Format: 1.8
Date: Fri, 14 Oct 2022 17:22:43 -0300
Source: zlib
Binary: zlib1g zlib1g-dev zlib1g-udeb
Architecture: arm64
Version: 1:1.2.11.dfsg-2ubuntu1.5
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-012.buildd>
Changed-By: Rodrigo Figueiredo Zaiden <rodrigo.zaiden@canonical.com>
Description:
 zlib1g     - compression library - runtime
 zlib1g-dev - compression library - development
 zlib1g-udeb - compression library - runtime for Debian installer (udeb)
Launchpad-Bugs-Fixed: 1988548
Changes:
 zlib (1:1.2.11.dfsg-2ubuntu1.5) focal-security; urgency=medium
 .
   * SECURITY UPDATE: heap-based buffer over-read (LP: #1988548)
     - debian/patches/CVE-2022-37434-1.patch: in inflate.c, add an extra
       condition to check if state->head->extra_max is greater than len
       before copying, and move the len assignment to be placed before the
       check.
     - debian/patches/CVE-2022-37434-2.patch: in the previous patch, in
       inflate.c, the place of the len assignment was causing issues so it
       was moved to be placed within the check.
     - CVE-2022-37434
Checksums-Sha1:
 2eb30c0b3f2095eff1c4c7aeda5ca27e52d3f3d9 102232 zlib1g-dbgsym_1.2.11.dfsg-2ubuntu1.5_arm64.ddeb
 6f33ae27fbc2ab19f06641a257f42b5704bad3d1 153592 zlib1g-dev_1.2.11.dfsg-2ubuntu1.5_arm64.deb
 81d5e07a6d083a73fa1b9cc891e100d0835a3bfb 47260 zlib1g-udeb_1.2.11.dfsg-2ubuntu1.5_arm64.udeb
 35dcb9ec7cc83285877842ca1bb97bc547babbeb 51564 zlib1g_1.2.11.dfsg-2ubuntu1.5_arm64.deb
 d539d138e8f59d7960c29ce70f64af43ddf6e41d 6184 zlib_1.2.11.dfsg-2ubuntu1.5_arm64.buildinfo
Checksums-Sha256:
 df8a774035135e4d2f5c441548881f9fef3a047f8c3faf6640195ec3aee15f1d 102232 zlib1g-dbgsym_1.2.11.dfsg-2ubuntu1.5_arm64.ddeb
 aca13b896f90ca536831ccbd6d11af35e4205656919e278a24029ddd00ddff3b 153592 zlib1g-dev_1.2.11.dfsg-2ubuntu1.5_arm64.deb
 bbb7132da084eda85177914ee0cfed690965d0301dd221be2e1f534720e9a55d 47260 zlib1g-udeb_1.2.11.dfsg-2ubuntu1.5_arm64.udeb
 2c5f4ba1539a6126f0f04a07bcf2dd920c9505eb4afc7aefcec6f27d0a397578 51564 zlib1g_1.2.11.dfsg-2ubuntu1.5_arm64.deb
 7b1d36d5ccbdaed95a43dca22873514f44ee40b9209e40a5e50d1e29a3f27f3d 6184 zlib_1.2.11.dfsg-2ubuntu1.5_arm64.buildinfo
Files:
 21d846fd8c8cad0695a4d8c0a6d76893 102232 debug optional zlib1g-dbgsym_1.2.11.dfsg-2ubuntu1.5_arm64.ddeb
 1cd2cdd08df5482ba7e443002b59ee0c 153592 libdevel optional zlib1g-dev_1.2.11.dfsg-2ubuntu1.5_arm64.deb
 aac589b923b86ea3dfd55ec3d2ff6e31 47260 debian-installer optional zlib1g-udeb_1.2.11.dfsg-2ubuntu1.5_arm64.udeb
 400aa6d207b86f1ff6199795a9ace5b6 51564 libs required zlib1g_1.2.11.dfsg-2ubuntu1.5_arm64.deb
 122a08e6885bbfbec9923d6fb31c8a6a 6184 libs optional zlib_1.2.11.dfsg-2ubuntu1.5_arm64.buildinfo
Original-Maintainer: Mark Brown <broonie@debian.org>
Package-Type: udeb