High ELSA-2022-2213 1 CVE

Important: zlib security update (Oracle Linux 7)

Published May 12, 2022 · Updated May 12, 2022

Ecosystem: Oracle Linux

Summary

[1.2.7-20]
- Resolves: CVE-2018-25032

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	minizip	0:1.2.7-20.el7_9
Oracle Linux · 7	minizip-devel	0:1.2.7-20.el7_9
Oracle Linux · 7	zlib	0:1.2.7-20.el7_9
Oracle Linux · 7	zlib-devel	0:1.2.7-20.el7_9
Oracle Linux · 7	zlib-static	0:1.2.7-20.el7_9

Vulnerabilities 1

High 7.5

CVE-2018-25032 Public exploit EPSS 52%

Nokogiri affected by zlib's Out-of-bounds Write vulnerability

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

mariadb-10.3 mariadb-10.6 mariadb openjpeg2 Debian Ubuntu Azure Linux Alpine Wolfi RubyGems

Mar 25, 2022