Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 901983 - <sys-libs/zlib-ng-2.0.7: buffer overread in inflateGetHeader()
Summary: <sys-libs/zlib-ng-2.0.7: buffer overread in inflateGetHeader()
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal trivial
Assignee: Gentoo Security
URL:
Whiteboard: ~3 [noglsa]
Keywords:
Depends on:
Blocks: CVE-2022-37434
  Show dependency tree
 
Reported: 2023-03-17 21:50 UTC by Sam James
Modified: 2023-03-17 22:01 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-03-17 21:50:31 UTC 
See tracker.
Comment 1 Larry the Git Cow gentoo-dev 2023-03-17 21:54:04 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3877bb3d71236c4d039a022825c1733ae0683db0

commit 3877bb3d71236c4d039a022825c1733ae0683db0
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-03-17 21:47:42 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-03-17 21:52:52 +0000

    sys-libs/zlib-ng: add 2.0.7
    
    Bug: https://bugs.gentoo.org/901983
    Signed-off-by: Sam James <sam@gentoo.org>

 sys-libs/zlib-ng/Manifest             |  1 +
 sys-libs/zlib-ng/zlib-ng-2.0.7.ebuild | 78 +++++++++++++++++++++++++++++++++++
 2 files changed, 79 insertions(+)
Comment 2 Larry the Git Cow gentoo-dev 2023-03-17 22:00:32 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9226e625e71d03f9c34f9a9586e994c4a080ae48

commit 9226e625e71d03f9c34f9a9586e994c4a080ae48
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-03-17 21:55:34 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-03-17 21:55:34 +0000

    sys-libs/zlib-ng: drop 2.0.6
    
    Bug: https://bugs.gentoo.org/901983
    Signed-off-by: Sam James <sam@gentoo.org>

 sys-libs/zlib-ng/Manifest             |  1 -
 sys-libs/zlib-ng/zlib-ng-2.0.6.ebuild | 78 -----------------------------------
 2 files changed, 79 deletions(-)