Summary
[1.2.11-18]
- Resolves: CVE-2018-25032
[1.2.11-17]
- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | zlib | 0:1.2.11-18.el8_5 |
| Oracle Linux · 8 | zlib-devel | 0:1.2.11-18.el8_5 |
| Oracle Linux · 8 | zlib-static | 0:1.2.11-18.el8_5 |
Vulnerabilities 1
-
High 7.5
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.