Red Hat Security AdvisoryRHSA-2022:2214
zlib security update
Released 2022-05-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6 ELS) zlib-1.2.3-31.el6_10, zlib-devel-1.2.3-31.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6 ELS) minizip-1.2.3-31.el6_10, minizip-devel-1.2.3-31.el6_10, zlib-static-1.2.3-31.el6_10
Fixes 1 record
Priority HIGH 72
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.51733 · Published 2022-03-25 · Fixed in 1.13.4 CWE-787
