zlib-1.2.11-32.el9
エラータID: AXSA:2023-5086:03
リリース日:
2023/02/13 Monday - 03:30
題名:
zlib-1.2.11-32.el9
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- zlib の inflateGetHeader 関数には、ヒープ領域の範囲外読み書きの
問題があるため、リモートの攻撃者により、大きな gzip ヘッダの拡張
フィールドを介して、メモリ破壊やクラッシュの発生に伴うサービス
拒否攻撃などを可能とする脆弱性が存在します。(CVE-2022-37434)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2022-37434
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
追加情報:
N/A
ダウンロード:
SRPMS
- zlib-1.2.11-32.el9.src.rpm
MD5: ebf69f49121afb5d26f35a4bc3a69ed2
SHA-256: 7d99f42bcec2696348d61239db66683aa39abd5f2b862bad763b321df02f6b24
Size: 533.12 kB
Asianux Server 9 for x86_64
- zlib-1.2.11-32.el9.x86_64.rpm
MD5: 30233d23228c1677a384dc1159bf38b7
SHA-256: 0371629b3bc5b0ab0e1d48c4bb336e1aa6e72384af3293656fef687ef706f69a
Size: 89.79 kB - zlib-devel-1.2.11-32.el9.x86_64.rpm
MD5: 624f9088147a22a7eb996b455a92e72e
SHA-256: 0ac399074fb21eb73a0ac51554e8f76d2b0739e704a9303684fa44cb46870ee8
Size: 43.80 kB - zlib-static-1.2.11-32.el9.x86_64.rpm
MD5: be32c7c53a294dda2e95fb200c3cf828
SHA-256: 40e7164aee7f66f8ff2428700ebf7c0869a2f92ab6f41ee2768c6d334fa4c758
Size: 65.67 kB - zlib-1.2.11-32.el9.i686.rpm
MD5: eb04e88c85f62e015e151af4d8125493
SHA-256: 516181d6bfc1a2dbeff4404ea6ad1408c84065ad92624a8e6446a779c6db9921
Size: 92.53 kB - zlib-devel-1.2.11-32.el9.i686.rpm
MD5: 8af731f866ddc84468ef6a81a3d26b8a
SHA-256: 0959edc1812d8df58f6d130454b45b61eb7b3b3632d7d3b1a6dc6d427dfae4f6
Size: 43.80 kB - zlib-static-1.2.11-32.el9.i686.rpm
MD5: 6d25178e3c6da3a086dec7cc0f4c7b4a
SHA-256: 86ef2ca80aa0c51a941ddd4054c0e6b881ec464dd8723e740f511a776672e483
Size: 69.15 kB