Received: from mail-qv1-xf2e.google.com (mail-qv1-xf2e.google.com [IPv6:2607:f8b0:4864:20::f2e])
	by gbr-app-1.alpinelinux.org (Postfix) with ESMTPS id D7F26225CEA
	for <~alpine/users@lists.alpinelinux.org>; Tue, 17 Oct 2023 08:08:48 +0000 (UTC)
Received: by mail-qv1-xf2e.google.com with SMTP id 6a1803df08f44-66cfd874520so35655846d6.2
        for <~alpine/users@lists.alpinelinux.org>; Tue, 17 Oct 2023 01:08:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=whitesourcesoftware.com; s=google; t=1697530127; x=1698134927; darn=lists.alpinelinux.org;
        h=to:cc:date:message-id:subject:mime-version
         :content-transfer-encoding:from:from:to:cc:subject:date:message-id
         :reply-to;
        bh=wpw0LdD3xyuk+zAU/3tDy2vZvWubRMAqHRJp3yb2OvQ=;
        b=BJbjbjcBD/JbFT/G6VjsOhOKwKlpFcNtWCH23Xw5ED9q/CA3B9Yobi3m3FkaoBuSRb
         kDCtyoFhyR2fxJe79oBp8YFju3gjOqDkKz93tJjfrJD4253o2NPkSxl8phQz3cZRmoL0
         iy4THJGtc91pxyYiJZJlHvty62hhPWyFo+099nkLa16YyJrIaeLyK3eI98+nKVpm23nN
         2tBZAYOWmTc2WF+zgyjfbA4SAMOMv0TmC+XLaXc6IH6tu1q//ORWSTg8WvbcXLQqgGzx
         KK1pusZjW2ABsafYFJemkkPV8TQErrLSGWe2aRRVq8Unei/2vu2CJM5mcfK0+dj1PaBG
         WQCg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1697530127; x=1698134927;
        h=to:cc:date:message-id:subject:mime-version
         :content-transfer-encoding:from:x-gm-message-state:from:to:cc
         :subject:date:message-id:reply-to;
        bh=wpw0LdD3xyuk+zAU/3tDy2vZvWubRMAqHRJp3yb2OvQ=;
        b=lv57GrKwNZLcejTgqxSvzV+s+sx7VQs4TCYfoa1uy5CxGEKRrHkDDr5t1iGPtYEaWO
         d6QEHDB/VTbOh3ZMQDA18+YughRrjFKXItN2xt/Jnf3k27HPtlgeLavg0GI+wjMveqOI
         O6HvH7ziJGZsUgV6ONFFi3CsM1AoCt3ITwi/Lhui0mAzOyuBRLkboRDVQZxcW0PnVSMu
         x+0ISxtqcKf+JeQqLTtwj/JxSOsOG4G7ZpF7dHAojAuzFhKKTCjYQGeD21RfmNehsfNI
         idjWpLLWtC3KwIsYzjcktHfIqsbl1OtobKF8CxLLpFiTsg+mhovZnjVM+2NYmZ1BgHuL
         6fCw==
X-Gm-Message-State: AOJu0YzOm0TNjRLD96/8kEwnJrY3SuCdmZKugsAIFDVVxI/ap/BPA4EQ
	/U034rgV23ipCB3LaY5pGB57I6G0uWFuECl3iFfhaw==
X-Google-Smtp-Source: AGHT+IH079EWAlFqMrM6LLpAScPCzScbmL+/yMQ/sNWFxKanAg2c8dsW5WEj3lZsq03UTeezZChJmA==
X-Received: by 2002:ad4:5b83:0:b0:65d:660:25a8 with SMTP id 3-20020ad45b83000000b0065d066025a8mr1712318qvp.20.1697530127613;
        Tue, 17 Oct 2023 01:08:47 -0700 (PDT)
Received: from smtpclient.apple (ec2-35-153-5-93.compute-1.amazonaws.com. [35.153.5.93])
        by smtp.gmail.com with ESMTPSA id mh3-20020a056214564300b0065862497fd2sm358222qvb.22.2023.10.17.01.08.46
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 17 Oct 2023 01:08:47 -0700 (PDT)
From: Dor Hayun <dor.hayun@whitesourcesoftware.com>
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.100.2.1.4\))
Subject: Re: Inquiry Regarding Security Status and CVE-2022-37434 for zlib in
 Alpine Linux 3.8
Message-Id: <397D6EEF-DFC6-4982-9C1B-1C965E822CD5@whitesourcesoftware.com>
Date: Tue, 17 Oct 2023 11:08:35 +0300
Cc: =?utf-8?Q?Josef_Vyb=C3=ADhal?= <josef@vybihal.cz>
To: ~alpine/users@lists.alpinelinux.org
X-Mailer: Apple Mail (2.3774.100.2.1.4)

Hi,

You are correct, but we simply need to understand whether it is =
vulnerable or not. Why does it only appear for these branches and not =
below?

https://security.alpinelinux.org/vuln/CVE-2022-37434