High ELSA-2022-4584 1 CVE

Important: zlib security update (Oracle Linux 9)

Published Jun 30, 2022 · Updated Jun 30, 2022

Ecosystem: Oracle Linux

Summary

[1.2.11-31.1]
- Fix CVE-2018-25032
Resolves: CVE-2018-25032

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	zlib	0:1.2.11-31.el9_0.1
Oracle Linux · 9	zlib-devel	0:1.2.11-31.el9_0.1
Oracle Linux · 9	zlib-static	0:1.2.11-31.el9_0.1

Vulnerabilities 1

High 7.5

CVE-2018-25032 Public exploit EPSS 52%

Nokogiri affected by zlib's Out-of-bounds Write vulnerability

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

mariadb-10.3 mariadb-10.6 mariadb openjpeg2 Debian Ubuntu Azure Linux Alpine Wolfi RubyGems

Mar 25, 2022