync","fixed_in":["3.0.6-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rsync","fixed_in":["3.1.3-12.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"rsync-daemon","fixed_in":["3.1.3-12.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"rsync","fixed_in":["3.1.3-12.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"rsync-daemon","fixed_in":["3.1.3-12.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libz-mingw-w64","fixed_in":["1.2.12+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libz-mingw-w64","fixed_in":["1.2.12+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libz-mingw-w64","fixed_in":["1.2.12+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"zlib","fixed_in":["1:1.2.11.dfsg-4.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zlib","fixed_in":["1:1.2.11.dfsg-4.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zlib","fixed_in":["1:1.2.11.dfsg-4.1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"zlib","fixed_in":["1:1.2.11.dfsg-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"zlib","fixed_in":["1:1.2.11.dfsg-2+deb11u2"],"sources":["osv"]},{"ecosystem":"Julia","package":"Openresty_jll","fixed_in":["1.27.1+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"Zlib_jll","fixed_in":["1.2.13+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"zlib","fixed_in":["1.2.12-1.3.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"zlib","fixed_in":["1.2.11-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"zlib","fixed_in":["1.2.11-21.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"zlib","fixed_in":["1.2.11-22.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"rsync","fixed_in":["3.1.3-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"rsync","fixed_in":["3.1.3-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"rsync","fixed_in":["3.2.3-3.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","fixed_in":["1.9.2-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"sudo","fixed_in":["1.9.2-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"sudo","fixed_in":["1.9.8p2-3.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"deltarpm","fixed_in":["3.6.2-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"deltarpm","fixed_in":["3.6.2-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"deltarpm","fixed_in":["3.6.3-2.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"mariadb-connector-c","fixed_in":["3.0.6-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"mariadb-connector-c","fixed_in":["3.0.6-9.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"mariadb-connector-c","fixed_in":["3.1.13-2.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"mysql","fixed_in":["8.0.28-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"mysql","fixed_in":["8.0.28-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"mysql","fixed_in":["8.0.29-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"mysql","fixed_in":["8.0.29-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib-debuginfo","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib-debugsource","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib-devel","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zlib-debuginfo","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zlib-debugsource","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zlib-static","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"minizip-compat-debuginfo","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"zlib-debuginfo","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"zlib-debugsource","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"zlib-devel","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"minizip-compat-debuginfo","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"zlib","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"zlib-debuginfo","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"zlib-debugsource","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"minizip-compat-debuginfo","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"zlib-debuginfo","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"zlib-debugsource","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"zlib-static","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync","fixed_in":["0:3.1.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-19.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rsync-daemon","fixed_in":["0:3.2.3-18.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync","fixed_in":["0:3.2.3-18.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debuginfo","fixed_in":["0:3.2.3-18.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debugsource","fixed_in":["0:3.2.3-18.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib-debuginfo","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"minizip","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"minizip-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib-static","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"minizip","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"minizip-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zlib-debuginfo","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zlib-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zlib-static","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib-debuginfo","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"minizip","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"minizip-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib-static","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib-debuginfo","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"minizip","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"minizip-devel","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib-static","fixed_in":["0:1.2.7-21.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync","fixed_in":["0:3.1.3-14.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync-daemon","fixed_in":["0:3.1.3-14.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync-debuginfo","fixed_in":["0:3.1.3-14.el8_6.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync-debugsource","fixed_in":["0:3.1.3-14.el8_6.5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"zlib","fixed_in":["0:1.2.11-19.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"zlib","fixed_in":["0:1.2.11-32.el9_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"rsync","fixed_in":["0:3.1.3-19.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"rsync","fixed_in":["0:3.2.3-18.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"zlib","fixed_in":["1.2.8-12.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"zlib","fixed_in":["1.2.8-12.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"zlib","fixed_in":["1.2.11-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"zlib","fixed_in":["1.2.11-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"zlib","fixed_in":["1.2.11-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"zlib","fixed_in":["1.2.11-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"zlib","fixed_in":["1.2.11-11.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zlib","fixed_in":["1.2.11-11.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zlib","fixed_in":["1.2.11-11.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"klibc","fixed_in":["2.0.3-0ubuntu1.14.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zlib","fixed_in":["1:1.2.8.dfsg-1ubuntu1.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"klibc","fixed_in":["2.0.4-8ubuntu1.16.04.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsync","fixed_in":["3.1.1-3ubuntu1.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zlib","fixed_in":["1:1.2.8.dfsg-2ubuntu4.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"rsync","fixed_in":["3.1.2-2.1ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"zlib","fixed_in":["1:1.2.11.dfsg-0ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"klibc","fixed_in":["2.0.4-9ubuntu2.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"klibc","fixed_in":["2.0.7-1ubuntu5.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"rsync","fixed_in":["3.1.3-8ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"zlib","fixed_in":["1:1.2.11.dfsg-2ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"klibc","fixed_in":["2.0.10-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"zlib","fixed_in":["1:1.2.11.dfsg-2ubuntu9.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"klibc","fixed_in":["2.0.13-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"zlib","fixed_in":["1.2.11-150000.3.33.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rsync","fixed_in":["3.2.5-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rusty_v8","fixed_in":["0.106.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"zlib-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-19.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-19.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-18.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-18.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"crash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.4-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cloud-hypervisor-cvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.0.72.2-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"ogdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.0-9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.6.3-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ogdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"deltarpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.6.5-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"teckit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.12-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"fltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.3.8-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"clucene","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.3.4-40"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gpsbabel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.8.0-4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-17.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"lib32z1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libx32z1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"zlib1g-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-29.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-12.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-12.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libz-mingw-w64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libz-mingw-w64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libz-mingw-w64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-4.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-4.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-4.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-1+deb10u2"}]}],"versions":["1:1.2.11.dfsg-1","1:1.2.11.dfsg-1+deb10u1"]},{"source":"osv","ecosystem":"Debian:11","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-2+deb11u2"}]}],"versions":["1:1.2.11.dfsg-2","1:1.2.11.dfsg-2+deb11u1"]},{"source":"osv","ecosystem":"Julia","package":"GCCBootstrap_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Openresty_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.27.1+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Zlib_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.2.13+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-1.3.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-21.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-22.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-3.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-3.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"deltarpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"deltarpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"deltarpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-2.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mariadb-connector-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"mariadb-connector-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-9.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"mariadb-connector-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.13-2.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.28-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.28-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.29-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.29-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zlib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"minizip-compat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"zlib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"minizip-compat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"zlib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"minizip-compat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"zlib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-19.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-18.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-18.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-18.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-18.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"minizip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"minizip-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"zlib-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.7-21.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"rsync-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-14.el8_6.5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-19.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.11-32.el9_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-19.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.3-18.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-12.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.8-12.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-11.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-11.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-11.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-0ubuntu1.14.04.3+esm3"}]}],"versions":["2.0.1-3.1ubuntu2","2.0.2-1ubuntu1","2.0.2-1ubuntu2","2.0.3-0ubuntu1","2.0.3-0ubuntu1.14.04.1","2.0.3-0ubuntu1.14.04.2","2.0.3-0ubuntu1.14.04.3","2.0.3-0ubuntu1.14.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-1ubuntu1.1+esm2"}]}],"versions":["1:1.2.8.dfsg-1ubuntu1","1:1.2.8.dfsg-1ubuntu1.1","1:1.2.8.dfsg-1ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-8ubuntu1.16.04.4+esm2"}]}],"versions":["2.0.3-0ubuntu1","2.0.4-4","2.0.4-6","2.0.4-7","2.0.4-8","2.0.4-8ubuntu1","2.0.4-8ubuntu1.16.04.1","2.0.4-8ubuntu1.16.04.2","2.0.4-8ubuntu1.16.04.3","2.0.4-8ubuntu1.16.04.4","2.0.4-8ubuntu1.16.04.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3+esm2"}]}],"versions":["3.1.1-3","3.1.1-3ubuntu1","3.1.1-3ubuntu1.1","3.1.1-3ubuntu1.2","3.1.1-3ubuntu1.3","3.1.1-3ubuntu1.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+esm2"}]}],"versions":["1:1.2.8.dfsg-2ubuntu4","1:1.2.8.dfsg-2ubuntu4.1","1:1.2.8.dfsg-2ubuntu4.3","1:1.2.8.dfsg-2ubuntu4.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-2.1ubuntu1.5"}]}],"versions":["3.1.2-2","3.1.2-2.1","3.1.2-2.1ubuntu1","3.1.2-2.1ubuntu1.1","3.1.2-2.1ubuntu1.2","3.1.2-2.1ubuntu1.3","3.1.2-2.1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2"}]}],"versions":["1:1.2.11.dfsg-0ubuntu2","1:1.2.11.dfsg-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-9ubuntu2.2+esm1"}]}],"versions":["2.0.4-9ubuntu1","2.0.4-9ubuntu2","2.0.4-9ubuntu2.1","2.0.4-9ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-1ubuntu5.2"}]}],"versions":["2.0.6-1ubuntu1","2.0.6-1ubuntu2","2.0.7-1ubuntu1","2.0.7-1ubuntu3","2.0.7-1ubuntu4","2.0.7-1ubuntu5","2.0.7-1ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-8ubuntu0.4"}]}],"versions":["3.1.3-6","3.1.3-8","3.1.3-8ubuntu0.1","3.1.3-8ubuntu0.2","3.1.3-8ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-2ubuntu1.5"}]}],"versions":["1:1.2.11.dfsg-1ubuntu3","1:1.2.11.dfsg-2ubuntu1","1:1.2.11.dfsg-2ubuntu1.1","1:1.2.11.dfsg-2ubuntu1.2","1:1.2.11.dfsg-2ubuntu1.3","1:1.2.11.dfsg-2ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-4ubuntu0.1"}]}],"versions":["2.0.8-6.1ubuntu2","2.0.10-3","2.0.10-4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-2ubuntu9.2"}]}],"versions":["1:1.2.11.dfsg-2ubuntu7","1:1.2.11.dfsg-2ubuntu9","1:1.2.11.dfsg-2ubuntu9.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13-4ubuntu0.1"}]}],"versions":["2.0.13-1","2.0.13-2","2.0.13-2ubuntu1","2.0.13-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-1ubuntu1.1+esm2"}]}],"versions":["1:1.2.8.dfsg-1ubuntu1","1:1.2.8.dfsg-1ubuntu1.1","1:1.2.8.dfsg-1ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8.dfsg-2ubuntu4.3+esm2"}]}],"versions":["1:1.2.8.dfsg-2ubuntu4","1:1.2.8.dfsg-2ubuntu4.1","1:1.2.8.dfsg-2ubuntu4.3","1:1.2.8.dfsg-2ubuntu4.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-0ubuntu2.2"}]}],"versions":["1:1.2.11.dfsg-0ubuntu2","1:1.2.11.dfsg-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-2ubuntu1.5"}]}],"versions":["1:1.2.11.dfsg-1ubuntu3","1:1.2.11.dfsg-2ubuntu1","1:1.2.11.dfsg-2ubuntu1.1","1:1.2.11.dfsg-2ubuntu1.2","1:1.2.11.dfsg-2ubuntu1.3","1:1.2.11.dfsg-2ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.11.dfsg-2ubuntu9.2"}]}],"versions":["1:1.2.11.dfsg-2ubuntu7","1:1.2.11.dfsg-2ubuntu9","1:1.2.11.dfsg-2ubuntu9.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3ubuntu1.3+esm2"}]}],"versions":["3.1.1-3","3.1.1-3ubuntu1","3.1.1-3ubuntu1.1","3.1.1-3ubuntu1.2","3.1.1-3ubuntu1.3","3.1.1-3ubuntu1.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-2.1ubuntu1.5"}]}],"versions":["3.1.2-2","3.1.2-2.1","3.1.2-2.1ubuntu1","3.1.2-2.1ubuntu1.1","3.1.2-2.1ubuntu1.2","3.1.2-2.1ubuntu1.3","3.1.2-2.1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.3-8ubuntu0.4"}]}],"versions":["3.1.3-6","3.1.3-8","3.1.3-8ubuntu0.1","3.1.3-8ubuntu0.2","3.1.3-8ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3-0ubuntu1.14.04.3+esm3"}]}],"versions":["2.0.1-3.1ubuntu2","2.0.2-1ubuntu1","2.0.2-1ubuntu2","2.0.3-0ubuntu1","2.0.3-0ubuntu1.14.04.1","2.0.3-0ubuntu1.14.04.2","2.0.3-0ubuntu1.14.04.3","2.0.3-0ubuntu1.14.04.3+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-8ubuntu1.16.04.4+esm2"}]}],"versions":["2.0.3-0ubuntu1","2.0.4-4","2.0.4-6","2.0.4-7","2.0.4-8","2.0.4-8ubuntu1","2.0.4-8ubuntu1.16.04.1","2.0.4-8ubuntu1.16.04.2","2.0.4-8ubuntu1.16.04.3","2.0.4-8ubuntu1.16.04.4","2.0.4-8ubuntu1.16.04.4+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-9ubuntu2.2+esm1"}]}],"versions":["2.0.4-9ubuntu1","2.0.4-9ubuntu2","2.0.4-9ubuntu2.1","2.0.4-9ubuntu2.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.7-1ubuntu5.2"}]}],"versions":["2.0.6-1ubuntu1","2.0.6-1ubuntu2","2.0.7-1ubuntu1","2.0.7-1ubuntu3","2.0.7-1ubuntu4","2.0.7-1ubuntu5","2.0.7-1ubuntu5.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10-4ubuntu0.1"}]}],"versions":["2.0.8-6.1ubuntu2","2.0.10-3","2.0.10-4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"klibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13-4ubuntu0.1"}]}],"versions":["2.0.13-1","2.0.13-2","2.0.13-2ubuntu1","2.0.13-4"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-150000.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.20-bp154.2.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.20-bp154.2.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.20-bp155.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.20-bp155.2.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.6+kde177-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vlc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.19-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rusty_v8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.106.0-1.1"}]}]}],"products":[{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"watchos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"netapp","product":"hci"},{"vendor":"netapp","product":"hci_compute_node"},{"vendor":"netapp","product":"management_services_for_element_software"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"netapp","product":"storagegrid"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"stormshield","product":"stormshield_network_security"},{"vendor":"zlib","product":"zlib"}],"references":[{"url":"https://github.com/ivd38/zlib_overflow","tags":["x_transferred","Exploit","Third Party Advisory","package","web","report"]},{"url":"https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/08/05/2","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://github.com/curl/curl/issues/9271","tags":["x_transferred","exploit","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/08/09/1","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2022/dsa-5218","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220901-0005/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT213489","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT213488","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT213494","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT213493","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT213491","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT213490","tags":["x_transferred","Third Party Advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/41","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/38","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/37","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/42","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230427-0007/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d","tags":["fix","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-561322.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-150063.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-202008.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-470355.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37434","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230427-0007"},{"url":"https://security.netapp.com/advisory/ntap-20220901-0005"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I"},{"url":"https://github.com/advisories/GHSA-cfmr-vrgj-vqwv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-37434","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7106","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-37434","tags":["report"]},{"url":"https://bugzilla.redhat.com/2116639","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7106.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7314","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-7314.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7793","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7793.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8291","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8291.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-37434","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1660757579.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1660758906.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1660759457.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1660760405","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1660762053.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1661442133.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1661442999.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1661443683.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1661443990.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1699380056.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37434.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-37434","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0328.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30715","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/08/09/1","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5570-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1843","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1853","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1892","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1973","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2003","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1285","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116639","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7106.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37434","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7314.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043753","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7793.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8291.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1095","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1095.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0254","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0254.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7106","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7314","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7793","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8291","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222845-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1202175","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37434","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222846-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222847-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222947-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-37434","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5573-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5570-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6736-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6736-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25032","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LMMKD42M3DCS4RHRGODUBFFD77ISKBSG/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4PHTZYGRNV6PDZMHUALPCK2YD6IRL3XD/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5217","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M45KVAFI32X55HONDKLE2FBN6GETMIUL/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206142","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41325","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27404","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PKKBG67OWZPTTVUGMVOGNMHRKFBIQJ4M/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-37434","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T00:00:00Z","modified":"2026-10-14T17:26:17.899Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:27.327929Z"}],"euvd":[{"id":"EUVD-2022-40062","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T00:00:00Z","modified":"2026-10-14T17:26:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:27:13.785562Z"}],"ghsa":[{"id":"GHSA-cfmr-vrgj-vqwv","title":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-06T00:00:51Z","modified":"2026-07-14T12:32:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120","CWE-787"],"updated_at":"2026-11-02T15:09:27.031Z"}],"nvd":[{"id":"CVE-2022-37434","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07.24Z","modified":"2026-10-14T18:17:03.63Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-787","CWE-120"],"updated_at":"2026-11-02T14:07:24.39467Z"}],"osv":[{"id":"ALPINE-CVE-2022-37434","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07.24Z","modified":"2026-11-03T07:31:26.106861022Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-10470","title":"CVE-2022-37434 affecting package zlib for versions less than 1.2.12-2","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-04-21T04:20:52.132658Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"AZL-41380","title":"CVE-2022-37434 affecting package crash for versions less than 8.0.4-2","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:19.893001Z"},{"id":"AZL-42760","title":"CVE-2022-37434 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-04-21T04:50:45.916657Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"AZL-43906","title":"CVE-2022-37434 affecting package ogdi 4.1.0-9","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-04-21T04:31:12.917162Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-44121","title":"CVE-2022-37434 affecting package gdal 3.6.3-2","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44136","title":"CVE-2022-37434 affecting package ogdi 4.1.1-3","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44268","title":"CVE-2022-37434 affecting package openjpeg2 2.3.1-12","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44358","title":"CVE-2022-37434 affecting package deltarpm 3.6.5-2","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"AZL-44769","title":"CVE-2022-37434 affecting package teckit for versions less than 2.5.12-4","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-04-21T04:48:56.701142Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"AZL-44991","title":"CVE-2022-37434 affecting package fltk 1.3.8-1","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"AZL-45096","title":"CVE-2022-37434 affecting package clucene 2.3.3.4-40","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"AZL-45276","title":"CVE-2022-37434 affecting package gpsbabel 1.8.0-4","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"BELL-CVE-2022-37434","title":"CVE-2022-37434 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:27.54668Z","modified":"2026-01-26T09:49:31.909477Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-37434","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T00:00:00Z","modified":"2026-11-09T13:13:29.86859223Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-09T03:16:44.651171Z"},{"id":"JLSEC-2026-478","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2026-05-07T17:36:47.122Z","modified":"2026-07-18T00:02:06.161483315Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2022-1843","title":"zlib security update","description":"Zlib is a free, general-purpose, not covered by any patents, lossless data-compression library for use on virtually any computer hardware and operating system. The zlib data format is itself portable across platforms.\r\n\r\nSecurity Fix(es):\r\n\r\nzlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)","status":"published","published":"2022-08-19T11:05:07Z","modified":"2026-08-18T01:17:09.063338355Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1853","title":"rsync security update","description":"Rsync is an open source utility that provides fast incremental file transfer. It uses the \"rsync algorithm\" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand.\r\n\r\nSecurity Fix(es):\r\n\nzlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)","status":"published","published":"2022-08-19T11:05:07Z","modified":"2026-08-18T01:17:09.083794929Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1892","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\r\n\r\nzlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)","status":"published","published":"2022-09-07T11:05:10Z","modified":"2026-08-18T01:17:17.133064669Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1973","title":"deltarpm security update","description":"Delta RPM packages contain the difference between an old and a new version of an RPM package. Applying a delta RPM on an old RPM results in the complete new RPM. It is not necessary to have a copy of the old RPM, because a delta RPM can also work with an installed RPM.\r\n\r\nSecurity Fix(es):\r\n\r\nzlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)","status":"published","published":"2022-09-30T11:05:17Z","modified":"2026-08-18T01:17:19.023319772Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-2003","title":"mariadb-connector-c security update","description":"This package is used for connecting C/C++ programs to MariaDB and MySQL database.\r\n\r\nSecurity Fix(es):\r\n\r\nzlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)","status":"published","published":"2022-10-21T11:05:19Z","modified":"2026-08-18T01:17:19.985909823Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1285","title":"mysql security update","description":"The MySQL(TM) software delivers a very fast, multi-threaded, multi-user,and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates The MySQL software has Dual Licensing, which means you can use the MySQL software free of charge under the GNU General Public License (http://www.gnu.org/licenses/). You can also purchase commercial MySQL licenses from Oracle and/or its affiliates if you do not wish to be bound by the terms of the GPL. See the chapter \"Licensing and Support\" in the manual for further info.\r\n\r\nSecurity Fix(es):\r\n\r\nzlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)","status":"published","published":"2023-05-19T11:05:45Z","modified":"2026-08-18T01:17:40.639148522Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2022:7106","title":"Red Hat Security Advisory: zlib security update","status":"published","published":"2024-09-16T08:00:19Z","modified":"2026-10-15T10:03:09Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7314","title":"Red Hat Security Advisory: zlib security update","status":"published","published":"2024-09-16T08:00:28Z","modified":"2026-10-15T10:03:10Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7793","title":"Red Hat Security Advisory: rsync security and enhancement update","status":"published","published":"2024-09-16T08:00:35Z","modified":"2026-10-15T10:03:16Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8291","title":"Red Hat Security Advisory: rsync security and bug fix update","status":"published","published":"2024-09-16T08:00:43Z","modified":"2026-10-15T10:03:22Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:1095","title":"Red Hat Security Advisory: zlib security update","status":"published","published":"2024-09-16T08:01:01Z","modified":"2026-10-15T10:03:44Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2024:0254","title":"Red Hat Security Advisory: rsync security update","status":"published","published":"2024-09-16T08:01:11Z","modified":"2026-10-15T10:06:34Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2022:7106","title":"Moderate: zlib security update","description":"The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.\n\nSecurity Fix(es):\n\n* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-25T07:22:56Z","modified":"2026-02-04T08:45:13.71374Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:7314","title":"Moderate: zlib security update","description":"The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.\n\nSecurity Fix(es):\n\n* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-11-02T13:50:56Z","modified":"2026-02-04T07:40:22.830995Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:7793","title":"Moderate: rsync security and enhancement update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:29:11Z","modified":"2026-02-04T07:40:20.329233Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8291","title":"Moderate: rsync security and bug fix update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:20:39Z","modified":"2026-02-05T07:30:10.973282Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-37434","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:00Z","modified":"2026-04-22T13:27:38.060108Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2022:7106","title":"Moderate: zlib security update","description":"The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.\n\nSecurity Fix(es):\n\n* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-25T00:00:00Z","modified":"2026-10-29T11:00:48.071340108Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:7314","title":"Moderate: zlib security update","description":"The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.\n\nSecurity Fix(es):\n\n* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-11-02T00:00:00Z","modified":"2026-10-29T11:31:16.624175397Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:7793","title":"Moderate: rsync security and enhancement update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:52.317605867Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8291","title":"Moderate: rsync security and bug fix update","description":"The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field (CVE-2022-37434)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:19.673554499Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2022-1660757579","title":"Fixed CVE-2022-37434 in zlib","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-17T17:32:59Z","modified":"2026-06-01T00:33:20.21741769Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1660758906","title":"Fixed CVE-2022-37434 in zlib","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-17T17:55:06Z","modified":"2026-06-01T00:32:38.985239923Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1660759457","title":"Fixed CVE-2022-37434 in zlib","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-17T18:04:17Z","modified":"2026-06-01T00:33:24.546163129Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1660760405","title":"Fix CVE(s): CVE-2022-37434","description":"\n   * SECURITY UPDATE: possible buffer overflow when getting a gzip header\n     extra field with inflate()\n     - debian/patches/CVE-2022-37434.patch: ensure that space the user\n       provided with inflateGetHeader() is enough when multiple calls\n       of inflate() delivers an extra header data.\n     - CVE-2022-37434","status":"published","published":"2022-08-17T18:20:05Z","modified":"2026-06-04T10:04:18.161569Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1660762053","title":"Fixed CVE-2022-37434 in zlib","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-17T18:47:33Z","modified":"2026-06-01T00:33:15.744815825Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661442133","title":"Fixed CVE-2022-37434 in rsync","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-25T15:42:13Z","modified":"2026-06-01T00:32:32.817193207Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661442999","title":"Fixed CVE-2022-37434 in rsync","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-25T15:56:39Z","modified":"2026-06-01T00:33:15.817162204Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661443683","title":"Fixed CVE-2022-37434 in rsync","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-25T16:08:03Z","modified":"2026-06-01T00:32:38.980109857Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1661443990","title":"Fixed CVE-2022-37434 in rsync","description":"- CVE-2022-37434: fix possible buffer overflow when getting a gzip header extra field\n  with inflate()","status":"published","published":"2022-08-25T16:13:10Z","modified":"2026-06-01T00:33:20.34777565Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1699380056","title":"rsync: Fix of 2 CVEs","description":"- CVE-2018-25032: fix a bug that can crash deflate on some input when using\n  Z_FIXED\n- CVE-2022-37434: fix zlib bug with a large gzip header extra field","status":"published","published":"2023-11-07T18:01:00Z","modified":"2026-06-01T00:33:17.327449894Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DEBIAN-CVE-2022-37434","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","status":"published","published":"2022-08-05T07:15:07.24Z","modified":"2026-11-03T06:02:44.212060724Z","updated_at":"2026-11-03T06:43:43.638289Z"},{"id":"DLA-3103-1","title":"zlib - security update","status":"published","published":"2022-09-12T00:00:00Z","modified":"2026-03-09T01:20:14.74186Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5218-1","title":"zlib - security update","status":"published","published":"2022-08-25T00:00:00Z","modified":"2026-03-09T02:10:38.888905Z","updated_at":"2026-11-02T15:46:17.543497Z"}]},"sources_more":{"osv":19}}