Red Hat Security Advisory

RHSA-2023:0943

zlib security update

Released 2023-02-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.7) zlib-1.2.7-18.el7_7.1, zlib-devel-1.2.7-18.el7_7.1
Red Hat Enterprise Linux Server E4S (v. 7.7) zlib-1.2.7-18.el7_7.1, zlib-devel-1.2.7-18.el7_7.1
Red Hat Enterprise Linux Server Optional AUS (v. 7.7) minizip-1.2.7-18.el7_7.1, minizip-devel-1.2.7-18.el7_7.1, zlib-static-1.2.7-18.el7_7.1
Red Hat Enterprise Linux Server Optional E4S (v. 7.7) minizip-1.2.7-18.el7_7.1, minizip-devel-1.2.7-18.el7_7.1, zlib-static-1.2.7-18.el7_7.1
Red Hat Enterprise Linux Server Optional TUS (v. 7.7) minizip-1.2.7-18.el7_7.1, minizip-devel-1.2.7-18.el7_7.1, zlib-static-1.2.7-18.el7_7.1
Red Hat Enterprise Linux Server TUS (v. 7.7) zlib-1.2.7-18.el7_7.1, zlib-devel-1.2.7-18.el7_7.1

TI-2018-15259 CVE-2018-25032 · GHSA-jc36-42cf-vqwj

HIGH 72

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.51733 Published 2022-03-25 Fixed in 1.13.4 CWE-787