OESA-2022-1973

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1973
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2022-1973.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2022-1973
Upstream
Published
2022-09-30T11:04:23Z
Modified
2025-08-12T05:14:39.055200Z
Summary
deltarpm security update
Details

Delta RPM packages contain the difference between an old and a new version of an RPM package. Applying a delta RPM on an old RPM results in the complete new RPM. It is not necessary to have a copy of the old RPM, because a delta RPM can also work with an installed RPM.

Security Fix(es):

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).(CVE-2022-37434)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / deltarpm

Package

Name
deltarpm
Purl
pkg:rpm/openEuler/deltarpm&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.2-5.oe1

Ecosystem specific 

{
    "src": [
        "deltarpm-3.6.2-5.oe1.src.rpm"
    ],
    "x86_64": [
        "python3-deltarpm-3.6.2-5.oe1.x86_64.rpm",
        "deltarpm-debuginfo-3.6.2-5.oe1.x86_64.rpm",
        "python2-deltarpm-3.6.2-5.oe1.x86_64.rpm",
        "deltarpm-3.6.2-5.oe1.x86_64.rpm",
        "deltarpm-debugsource-3.6.2-5.oe1.x86_64.rpm",
        "drpmsync-3.6.2-5.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "python2-deltarpm-3.6.2-5.oe1.aarch64.rpm",
        "deltarpm-debugsource-3.6.2-5.oe1.aarch64.rpm",
        "drpmsync-3.6.2-5.oe1.aarch64.rpm",
        "deltarpm-3.6.2-5.oe1.aarch64.rpm",
        "deltarpm-debuginfo-3.6.2-5.oe1.aarch64.rpm",
        "python3-deltarpm-3.6.2-5.oe1.aarch64.rpm"
    ],
    "noarch": [
        "deltarpm-help-3.6.2-5.oe1.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / deltarpm

Package

Name
deltarpm
Purl
pkg:rpm/openEuler/deltarpm&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.2-5.oe1

Ecosystem specific 

{
    "src": [
        "deltarpm-3.6.2-5.oe1.src.rpm"
    ],
    "x86_64": [
        "drpmsync-3.6.2-5.oe1.x86_64.rpm",
        "deltarpm-debuginfo-3.6.2-5.oe1.x86_64.rpm",
        "deltarpm-3.6.2-5.oe1.x86_64.rpm",
        "python3-deltarpm-3.6.2-5.oe1.x86_64.rpm",
        "python2-deltarpm-3.6.2-5.oe1.x86_64.rpm",
        "deltarpm-debugsource-3.6.2-5.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "deltarpm-debuginfo-3.6.2-5.oe1.aarch64.rpm",
        "deltarpm-debugsource-3.6.2-5.oe1.aarch64.rpm",
        "drpmsync-3.6.2-5.oe1.aarch64.rpm",
        "python2-deltarpm-3.6.2-5.oe1.aarch64.rpm",
        "deltarpm-3.6.2-5.oe1.aarch64.rpm",
        "python3-deltarpm-3.6.2-5.oe1.aarch64.rpm"
    ],
    "noarch": [
        "deltarpm-help-3.6.2-5.oe1.noarch.rpm"
    ]
}

openEuler:22.03-LTS / deltarpm

Package

Name
deltarpm
Purl
pkg:rpm/openEuler/deltarpm&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.3-2.oe2203

Ecosystem specific 

{
    "src": [
        "deltarpm-3.6.3-2.oe2203.src.rpm"
    ],
    "x86_64": [
        "drpmsync-3.6.3-2.oe2203.x86_64.rpm",
        "python3-deltarpm-3.6.3-2.oe2203.x86_64.rpm",
        "deltarpm-3.6.3-2.oe2203.x86_64.rpm",
        "deltarpm-debuginfo-3.6.3-2.oe2203.x86_64.rpm",
        "deltarpm-debugsource-3.6.3-2.oe2203.x86_64.rpm"
    ],
    "aarch64": [
        "python3-deltarpm-3.6.3-2.oe2203.aarch64.rpm",
        "deltarpm-debugsource-3.6.3-2.oe2203.aarch64.rpm",
        "deltarpm-3.6.3-2.oe2203.aarch64.rpm",
        "deltarpm-debuginfo-3.6.3-2.oe2203.aarch64.rpm",
        "drpmsync-3.6.3-2.oe2203.aarch64.rpm"
    ],
    "noarch": [
        "deltarpm-help-3.6.3-2.oe2203.noarch.rpm"
    ]
}