Ubuntu
zlib package

zlib 1:1.2.11.dfsg-2ubuntu9.2 source package in Ubuntu

Changelog

zlib (1:1.2.11.dfsg-2ubuntu9.2) jammy-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer over-read (LP: #1988548)
    - debian/patches/CVE-2022-37434-1.patch: in inflate.c, add an extra
      condition to check if state->head->extra_max is greater than len
      before copying, and move the len assignment to be placed before the
      check.
    - debian/patches/CVE-2022-37434-2.patch: in the previous patch, in
      inflate.c, the place of the len assignment was causing issues so it
      was moved to be placed within the check.
    - CVE-2022-37434

 -- Rodrigo Figueiredo Zaiden <email address hidden>  Fri, 14 Oct 2022 18:33:00 -0300

Upload details

Uploaded by:
Rodrigo Figueiredo Zaiden
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates main libs
Jammy security main libs

Downloads

File Size SHA-256 Checksum
zlib_1.2.11.dfsg.orig.tar.gz 361.6 KiB 80c481411a4fe8463aeb8270149a0e80bb9eaf7da44132b6e16f2b5af01bc899
zlib_1.2.11.dfsg-2ubuntu9.2.debian.tar.xz 58.7 KiB 5678d0b3d1e609297e5a3dedfcb3474bab1cafe82c0c29aec2cef01e49a88d39
zlib_1.2.11.dfsg-2ubuntu9.2.dsc 2.6 KiB ac50a5e5803c128eaef7eceda71fa13ffab3ed1e949008be244d8754d9c59e47

View changes file

Binary packages built by this source

lib32z1: compression library - 32 bit runtime

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes a 32 bit version of the
 shared library.

lib32z1-dbgsym: debug symbols for lib32z1
lib32z1-dev: compression library - 32 bit - DO NOT USE EXCEPT FOR PACKAGING

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes the development support
 files for building 32 bit applications.
 .
 This package should ONLY be used for building packages, users who do
 not need to build packages should use multiarch to install the relevant
 runtime.

lib64z1: compression library - 64 bit runtime

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes a 64 bit version of the
 shared library.

lib64z1-dbgsym: debug symbols for lib64z1
lib64z1-dev: compression library - 64 bit - DO NOT USE EXCEPT FOR PACKAGING

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes the development support
 files for building 64 bit applications.
 .
 This package should ONLY be used for building packages, users who do
 not need to build packages should use multiarch to install the relevant
 runtime.

libx32z1: compression library - x32 runtime

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes a n32 version of the shared
 library.

libx32z1-dbgsym: debug symbols for libx32z1
libx32z1-dev: compression library - x32 - DO NOT USE EXCEPT FOR PACKAGING

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes the development support
 files for building n32 applications.
 .
 This package should ONLY be used for building packages, users who do
 not need to build packages should use multiarch to install the relevant
 runtime.

zlib1g: compression library - runtime

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes the shared library.

zlib1g-dbgsym: debug symbols for zlib1g
zlib1g-dev: compression library - development

 zlib is a library implementing the deflate compression method found
 in gzip and PKZIP. This package includes the development support
 files.