Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia: 2023-0312 Critical Update - Zlib Heap Overflow Fix

mageia
Calendar Grey November 9, 2023
Dist Mageia Esm H88
The recent update to Mageia's zlib has successfully addressed an integer overflow issue that was leading to a serious heap overflow vulnerability. Learn more here.
The updated packages fix a security vulnerability: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a lo...

Summary

The updated packages fix a security vulnerability:
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. (CVE-2023-45853)

References

- https://bugs.mageia.org/show_bug.cgi?id=32426

- https://www.openwall.com/lists/oss-security/2023/10/20/9

- https://www.cve.org/CVERecord?id=CVE-2023-45853

Topics%20covered

Topics Covered

security advisory critical update heap overflow zlib Mageia

Resolution

SRPMS

- 8/core/zlib-1.2.12-1.4.mga8

- 9/core/zlib-1.2.13-1.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 09 Nov 2023
URL: https://advisories.mageia.org/MGASA-2023-0312.html
Type: security
CVE: CVE-2023-45853

Topics%20covered

Topics Covered

security advisory critical update heap overflow zlib Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here