VYPR

rpm package

suse/zlib&distro=SUSE Linux Enterprise Module for Development Tools 15 SP4

pkg:rpm/suse/zlib&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4

Vulnerabilities (2)

  • CVE-2023-45853Oct 14, 2023
    affected < 1.2.11-150000.3.48.1fixed 1.2.11-150000.3.48.1

    MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable becaus

  • CVE-2022-37434Aug 5, 2022
    affected < 1.2.11-150000.3.33.1fixed 1.2.11-150000.3.33.1

    zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable t