Red Hat Security AdvisoryRHSA-2022:4584
zlib security update
Released 2022-05-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) zlib-static-1.2.11-31.el9_0.1
- Red Hat Enterprise Linux AppStream (v. 9) zlib-devel-1.2.11-31.el9_0.1
- Red Hat Enterprise Linux BaseOS (v. 9) zlib-1.2.11-31.el9_0.1
Fixes 1 record
Priority HIGH 72
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.51733 · Published 2022-03-25 · Fixed in 1.13.4 CWE-787