Re: [BackupPC-users] BackupPC-XS zlib vulnerability

[G.W. H. <ba...@ju...>]

Hi there,

On Mon, 19 Jan 2026, Robert Howard wrote:
> On 1/18/26 9:32 AM, G.W. Haywood wrote:
> > On Sat, 17 Jan 2026, jbk wrote:
> >
> >> ... thoughts / questions on the zlib CVE.
> >
> > Can we be specific about which CVE?
> 
> The CVE is https://www.cve.org/CVERecord?id=CVE-2026-22184 and
> marked disputed.

As you point out, that one doesn't affect BackupPC but there are other
CVEs for zlib which may be of more concern - if only a little more.

https://www.cvedetails.com/vulnerability-list/vendor_id-13265/year-2022/Zlib.html

We need clarity, or we risk running around like headless chickens.

-- 

73,
Ged.