10 matches found
AlmaLinux 9.2 [TuxCare] Security Update: minizip-compat / minizip-compat-devel / zlib / zlib-devel / etc (ALMALINUX9.2:CLSA-2026:1791832293)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791832293 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...
CLSA-2026-1791916248 zlib: Fix of CVE-2026-76844
CVE-2026-76844: reset strm.nextin and strm.availin in gzwrite when a direct write fails, so a later gzwrite after gzclearerr cannot copy past the input buffer...
CLSA-2026-1791915688 zlib: Fix of CVE-2026-76844
CVE-2026-76844: reset strm.nextin and strm.availin in gzwrite when a direct write fails, so a later gzwrite after gzclearerr cannot copy past the input buffer...
CentOS Linux 8.4 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.4:CLSA-2026:1791915688)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791915688 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...
CentOS Linux 8.5 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.5:CLSA-2026:1791916248)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791916248 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...
CLSA-2026-1791832293 zlib: Fix of CVE-2026-76844
CVE-2026-76844: reset strm.nextin and strm.availin in gzwrite when a direct write fails, so a later gzwrite after gzclearerr cannot copy past the input buffer...
CLSA-2026-1791830789 Fix CVE(s): CVE-2026-76844
SECURITY UPDATE: heap buffer overflow after a failed write - debian/patches/CVE-2026-76844.patch: in gzwrite.c reset strm.nextin/availin when gzcomp fails in gzwrite. - CVE-2026-76844...
CLSA-2026-1791506807 Fix CVE(s): CVE-2026-76844
SECURITY UPDATE: heap buffer overflow after a failed write - debian/patches/CVE-2026-76844.patch: in gzwrite.c reset strm.nextin/availin when gzcomp fails in gzwrite. - CVE-2026-76844...
AZL-105345 CVE-2026-76844 affecting package zlib 1.3.2-1
zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin, leaving it pointed at the caller's buffer. A later gz write call then derives a position from the stale pointer and writes past a heap allocation; any write...
CVE-2026-76844
zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin, leaving it pointed at the caller's buffer. A later gz write call then derives a position from the stale pointer and writes past a heap allocation; any write...