Red Hat Security AdvisoryRHSA-2022:2213
zlib security update
Released 2022-05-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) zlib-1.2.7-20.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) minizip-1.2.7-20.el7_9, minizip-devel-1.2.7-20.el7_9, zlib-devel-1.2.7-20.el7_9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) minizip-1.2.7-20.el7_9, minizip-devel-1.2.7-20.el7_9, zlib-devel-1.2.7-20.el7_9 +1
- Red Hat Enterprise Linux Server (v. 7) zlib-1.2.7-20.el7_9, zlib-1.2.7-20.el7_9.ppc, zlib-devel-1.2.7-20.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7) minizip-1.2.7-20.el7_9, minizip-1.2.7-20.el7_9.ppc, minizip-devel-1.2.7-20.el7_9 +3
- Red Hat Enterprise Linux Workstation (v. 7) zlib-1.2.7-20.el7_9, zlib-devel-1.2.7-20.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) minizip-1.2.7-20.el7_9, minizip-devel-1.2.7-20.el7_9, zlib-static-1.2.7-20.el7_9
Fixes 1 record
Priority HIGH 72
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.51733 · Published 2022-03-25 · Fixed in 1.13.4 CWE-787
