{"cves":["CVE-2022-37434"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[3.1.3-19]\n- Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field\n\n[3.1.3-18]\n- Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers\n\n[3.1.3-17]\n- Related: #2043753 - New option should not be sent to the server every time\n\n[3.1.3-16]\n- Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering\n\n[3.1.3-15]\n- Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs","id":"ELSA-2022-7793","ovalId":"oval:com.oracle.elsa:def:20227793","source":"oracle_linux","title":"ELSA-2022-7793:  rsync security and enhancement update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2022-7793.html"}