High ELSA-2022-8420 1 CVE

Important: mingw-zlib security update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[1.2.12-2]
- Fix changelog
Related: rhbz#2068371

[1.2.12-1]
- Bump version to 1.2.12 to fix CVE-2018-25032
Related: rhbz#2068371

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	mingw32-zlib	0:1.2.12-2.el9
Oracle Linux · 9	mingw32-zlib-static	0:1.2.12-2.el9
Oracle Linux · 9	mingw64-zlib	0:1.2.12-2.el9
Oracle Linux · 9	mingw64-zlib-static	0:1.2.12-2.el9

Vulnerabilities 1

High 7.5

CVE-2018-25032 Public exploit EPSS 52%

Nokogiri affected by zlib's Out-of-bounds Write vulnerability

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

mariadb-10.3 mariadb-10.6 mariadb openjpeg2 Debian Ubuntu Azure Linux Alpine Wolfi RubyGems

Mar 25, 2022