Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

Ubuntu 16.04 ESM: USN-5355-3 Critical Zlib Vulnerability Mitigation

ubuntu
Calendar Grey March 30, 2022
Dist Ubuntu Esm H88
A security flaw in zlib on Ubuntu systems might lead to unexpected crashes or enable unauthorized code execution via specially designed input. Take action and upgrade immediately!
zlib could be made to crash or run programs if it received specially crafted input.

Summary

zlib could be made to crash or run programs if it received specially

crafted input.

Software Description:

- zlib: compression library - 32 bit runtime

Details:

USN-5355-1 fixed a vulnerability in zlib. This update provides

the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Danilo Ramos discovered that zlib incorrectly handled memory when

performing certain deflating operations. An attacker could use this issue

to cause zlib to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu zlib

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  lib32z1                         1:1.2.8.dfsg-2ubuntu4.3+esm1
  lib64z1                         1:1.2.8.dfsg-2ubuntu4.3+esm1
  libx32z1                        1:1.2.8.dfsg-2ubuntu4.3+esm1
  zlib1g                          1:1.2.8.dfsg-2ubuntu4.3+esm1

Ubuntu 14.04 ESM:
  lib32z1                         1:1.2.8.dfsg-1ubuntu1.1+esm1
  lib64z1                         1:1.2.8.dfsg-1ubuntu1.1+esm1
  libx32z1                        1:1.2.8.dfsg-1ubuntu1.1+esm1
  zlib1g                          1:1.2.8.dfsg-1ubuntu1.1+esm1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5355-2

https://ubuntu.com/security/notices/USN-5355-1

CVE-2018-25032

Severity
critical
Lowest
Low
Medium
High
Critical

March 30, 2022

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu zlib

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.