Lucene search
CentOS ProjectCESA-2022:2213HistoryMay 13, 2022 - 5:32 p.m.
minizip, zlib security update
2022-05-1317:32:57
CentOS Project
lists.centos.org
189
0.003 Low
EPSS
Percentile
68.2%
CentOS Errata and Security Advisory CESA-2022:2213
The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.
Security Fix(es):
- zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2022-May/086271.html
Affected packages:
minizip
minizip-devel
zlib
zlib-devel
zlib-static
Upstream details at:
https://access.redhat.com/errata/RHSA-2022:2213
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 7 | i686 | minizip | < 1.2.7-20.el7_9 | minizip-1.2.7-20.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | minizip | < 1.2.7-20.el7_9 | minizip-1.2.7-20.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | minizip-devel | < 1.2.7-20.el7_9 | minizip-devel-1.2.7-20.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | minizip-devel | < 1.2.7-20.el7_9 | minizip-devel-1.2.7-20.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | zlib | < 1.2.7-20.el7_9 | zlib-1.2.7-20.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | zlib | < 1.2.7-20.el7_9 | zlib-1.2.7-20.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | zlib-devel | < 1.2.7-20.el7_9 | zlib-devel-1.2.7-20.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | zlib-devel | < 1.2.7-20.el7_9 | zlib-devel-1.2.7-20.el7_9.x86_64.rpm |
| CentOS | 7 | i686 | zlib-static | < 1.2.7-20.el7_9 | zlib-static-1.2.7-20.el7_9.i686.rpm |
| CentOS | 7 | x86_64 | zlib-static | < 1.2.7-20.el7_9 | zlib-static-1.2.7-20.el7_9.x86_64.rpm |
Related
nessus
nessus
Rocky Linux 8 : rsync (RLSA-2022:2201)
2023-11-07 00:00:00
Amazon Linux AMI : zlib (ALAS-2022-1602)
2022-07-08 00:00:00
EulerOS 2.0 SP5 : zlib (EulerOS-SA-2022-1920)
2022-06-17 00:00:00
osv
osv
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
2022-03-26 00:00:33
zlib vulnerability
2022-03-30 16:31:36
Important: mingw-zlib security update
2022-11-15 00:00:00
debian
debian
[SECURITY] [DLA 2993-1] libz-mingw-w64 security update
2022-05-07 13:29:14
[SECURITY] [DSA 5111-1] zlib security update
2022-04-01 15:20:47
[SECURITY] [DLA 2968-1] zlib security update
2022-04-02 21:16:25
prion
prion
Memory corruption
2022-03-25 09:15:00
oraclelinux
oraclelinux
zlib security update
2022-04-28 00:00:00
mingw-zlib security update
2022-11-22 00:00:00
zlib security update
2022-06-30 00:00:00
debiancve
debiancve
CVE-2018-25032
2022-03-25 09:15:00
qt
qt
Security advisory: Recently reported zlib compression issue impacts Qt
2022-04-05 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2968-1)
2022-04-03 00:00:00
Debian: Security Advisory (DSA-5111-1)
2022-04-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1043-1)
2022-03-31 00:00:00
rocky
rocky
rsync security update
2022-05-11 13:23:26
zlib security update
2022-04-28 14:07:14
fedora
fedora
[SECURITY] Fedora 34 Update: rsync-3.2.3-6.fc34
2022-04-29 06:56:42
[SECURITY] Fedora 36 Update: zlib-1.2.11-32.fc36
2022-08-14 02:39:31
[SECURITY] Fedora 35 Update: rsync-3.2.3-9.fc35
2022-04-18 17:14:58
aix
aix
AIX is vulnerable to denial of service due to zlib and zlibNX
2022-09-28 13:38:50
ubuntu
ubuntu
rsync vulnerability
2022-06-13 00:00:00
zlib vulnerability
2022-03-30 00:00:00
rsync vulnerability
2022-03-31 00:00:00
cbl_mariner
cbl_mariner
CVE-2018-25032 affecting package mariadb 10.3.35-1
2022-10-13 00:40:28
CVE-2018-25032 affecting package zlib for versions less than 1.2.12-1
2022-04-26 20:17:02
CVE-2018-25032 affecting package boost 1.66.0-3
2023-05-03 19:35:26
cloudlinux
cloudlinux
Fixed CVE-2018-25032 in rsync
2022-05-19 23:55:35
Fixed CVE-2018-25032 in zlib
2022-05-16 13:03:51
redhat
redhat
(RHSA-2022:2214) Important: zlib security update
2022-05-11 15:28:06
(RHSA-2022:4845) Important: zlib security update
2022-05-31 13:17:50
(RHSA-2022:1642) Important: zlib security update
2022-04-28 14:07:14
cve
cve
CVE-2018-25032
2022-03-25 09:15:00
cloudfoundry
cloudfoundry
USN-5359-1: rsync vulnerability | Cloud Foundry
2022-05-23 00:00:00
USN-5355-1: zlib vulnerability | Cloud Foundry
2022-05-23 00:00:00
ibm
ibm
wolfi
wolfi
CVE-2018-25032 vulnerabilities
2024-06-02 03:07:39
amazon
amazon
Important: zlib
2022-04-04 23:23:00
Important: rsync
2022-12-01 17:33:00
mariadbunix
mariadbunix
CVE-2018-25032
2022-03-25 09:15:08
cvelist
cvelist
CVE-2018-25032
2022-03-25 00:00:00
almalinux
almalinux
Important: mingw-zlib security update
2022-11-15 00:00:00
Important: mingw-zlib security update
2022-11-08 00:00:00
mageia
mageia
Updated zlib packages fix security vulnerability
2022-03-31 22:55:37
github
github
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
2022-03-26 00:00:33
broadcom
broadcom
Zlib memory corruption when deflating (i.e. when compressing)
2023-08-01 00:00:00
redos
redos
ROS-20220329-01
2022-03-29 00:00:00
redhatcve
redhatcve
CVE-2018-25032
2022-03-28 04:47:54
suse
suse
Security update for zlib (important)
2022-03-30 00:00:00
f5
f5
K21548854 : zlib vulnerability CVE-2018-25032
2022-05-19 00:00:00
alpinelinux
alpinelinux
CVE-2018-25032
2022-03-25 09:15:00
slackware
slackware
[slackware-security] zlib
2022-03-28 19:37:07
ubuntucve
ubuntucve
CVE-2018-25032
2022-03-25 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:08.zlib
2022-04-06 00:00:00