Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
98
security advisorysecurity issueupdateRed Hat Enterprise Linux 7.7 RHSA-2023:0943-01 Important Zlib Flaw
An update for zlib is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: zlib security update Advisory ID: RHSA-2023:0943-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:0943 Issue date: 2023-02-28 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for zlib is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.7) - x86_64 Red Hat Enterprise Linux Server E4S (v. 7.7) - ppc64le, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.7) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.7) - ppc64le, x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.7) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.7) - x86_64 3. Description: The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s)listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.7): Source: zlib-1.2.7-18.el7_7.1.src.rpm x86_64: zlib-1.2.7-18.el7_7.1.i686.rpm zlib-1.2.7-18.el7_7.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_7.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_7.1.x86_64.rpm zlib-devel-1.2.7-18.el7_7.1.i686.rpm zlib-devel-1.2.7-18.el7_7.1.x86_64.rpm Red Hat Enterprise Linux Server E4S (v. 7.7): Source: zlib-1.2.7-18.el7_7.1.src.rpm ppc64le: zlib-1.2.7-18.el7_7.1.ppc64le.rpm zlib-debuginfo-1.2.7-18.el7_7.1.ppc64le.rpm zlib-devel-1.2.7-18.el7_7.1.ppc64le.rpm x86_64: zlib-1.2.7-18.el7_7.1.i686.rpm zlib-1.2.7-18.el7_7.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_7.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_7.1.x86_64.rpm zlib-devel-1.2.7-18.el7_7.1.i686.rpm zlib-devel-1.2.7-18.el7_7.1.x86_64.rpm Red Hat Enterprise Linux Server TUS (v. 7.7): Source: zlib-1.2.7-18.el7_7.1.src.rpm x86_64: zlib-1.2.7-18.el7_7.1.i686.rpm zlib-1.2.7-18.el7_7.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_7.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_7.1.x86_64.rpm zlib-devel-1.2.7-18.el7_7.1.i686.rpm zlib-devel-1.2.7-18.el7_7.1.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.7): x86_64: minizip-1.2.7-18.el7_7.1.i686.rpm minizip-1.2.7-18.el7_7.1.x86_64.rpm minizip-devel-1.2.7-18.el7_7.1.i686.rpm minizip-devel-1.2.7-18.el7_7.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_7.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_7.1.x86_64.rpm zlib-static-1.2.7-18.el7_7.1.i686.rpm zlib-static-1.2.7-18.el7_7.1.x86_64.rpm Red Hat Enterprise Linux Server Optional E4S (v.7.7): ppc64le: minizip-1.2.7-18.el7_7.1.ppc64le.rpm minizip-devel-1.2.7-18.el7_7.1.ppc64le.rpm zlib-debuginfo-1.2.7-18.el7_7.1.ppc64le.rpm zlib-static-1.2.7-18.el7_7.1.ppc64le.rpm x86_64: minizip-1.2.7-18.el7_7.1.i686.rpm minizip-1.2.7-18.el7_7.1.x86_64.rpm minizip-devel-1.2.7-18.el7_7.1.i686.rpm minizip-devel-1.2.7-18.el7_7.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_7.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_7.1.x86_64.rpm zlib-static-1.2.7-18.el7_7.1.i686.rpm zlib-static-1.2.7-18.el7_7.1.x86_64.rpm Red Hat Enterprise Linux Server Optional TUS (v. 7.7): x86_64: minizip-1.2.7-18.el7_7.1.i686.rpm minizip-1.2.7-18.el7_7.1.x86_64.rpm minizip-devel-1.2.7-18.el7_7.1.i686.rpm minizip-devel-1.2.7-18.el7_7.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_7.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_7.1.x86_64.rpm zlib-static-1.2.7-18.el7_7.1.i686.rpm zlib-static-1.2.7-18.el7_7.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBY/3zpNzjgjWX9erEAQgopRAAnicJE4nJGD63kGm+PqFucbREdCZ3tCHM ppSjAZYm6e3z2cXqCA8Y/ZQxQjLGFUuT3PtzsD8eehFIu7WL6hO7s+jVaor/PYxG h1X9YRrtAGlCrMwUXgSpTmqCeXMofoXhZRgj/0fJASp/+C6sMOBYyJkPsSCT00fu bIU/TEKTFa6UNjLGBZLNMD1htyYAI70mrLp+zJB4HlFP8G7bX8XMduBwyFu8l9Ye C4u9A4n1yUWo6eJpK1jn91y9W0VcB2JEnCQ3CySVI4Oa0hzSQBEfVnGDicELtAcv F6yV4AcCk30JtsXLtihnZszk5Ke0uH/VICY9ubPH52rBqLzCELWrAtEkcfGJnPFr /TrCfgDC9vIDE9+QPWamraX62NKy9vwOf/pPOnSOGJUYngYuVIJl/ipWwbr0BhLd J3Ckbo0jlXjjXmMKnfv0LDr/0dvLNGc4VjqbEcJULNMiUu3Lh/I0/v3H7NCr8674 RFDBaKXJlzgJGCcQ7JFr/63Aw6kOp9lVJgjbnDYs1AV/FQVkLsIvw5hIdONZI5cP uJcrO4lfjw/4827E7gdBTnQEBRuZB/wGtmtcFrvIPiK+qWl0t457ic+nvDl8noiM kBZezS7yByEjCqudJgxEYrB8uUt+gX9aj08sqeyM9jSzUCpJAVCNycufQGvmblNA vP1CheTiOdc=wNUm -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Feb 28, 2023
•Important
Red Hat
98
security advisoryRed Hat Enterprise Linuxcritical fixCritical Zlib Compression Vulnerability in Red Hat Enterprise Linux 7.4
An update for zlib is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: zlib security update Advisory ID: RHSA-2023:0976-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:0976 Issue date: 2023-02-28 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for zlib is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.4) - x86_64 3. Description: The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. PackageList: Red Hat Enterprise Linux Server AUS (v. 7.4): Source: zlib-1.2.7-17.el7_4.1.src.rpm x86_64: zlib-1.2.7-17.el7_4.1.i686.rpm zlib-1.2.7-17.el7_4.1.x86_64.rpm zlib-debuginfo-1.2.7-17.el7_4.1.i686.rpm zlib-debuginfo-1.2.7-17.el7_4.1.x86_64.rpm zlib-devel-1.2.7-17.el7_4.1.i686.rpm zlib-devel-1.2.7-17.el7_4.1.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.4): x86_64: minizip-1.2.7-17.el7_4.1.i686.rpm minizip-1.2.7-17.el7_4.1.x86_64.rpm minizip-devel-1.2.7-17.el7_4.1.i686.rpm minizip-devel-1.2.7-17.el7_4.1.x86_64.rpm zlib-debuginfo-1.2.7-17.el7_4.1.i686.rpm zlib-debuginfo-1.2.7-17.el7_4.1.x86_64.rpm zlib-static-1.2.7-17.el7_4.1.i686.rpm zlib-static-1.2.7-17.el7_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY/3zotzjgjWX9erEAQjRCQ//Ro0HU1Tt7+Zblkm9OhYQt5qowtn36cJu t1pvHB3bMLnM4mkwg4QU+uUkhJGmjxBW0Fm/cQB2wttphDZZXIDT0YRVIy7HHgLz o535bEfBOFo11eKu8Zr3cHbfUIdWVkz1I4g8gCA09LKHDBPquFg9oMpAjgzhMcH5 +uLaTJnQaXwmMySC2XMwEZa6Pl6StJ+kFFwNmFe6XMYJuyGfnOnNUmpkiokYnTas 8KgeCMvJu0hhcMUtC9KK+P/ydyHjrMNqZHZIJsiFTTKpgli5BO6L6t9tP31O/AqF Bk1W/rChpct9+Nb0su92Ztbll/nRqazeajSqF1OEHyzqCROPFfldomibBCBCTfLS Fhwv/AHZ6Mw4DdJu1dHGeMWwS67Xz5RaFdUt55mXy1uIy9rljnGr4nkFx/3Gz0b0 Pl5VeTvL/+4+pqpZJVwo2dKZpV6Lv6IxrxWhH6IPNsNbmtpZ5bAY0BuO+UsYbN6Z sS5ts4uTLGF3ENvSmBRLDNdDD987TbiWvOTZNEzOAGXqTlYACU4n6I0ywLNZppGu g3+sFRKCNgFGafpn0uj+g0E2jV8/j36w57g5rbAQfWfWHQK3PzQOwumZX7sR1AzC 7XccLWXMoQnyPji/jtasKorlr73G//Eiewo0ACSdA0uOLJy/klGSTZ+l9BHGR7DN /oxXY+Wjkl0=fsnn -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Feb 28, 2023
•Important
Red Hat
98
security advisorysecurity impactdata integrityRed Hat 7.6: RHSA-2023-0975-01 Important zlib Compression Flaw
An update for zlib is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: zlib security update Advisory ID: RHSA-2023:0975-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:0975 Issue date: 2023-02-28 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for zlib is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.6) - x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.6) - x86_64 3. Description: The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. PackageList: Red Hat Enterprise Linux Server AUS (v. 7.6): Source: zlib-1.2.7-18.el7_6.1.src.rpm x86_64: zlib-1.2.7-18.el7_6.1.i686.rpm zlib-1.2.7-18.el7_6.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_6.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_6.1.x86_64.rpm zlib-devel-1.2.7-18.el7_6.1.i686.rpm zlib-devel-1.2.7-18.el7_6.1.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.6): x86_64: minizip-1.2.7-18.el7_6.1.i686.rpm minizip-1.2.7-18.el7_6.1.x86_64.rpm minizip-devel-1.2.7-18.el7_6.1.i686.rpm minizip-devel-1.2.7-18.el7_6.1.x86_64.rpm zlib-debuginfo-1.2.7-18.el7_6.1.i686.rpm zlib-debuginfo-1.2.7-18.el7_6.1.x86_64.rpm zlib-static-1.2.7-18.el7_6.1.i686.rpm zlib-static-1.2.7-18.el7_6.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY/3znNzjgjWX9erEAQj2Ug//eP2p5J4YcyV0r5yDQ0z4VEJU1RaUJ4Ky /gATR8hkMyLQUuaRrCh3r/MyFHFO27lbEOSIHf+3A66L4cvKraMdFw0U7gr6AxS6 LwKO1SCTcMUXGOuys8zWGu4oVspR7UwclnNN0LEB3vUe16JXX22kl6ZeyODxJtoR CbDVcr3KgvDHCW2YC8avmRUjF3RHjfOrzczZdeeYP+4T0bDz54AWf8h+ktYne8T5 EnR3A3U73RwAnnG8OK5ssSnv0PuBiazydwO8X+HZIev5NXxejzkGsAHW7OFJwQpk mzM8NEfoxi1Qo1+k0njNrjDUifJXrlWOTv4H/UMMUYYgvxbLhaOHw2ZmkQB8peA9 4NDlMCEK9p9OrNjfQgAKqHQkK5o9Q3sF36LP0fGU7a385GYRfkpbjwkzIpDv8RGC 9vCkvs1IU8HkmUAjwLAgaF8ZTVCdh4ZYWrHgeSR3IobyIwouS0sJ/N97a9G4gRVb 9gYlw2PwDuTo51Px1EswNyTlG0rtZgebOlDtB71PuCxVreE2uSh7jId9fiuHwa+D 3JZFUF8MWiEVCY2Dk/dc7CwDnLQQg7ZheX3rnLXc9RFvub/2pBOvDsl68Bm2xiXr c0XnY0QzigH6tyWvs/y6CENmmLi5zDL7Rt8s3R6yOsDLGJYpXvUmpPtJrtuk9Cc5 13K7n2+/WZI=irA/ -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Feb 28, 2023
•Important
Red Hat
98
security advisorysecurity updateimportantRedHat 9 RHSA-2022-8420-01 Important: Mingw-zlib Compression Flaw
An update for mingw-zlib is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: mingw-zlib security update Advisory ID: RHSA-2022:8420-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:8420 Issue date: 2022-11-15 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for mingw-zlib is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 9) - noarch 3. Description: The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. Package List: Red Hat CodeReady Linux Builder (v. 9): Source: mingw-zlib-1.2.12-2.el9.src.rpm noarch: mingw32-zlib-1.2.12-2.el9.noarch.rpm mingw32-zlib-debuginfo-1.2.12-2.el9.noarch.rpm mingw32-zlib-static-1.2.12-2.el9.noarch.rpm mingw64-zlib-1.2.12-2.el9.noarch.rpm mingw64-zlib-debuginfo-1.2.12-2.el9.noarch.rpm mingw64-zlib-static-1.2.12-2.el9.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification#important https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.1_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY3Pgv9zjgjWX9erEAQikYw//R5FS9b6MURch4M+16ULWOMtOrt0VyID/ XNSBNzSoDaF8vxNhXHwcRrHFHxVecw+9eX/Kn/UyY+xPc+dkC/wD52IqO616ii5n v4H/zakjybU+ym932gyxVBMDGtxCRPQ8zPB22NsOJn+yHCY8bsRjzugeTEQ2caq3 Fr594ed18Q+CROPo/WCM5fx3vZDzd5YYD989hoFOZoEn4a8yWS1PVWyJHZkOafVw GSxQu4kjh3mLcd/XZBdK7niVSKYHFg4pIu7rF5NZ6AKzBFkYly0xehEVcIyZsOTF 6SyVRw3aEwA8AiiJe2Zw9Hx0i51meguEUCU16r2E0QLLe3fiUanBq1fO05alM3UN KzSXRGUo8A4OfoV+rUXvgOSfS1ohgvBRcmauWprVV97YBtFvO6TFRPrvOV0pE0DY 2PkdQUTY86snihnqQnNocA1qvWDmpBz6NZ6FZvybf2mWEJ7lH5WHRJiUCJpaPR+C RnQpGCxL6KKh6IM3OJwW5Ax0GYVK2D2izSlsLwMx04Cr3wyI/Z7UCrPCndXxAd+M yKrZegd5lBuxu5FQkKiGCOblp4DF0/bBD+geyHSBZQAPxCd8zu1747rsWwDaaNfw Wsbis/Fdc+CVio1WJYP8Fwuhv+nnyIJtl+sUnuQgvre788/vV1Mve83BOBmxwJ9k 0AYXJ9uPxTY=Rf0o -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 15, 2022
•Important
Red Hat
98
security advisorydata protectionRed Hat Enterprise LinuxRed Hat Enterprise Linux 8 RHSA-2022:7813-01 Important Compression Flaw
An update for mingw-zlib is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: mingw-zlib security update Advisory ID: RHSA-2022:7813-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:7813 Issue date: 2022-11-08 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for mingw-zlib is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - noarch 3. Description: The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. Package List: Red Hat CodeReady Linux Builder (v. 8): Source: mingw-zlib-1.2.8-10.el8.src.rpm noarch: mingw32-zlib-1.2.8-10.el8.noarch.rpm mingw32-zlib-debuginfo-1.2.8-10.el8.noarch.rpm mingw32-zlib-static-1.2.8-10.el8.noarch.rpm mingw64-zlib-1.2.8-10.el8.noarch.rpm mingw64-zlib-debuginfo-1.2.8-10.el8.noarch.rpm mingw64-zlib-static-1.2.8-10.el8.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification#important https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.7_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY2pSGdzjgjWX9erEAQgUwA/+I0Yfh7SE/3ex1OCbDRi+Y7TQV6LPIfaY Wf+3Kq1gTm3ApB7ZgN8oTrIEfIN/NjQ+NUKhLM6X3jEi8gVxzZloOnk3B6liK1wg 0N3LY0PW1VdJB44WaX/ZfB/vu2sTEJfux9CgKphAm10G7vIv9gxlbRRZ8+vRXeMN /ATsBoATo8OaK9yzAMBLnSpbxHJvimEr0AGoU4ixZTeF91p9ypMT59yuF+GmOu+r Qw7DxvJSnhrz2RrekBuBCqli84SzM8y9w8PCPojrIuIkcZDmZfgXhplAgZNCs2Tm j8KGbjHawDhgHQEs5zHJMI+3uBjsrm6bq9G81qdUQto8o/GmLkZj36B6CpmSfk6Z lIUItBHDd9gEt4aHNJzBoOIPUq6KMyKqOK20t4o95Nx+Uyoww6VQoVfDaGS+x/Th DIufW2cA53/3r47jF91Hm2365WkEKfF2Jx1oAJFdBwaaIp2JRk0WtKkHOmsDN1// h0dMMMo/+sUeIAHBz0xpiP9AMLhujmCPfObU29GaB2HNPhz7SffcE6vDPs2Zq6pC DwivNCrBfiVDfPpC2CMwK0FZSuV3UFq56MeCbSMaqUczsPWWxESeEVxOV9AJXl6Y jhyoYbtM1/n8L05zLXU7d50ig6oKZ/eZoMULg7Q2LboKYjWMk0+ashgqhdOigTup tIaNurRUEaw=69oM -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 08, 2022
•Important
Red Hat
200
security advisoryimportant security issuezlib updateScientific Linux SL7: SLSA-2022-2213-1 Critical Zlib Compression Issue
zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 zlib-1.2.7-20.el7_9.i686.rpm zlib-1.2.7-20.el7_9.x86_64.rpm zlib-debuginfo-1.2.7-20.el7_9.i686.rpm zlib-debuginfo-1.2.7-20 [More...]. Synopsis: Important: zlib security update Advisory ID: SLSA-2022:2213-1 Issue Date: 2022-05-17 CVE Numbers: CVE-2018-25032 -- Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE -- SL7 x86_64 zlib-1.2.7-20.el7_9.i686.rpm zlib-1.2.7-20.el7_9.x86_64.rpm zlib-debuginfo-1.2.7-20.el7_9.i686.rpm zlib-debuginfo-1.2.7-20.el7_9.x86_64.rpm minizip-1.2.7-20.el7_9.i686.rpm minizip-1.2.7-20.el7_9.x86_64.rpm minizip-devel-1.2.7-20.el7_9.i686.rpm minizip-devel-1.2.7-20.el7_9.x86_64.rpm zlib-devel-1.2.7-20.el7_9.i686.rpm zlib-devel-1.2.7-20.el7_9.x86_64.rpm zlib-static-1.2.7-20.el7_9.i686.rpm zlib-static-1.2.7-20.el7_9.x86_64.rpm - Scientific Linux Development Team . Crucial zlib patch released for Scientific Linux SL7.x, correcting issues related to compression vulnerabilities.. zlib Security, SL7 Update, Scientific Linux Advisory. . Severity: Critical. LinuxSecurity.com Team
May 17, 2022
•Critical
Scientific Linux
98
security advisorysecurity issueupdateRed Hat: RHSA-2022:2198-01 Important: Rsync Zlib Compression Flaw
An update for rsync is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: rsync security update Advisory ID: RHSA-2022:2198-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:2198 Issue date: 2022-05-11 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for rsync is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS EUS (v.8.4) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. Package List: Red Hat Enterprise Linux BaseOS EUS (v.8.4): Source: rsync-3.1.3-12.el8_4.1.src.rpm aarch64: rsync-3.1.3-12.el8_4.1.aarch64.rpm rsync-debuginfo-3.1.3-12.el8_4.1.aarch64.rpm rsync-debugsource-3.1.3-12.el8_4.1.aarch64.rpm noarch: rsync-daemon-3.1.3-12.el8_4.1.noarch.rpm ppc64le: rsync-3.1.3-12.el8_4.1.ppc64le.rpm rsync-debuginfo-3.1.3-12.el8_4.1.ppc64le.rpm rsync-debugsource-3.1.3-12.el8_4.1.ppc64le.rpm s390x: rsync-3.1.3-12.el8_4.1.s390x.rpm rsync-debuginfo-3.1.3-12.el8_4.1.s390x.rpm rsync-debugsource-3.1.3-12.el8_4.1.s390x.rpm x86_64: rsync-3.1.3-12.el8_4.1.x86_64.rpm rsync-debuginfo-3.1.3-12.el8_4.1.x86_64.rpm rsync-debugsource-3.1.3-12.el8_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYnw2GNzjgjWX9erEAQgXBA/8C4sqhDQD8AYcMhZFpKJZo98oATR+q7Z1 sZIPpD7tvBkq0MRgQNwdFB4SxKf1BQ20Vm9Zc5u8JeJZot6dvvoLtLJ4+RpeZKg1 rPSY7euA9siBL4jbroram2pWF0vW98wCVmi9FJdX5k8n2YBfQyyxreTlDPDOKAMF HNNoRIBSZMQm33w29Qv36zKzhjMvweSa/P4RvbnaljST0aS88FAk7HkiPTSwsEZI 0G6s/Kp6+NmbTJTweBjVKq/hQn8dKTE4OhN4SMXxaJsxLW5SRTfgPjLmn/dk+sFn c9m262+IEj5ES3Af96FO31ih1j9TeByOu7bJxgY2OKg/44L4HpG13/asLmz/u7nF WBlKG4sKePjF1qtIr4+9zHhHFwUTMEVnngIMQV0rypgyhLKyHDNbxyKgJlTG2YR5 lf+sB3Alqa65NsbkT4D4XmjHdawmiNkEgaIc49W6XfLNZRXwPw72vpaJMEMo4Cb0 lN7RJFE5dyoctj5n/Yl1IeTwuLmKfhqMYp0Bp2JI9ZZFSawyiYA/PmI92Xzcz5WI FeekDdVF28sWB4aWZMJ+rg/lh8zQzlRyRNpJ4vhQWAVIZqEOfFtUstVAPbHLkpW0 C53qcqykWRntJEYEvupUt/fCbyANEmsvDFQD6YgEEJ/CrBDrMONmFdaovAYCnqq/ 8D6/sUF5jP0=/GCf -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 11, 2022
•Important
Red Hat
98
security advisorysecurity updatecriticalRed Hat Enterprise Linux 6: RHSA-2022-2214-01 Critical zlib Flaw
An update for zlib is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: zlib security update Advisory ID: RHSA-2022:2214-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:2214 Issue date: 2022-05-11 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for zlib is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server (v. 6 ELS) - i386, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6 ELS) - i386, s390x, x86_64 3. Description: The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing)certain inputs 6. Package List: Red Hat Enterprise Linux Server (v. 6 ELS): Source: zlib-1.2.3-31.el6_10.src.rpm i386: zlib-1.2.3-31.el6_10.i686.rpm zlib-debuginfo-1.2.3-31.el6_10.i686.rpm zlib-devel-1.2.3-31.el6_10.i686.rpm s390x: zlib-1.2.3-31.el6_10.s390.rpm zlib-1.2.3-31.el6_10.s390x.rpm zlib-debuginfo-1.2.3-31.el6_10.s390.rpm zlib-debuginfo-1.2.3-31.el6_10.s390x.rpm zlib-devel-1.2.3-31.el6_10.s390.rpm zlib-devel-1.2.3-31.el6_10.s390x.rpm x86_64: zlib-1.2.3-31.el6_10.i686.rpm zlib-1.2.3-31.el6_10.x86_64.rpm zlib-debuginfo-1.2.3-31.el6_10.i686.rpm zlib-debuginfo-1.2.3-31.el6_10.x86_64.rpm zlib-devel-1.2.3-31.el6_10.i686.rpm zlib-devel-1.2.3-31.el6_10.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6 ELS): i386: minizip-1.2.3-31.el6_10.i686.rpm minizip-devel-1.2.3-31.el6_10.i686.rpm zlib-debuginfo-1.2.3-31.el6_10.i686.rpm zlib-static-1.2.3-31.el6_10.i686.rpm s390x: minizip-1.2.3-31.el6_10.s390.rpm minizip-1.2.3-31.el6_10.s390x.rpm minizip-devel-1.2.3-31.el6_10.s390.rpm minizip-devel-1.2.3-31.el6_10.s390x.rpm zlib-debuginfo-1.2.3-31.el6_10.s390.rpm zlib-debuginfo-1.2.3-31.el6_10.s390x.rpm zlib-static-1.2.3-31.el6_10.s390x.rpm x86_64: minizip-1.2.3-31.el6_10.i686.rpm minizip-1.2.3-31.el6_10.x86_64.rpm minizip-devel-1.2.3-31.el6_10.i686.rpm minizip-devel-1.2.3-31.el6_10.x86_64.rpm zlib-debuginfo-1.2.3-31.el6_10.i686.rpm zlib-debuginfo-1.2.3-31.el6_10.x86_64.rpm zlib-static-1.2.3-31.el6_10.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYnw2BtzjgjWX9erEAQjeZA//U4fM7CbjmjEFlSLiLXkxAg/vA4OddfmK LbxlKPr0/l6bPXg/5kp1fTlTitW3dwNBwbciGMEUoELht8nCqp/6jW39sKaOztAZ vw+IPoJ3BvnVV4768MnfMCApM/iPEPE+vP0U8fEtptNrIjQUvNX4mSX5ROyOv2HF hbFuz3d46IT52bwbVaN5bUaCruefvWPrTsuvQ82QjMykd0TL8P7UTnCJfi9QK9fY zO+J/3+sJ4HLoPchM613MHpRgUYIRRxIBy7N5CUdo1iKqibkye05LcAxGHKHEiZq 2OM2/UKVjIA1DOZ3Z4dYkQx86LM2IrpeELqw5vDAPk+2wexQOtcSNurs1W/No2GX y7DkniocnCTrePRQjXF4E2rnDkbEYvK1NkCI+whb28xh8mETBiIrNqUSK2YdxrEq jjICJAEwcjhu14SNuFWvB7767mx38xhRIT+AdM80KJ7g/EWVS1bUpsFKczaGR6F0 T6s2BeFulSdwP8eN20xjWtweQFzzdW4rmUXFhukFDCHhtdxxjMQaSpSVQbaCr0Vs D9ja84s9UcLSfcUBHKL2YlsZSJcxfq/8M6cncb/z0Iymsa+2dzwPX5wNCUxhHVNm E5NeH+upigtPr3i6T58SEuqe0aTGTsjt3232bWdI8Mqa9ugGcCSFex8s5IDUT2sh vOofk4lw2SM=U7km -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 11, 2022
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!