Data quality issue with CVE-2026-22184

[SEPADMIN]

CVE-2026-22184

Describe the data quality issue observed
Fix versions for zlib under Debian 11, 12, 13, 14 are the same: 1:1.2.6.dfsg-1. It does not match debian security tracker info: https://security-tracker.debian.org/tracker/CVE-2026-22184.

Suggested changes to record
Fix versions should match debian security tracker info:
Debian 11: zlib 1:1.2.11.dfsg-2+deb11u2
Debian 12: zlib 1:1.2.13.dfsg-1
Debian 13: zlib 1:1.3.dfsg+really1.3.1-1
Debian 14: zlib 1:1.3.dfsg+really1.3.1-1

Additional context
https://security-tracker.debian.org/tracker/CVE-2026-22184

[github-actions]

✨ Thank you for your interest in OSV.dev's data quality! ✨

Please review our FAQ entry on how to most efficiently have this addressed.

[cuixq]

We rely on https://security-tracker.debian.org/tracker/data/json for Debian vulnerabilities and convert them into OSV format.

For CVE-2026-22184, fixed_version for all Debian versions is 1:1.2.6.dfsg-1 so that is why we are using this version as fixed version.

Debian security tracker seems showing the version from the repositories field as the "fixed version" for each release.

CC @jess-lowe