Received: from mail-qt1-x836.google.com (mail-qt1-x836.google.com [IPv6:2607:f8b0:4864:20::836]) by gbr-app-1.alpinelinux.org (Postfix) with ESMTPS id 3A08A225AAC for <~alpine/users@lists.alpinelinux.org>; Tue, 17 Oct 2023 08:03:16 +0000 (UTC) Received: by mail-qt1-x836.google.com with SMTP id d75a77b69052e-419b232fc99so25762111cf.1 for <~alpine/users@lists.alpinelinux.org>; Tue, 17 Oct 2023 01:03:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=whitesourcesoftware.com; s=google; t=1697529795; x=1698134595; darn=lists.alpinelinux.org; h=to:cc:date:message-id:subject:mime-version:from:from:to:cc:subject :date:message-id:reply-to; bh=viEdc8XV3zlbpLM64jWohL4dvbVeZVH3qfmQT3h2b2s=; b=Fc8Xnqq47DR6Zl7lcUfHgxJeOjad0VepGxrlYEn4YGw7QskbBfzlHEoyI/OHGfJhPF WJC7Ge9bRK1mM280HCHQx8ag/Lwwg1blYHHWEeyAyhwUrNRNoCr5peiQ3eC4fChgJhgF AnUfk9+Aaf1XkdEVzFGmDz3jDprbgOq+a9T8Hmv4lR3mEYzPfDroV9wW1UIQDeVR8WOE JG+Ueym0j1f9yDYXkZ3/T1X0oQJLiTeU97A4EArq5WEjVx9J0bdzg/cT5++xRtvMlRAl deqhazX0FiNamd4q+2PAwwwMx5Xu1fDlEjaHNNQxgyHEPWZoyo4msidLRq42Z7yiQ6Ph VD4Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1697529795; x=1698134595; h=to:cc:date:message-id:subject:mime-version:from:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=viEdc8XV3zlbpLM64jWohL4dvbVeZVH3qfmQT3h2b2s=; b=wJ81RuRtp3X88/E7UlByj13nqmmoFuv2VCvs8abFhw6RkSizBbZgTfltLy1YuiJ1SM jBaSEQwOlyW892kA44iwzFPRr0Hemsxgu6sZT6f2D+Bv3g04FQPJl5a/lMiNDpyTtoie x7Dqb/LRtnhSiy/THBY4L5pHEhpf+DsKxt03vKhjqpu91JL3RoDSbE12medClKe4tGj+ yJ7GvicoQ4MrlHBsR4FZPRTcyd/ILKPd+Xlcf0g/374pO8XcND0aBo+3t7om66jRQaez z5dwf7vSIMiiB+eWElyEQf7SJ961YMKJ8Yfq3qp3Rb/LCmEoTSv5wKygTdsGkHhW+Qi0 yLlQ== X-Gm-Message-State: AOJu0Yz5UuCgxSdg+oUl5UbZq2cbf2saSPBXqeWpsk2PJ5OXxn97W4+F t6VQcOk7ne96VeglHzPaEo39PKv66v8CDwvgVFYZfQ== X-Google-Smtp-Source: AGHT+IFPxi5CwgNPb3vS8t/HB7vIqxz9Zk5S0pjaz3DzS8URZvY7COivL6X/Oa1Bbvaou2ifOxtbzA== X-Received: by 2002:ac8:5ac5:0:b0:412:309f:c0fa with SMTP id d5-20020ac85ac5000000b00412309fc0famr1502678qtd.64.1697529794892; Tue, 17 Oct 2023 01:03:14 -0700 (PDT) Received: from smtpclient.apple (ec2-35-153-5-93.compute-1.amazonaws.com. [35.153.5.93]) by smtp.gmail.com with ESMTPSA id a2-20020ac81082000000b003f6ac526568sm422918qtj.39.2023.10.17.01.03.13 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 17 Oct 2023 01:03:14 -0700 (PDT) From: Dor Hayun Content-Type: multipart/alternative; boundary="Apple-Mail=_0BE0DF25-D3EB-44C9-AA22-F344E05B9F5C" Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.100.2.1.4\)) Subject: Re: Inquiry Regarding Security Status and CVE-2022-37434 for zlib in Alpine Linux 3.8 Message-Id: <53B55CAB-D9A4-4ADA-A2B2-A47DB0649649@whitesourcesoftware.com> Date: Tue, 17 Oct 2023 11:03:02 +0300 Cc: =?utf-8?Q?Josef_Vyb=C3=ADhal?= To: ~alpine/users@lists.alpinelinux.org X-Mailer: Apple Mail (2.3774.100.2.1.4) --Apple-Mail=_0BE0DF25-D3EB-44C9-AA22-F344E05B9F5C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, You are correct, but we simply need to understand whether it is = vulnerable or not. Why does it only appear for these branches and not = below? https://security.alpinelinux.org/vuln/CVE-2022-37434 --Apple-Mail=_0BE0DF25-D3EB-44C9-AA22-F344E05B9F5C Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
Hi,

You are correct, but we simply need to understand whether it is vulnerable or not. Why does it only appear for these branches and not below?

https://security.alpinelinux.org/vuln/CVE-2022-37434
--Apple-Mail=_0BE0DF25-D3EB-44C9-AA22-F344E05B9F5C--