Petr Štetiar 5f189f2f33 zlib: backport fix for heap-based buffer over-read (CVE-2022-37434) ...

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow
in inflate in inflate.c via a large gzip header extra field. NOTE: only
applications that call inflateGetHeader are affected. Some common
applications bundle the affected zlib source code but may be unable to
call inflateGetHeader.

Fixes: CVE-2022-37434
References: https://github.com/ivd38/zlib_overflow
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 7df6795d4c25447683fd4b4a4813bebcddaea547)

2022-08-08 10:00:39 +02:00

..

patches

zlib: backport fix for heap-based buffer over-read (CVE-2022-37434)

2022-08-08 10:00:39 +02:00

Config.in

package/libs/zlib: Add option for O3 optimization

2018-01-02 17:11:12 +01:00

Makefile

zlib: backport fix for heap-based buffer over-read (CVE-2022-37434)

2022-08-08 10:00:39 +02:00