http://seclists.org/fulldisclosure/2022/May/33

http://seclists.org/fulldisclosure/2022/May/35

http://seclists.org/fulldisclosure/2022/May/38

http://www.openwall.com/lists/oss-security/2022/03/25/2

http://www.openwall.com/lists/oss-security/2022/03/26/1

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12

https://github.com/madler/zlib/issues/605

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/

https://security.gentoo.org/glsa/202210-42

https://security.netapp.com/advisory/ntap-20220526-0009/

https://security.netapp.com/advisory/ntap-20220729-0004/

https://support.apple.com/kb/HT213255

https://support.apple.com/kb/HT213256

https://support.apple.com/kb/HT213257

https://www.debian.org/security/2022/dsa-5111

https://www.openwall.com/lists/oss-security/2022/03/24/1

https://www.openwall.com/lists/oss-security/2022/03/28/1

https://www.openwall.com/lists/oss-security/2022/03/28/3

https://www.oracle.com/security-alerts/cpujul2022.html

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/ [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/

OR
     *cpe:2.3:a:goto:gotoassist:*:*:*:*:*:*:*:* versions up to (excluding) 11.9.18

OR
     *cpe:2.3:a:azul:zulu:6.45:*:*:*:*:*:*:*
     *cpe:2.3:a:azul:zulu:7.52:*:*:*:*:*:*:*
     *cpe:2.3:a:azul:zulu:8.60:*:*:*:*:*:*:*
     *cpe:2.3:a:azul:zulu:11.54:*:*:*:*:*:*:*
     *cpe:2.3:a:azul:zulu:13.46:*:*:*:*:*:*:*
     *cpe:2.3:a:azul:zulu:15.38:*:*:*:*:*:*:*
     *cpe:2.3:a:azul:zulu:17.32:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_sc622-2c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:scalance_sc622-2c:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_sc626-2c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:scalance_sc626-2c:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_sc632-2c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:scalance_sc632-2c:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_sc636-2c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:scalance_sc636-2c:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_sc642-2c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:scalance_sc642-2c:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0
     OR
          cpe:2.3:h:siemens:scalance_sc646-2c:-:*:*:*:*:*:*:*

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf No Types Assigned

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf [No Types Assigned]

https://security.gentoo.org/glsa/202210-42 No Types Assigned

https://security.gentoo.org/glsa/202210-42 Third Party Advisory

https://security.gentoo.org/glsa/202210-42 [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html Mailing List, Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html Patch, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html [No Types Assigned]

OR
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.9.0 up to (excluding) 3.9.13
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.10.0 up to (excluding) 3.10.5

OR
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.7.0 up to (excluding) 3.7.14
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.8.0 up to (excluding) 3.8.14
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.9.0 up to (excluding) 3.9.13
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.10.0 up to (excluding) 3.10.5

AND
     OR
          *cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.3.0 up to (excluding) 10.3.36
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.4.0 up to (excluding) 10.4.26
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.5.0 up to (excluding) 10.5.17
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (including) 10.6.0 up to (excluding) 10.6.9
     *cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* versions from (includi

OR
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
     *cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* versions from (including) 11.0.0 up to (including) 11.70.2
     *cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
     *cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
     *cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/ Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/ Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/ [No Types Assigned]

OR
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
     *cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
     *cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
     *cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.9.0 up to (excluding) 3.9.13
     *cpe:2.3:a:python:python:*:*:*:*:*:*:*:* versions from (including) 3.10.0 up to (excluding) 3.10.5

OR
     *cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions from (including) 10.15 up to (excluding) 10.15.7
     *cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
     *cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
     *cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
     *cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
     *cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
     *cpe:2.3:o:apple:mac_os_x:10.15.7:

http://seclists.org/fulldisclosure/2022/May/33 No Types Assigned

http://seclists.org/fulldisclosure/2022/May/33 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2022/May/35 No Types Assigned

http://seclists.org/fulldisclosure/2022/May/35 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2022/May/38 No Types Assigned

http://seclists.org/fulldisclosure/2022/May/38 Mailing List, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html Third Party Advisory

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/ Issue Tracking, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ Mailing List, Third Party Advisory

https://security.netapp.com/advisory/ntap-20220526-0009/ No Types Assigned

https://security.netapp.com/advisory/ntap-20220526-0009/ Third Party Advisory

https://security.netapp.com/advisory/ntap-20220729-0004/ No Types Assigned

https://security.netapp.com/advisory/ntap-20220729-0004/ Third Party Advisory

https://support.apple.com/kb/HT213255 No Types Assigned

https://support.apple.com/kb/HT213255 Third Party Advisory

https://support.apple.com/kb/HT213256 No Types Assigned

https://support.apple.com/kb/HT213256 Third Party Advisory

https://support.apple.com/kb/HT213257 No Types Assigned

https://support.apple.com/kb/HT213257 Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html No Types Assigned

https://www.oracle.com/security-alerts/cpujul2022.html Third Party Advisory

https://security.netapp.com/advisory/ntap-20220729-0004/ [No Types Assigned]

https://www.oracle.com/security-alerts/cpujul2022.html [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/ [No Types Assigned]

https://security.netapp.com/advisory/ntap-20220526-0009/ [No Types Assigned]

http://seclists.org/fulldisclosure/2022/May/33 [No Types Assigned]

http://seclists.org/fulldisclosure/2022/May/35 [No Types Assigned]

http://seclists.org/fulldisclosure/2022/May/38 [No Types Assigned]

https://support.apple.com/kb/HT213255 [No Types Assigned]

https://support.apple.com/kb/HT213256 [No Types Assigned]

https://support.apple.com/kb/HT213257 [No Types Assigned]

OR
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html Mailing List, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/ Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/ Mailing List, Third Party Advisory

https://www.debian.org/security/2022/dsa-5111 No Types Assigned

https://www.debian.org/security/2022/dsa-5111 Patch, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/ [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html [No Types Assigned]

https://www.debian.org/security/2022/dsa-5111 [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST (AV:N/AC:L/Au:N/C:N/I:N/A:P)

NIST CWE-787

OR
     *cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:* versions up to (excluding) 1.2.12

http://www.openwall.com/lists/oss-security/2022/03/25/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2022/03/25/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2022/03/26/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2022/03/26/1 Exploit, Mailing List, Third Party Advisory

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 No Types Assigned

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 Patch, Third Party Advisory

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12 No Types Assigned

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12 Patch, Third Party Advisory

https://github.com/madler/zlib/issues/605 No Types Assigned

https://github.com/madler/zlib/issues/605 Issue Tracking, Patch, Third Party Advisory

https://www.openwall.com/lists/oss-security/2022/03/24/1 No Types Assigned

https://www.openwall.com/lists/oss-security/2022/03/24/1 Mailing List, Third Party Advisory

https://www.openwall.com/lists/oss-security/2022/03/28/1 No Types Assigned

https://www.openwall.com/lists/oss-security/2022/03/28/1 Exploit, Mailing List, Third Party Advisory

https://www.openwall.com/lists/oss-security/2022/03/28/3 No Types Assigned

https://www.openwall.com/lists/oss-security/2022/03/28/3 Mailing List, Third Party Advisory

https://github.com/madler/zlib/issues/605 [No Types Assigned]

zlib 1.2.11 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12 [No Types Assigned]

https://www.openwall.com/lists/oss-security/2022/03/28/1 [No Types Assigned]

https://www.openwall.com/lists/oss-security/2022/03/28/3 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2022/03/26/1 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2022/03/25/2 [No Types Assigned]