Red Hat Security AdvisoryRHSA-2023:1095
zlib security update
Released 2023-03-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) zlib-1.2.7-21.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) minizip-1.2.7-21.el7_9, minizip-devel-1.2.7-21.el7_9, zlib-devel-1.2.7-21.el7_9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) minizip-1.2.7-21.el7_9, minizip-devel-1.2.7-21.el7_9, zlib-devel-1.2.7-21.el7_9 +1
- Red Hat Enterprise Linux Server (v. 7) zlib-1.2.7-21.el7_9, zlib-1.2.7-21.el7_9.ppc, zlib-devel-1.2.7-21.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7) minizip-1.2.7-21.el7_9, minizip-1.2.7-21.el7_9.ppc, minizip-devel-1.2.7-21.el7_9 +3
- Red Hat Enterprise Linux Workstation (v. 7) zlib-1.2.7-21.el7_9, zlib-devel-1.2.7-21.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) minizip-1.2.7-21.el7_9, minizip-devel-1.2.7-21.el7_9, zlib-static-1.2.7-21.el7_9
Fixes 1 record
Priority HIGH 75
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.19243 · Published 2022-08-05 · Partial fix CWE-120
