Skip to content
Heist/ feed
Back to feed
UnratedFix available

zlib 1.2.13

Type: patchSources: zlib

zlib 1.2.13 fixes a gzip header extra-field bug that remedies CVE-2022-37434. The release notes recommend replacing installations of 1.2.12 or earlier.

Products
zlib
Affected versions
1.2.12 or earlier
Fixed versions
1.2.13
CVEs
CVE-2022-37434
Confirmed fixed CVEs
CVE-2022-37434
Updated in this feed
29 Oct 2026, 04:09 UTC · Revision 1

Source evidence

zlib 1.2.13

github-madler-zlib · Original source

Published 14 Oct 2022, 10:14 UTC

zlib 1.2.13 fixes a gzip header extra-field bug that remedies CVE-2022-37434. The release notes recommend replacing installations of 1.2.12 or earlier.

Version 1.2.13 has these key updates: Fix a bug when getting a gzip header extra field with inflateGetHeader(). This remedies CVE-2022-37434.

zlib

Fixed versions: 1.2.13

Complete source record
{
  "id": "2a3082efad5ab2317a78645cf341a946ab90c45c3c486390b8e230082b9bd5f0",
  "url": "https://github.com/madler/zlib/releases/tag/v1.2.13",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "zlib 1.2.13",
    "summary": "zlib 1.2.13 fixes a gzip header extra-field bug that remedies CVE-2022-37434. The release notes recommend replacing installations of 1.2.12 or earlier.",
    "evidence": "Version 1.2.13 has these key updates: Fix a bug when getting a gzip header extra field with inflateGetHeader(). This remedies CVE-2022-37434.",
    "products": [
      {
        "name": {
          "value": "zlib",
          "evidence": "Release notes from zlib"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.2.13",
            "evidence": "zlib 1.2.13"
          }
        ],
        "affected_versions": [
          {
            "value": "1.2.12 or earlier",
            "evidence": "any installations of 1.2.12 or earlier should be replaced with 1.2.13"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [
      {
        "cve": "CVE-2022-37434",
        "product": "zlib",
        "evidence": "zlib 1.2.13 release notes October 13, 2022 Version 1.2.13 has these key updates: Fix a bug when getting a gzip header extra field with inflateGetHeader(). This remedies CVE-2022-37434."
      }
    ],
    "related_cves": [
      {
        "value": "CVE-2022-37434",
        "evidence": "This remedies CVE-2022-37434"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-madler-zlib",
  "document_id": 21711,
  "published_at": "2022-10-14T10:14:20+00:00"
}