Red Hat Security Advisory

RHSA-2022:8420

mingw-zlib security update

Released 2022-11-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) mingw-zlib-1.2.12-2.el9, mingw32-zlib-1.2.12-2.el9, mingw32-zlib-static-1.2.12-2.el9 +2

TI-2018-15259 CVE-2018-25032 · GHSA-jc36-42cf-vqwj

HIGH 72

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.51733 Published 2022-03-25 Fixed in 1.13.4 CWE-787