Summary
USN-5355-1 fixed a vulnerability in zlib. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
Danilo Ramos discovered that zlib incorrectly handled memory when
performing certain deflating operations. An attacker could use this issue
to cause zlib to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | zlib | 1:1.2.8.dfsg-1ubuntu1.1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | zlib | 1:1.2.8.dfsg-2ubuntu4.3+esm1 |
Vulnerabilities 1
-
High 7.5
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
References
-
report
https://ubuntu.com/security/CVE-2018-25032