OESA-2026-1583 zlib security update

Security Fixes: zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition.CVE-2026-27171...

UBUNTU-CVE-2026-23943

Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...

CVE-2026-23943 Pre-auth SSH DoS via unbounded zlib inflate

Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...

CVE-2026-23943 Pre-auth SSH DoS via unbounded zlib inflate

Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...

CVE-2026-23943

Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...

EEF-CVE-2026-23943 Pre-auth SSH DoS via unbounded zlib inflate

Summary Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh ssh\transport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads...

CVE-2026-23943: Improper Handling of Highly Compressed Data (Data Amplification)

Improper Handling of Highly Compressed Data Compression Bomb vulnerability in Erlang OTP ssh sshtransport modules allows Denial of Service via Resource Depletion. The SSH transport layer advertises legacy zlib compression by default and inflates attacker-controlled payloads pre-authentication...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-3381)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-3381 advisory. - Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib...

Multi‑Layer Encrypted Python Payload Loader AES‑GCM + XOR + Zlib

This Python script acts as a loader that decrypts and executes a protected Python payload using multiple cryptographic and obfuscation layers. The program first requests a password from the user and derives a 256‑bit encryption key using PBKDF2 with a fixed salt salt123. The encrypted payload is...

perl-Compress-Raw-Zlib-2.222-1.1 on GA media (moderate)

perl-Compress-Raw-Zlib-2.222-1.1 on GA media Announcement ID: openSUSE-SU-2026:10320-1 Rating: moderate Cross-References: CVE-2026-3381 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1

CVE-2026-3381 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1

CVE-2026-27171 affecting package zlib for versions less than 1.3.2-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 42 Update: mingw-zlib-1.3.2-1.fc42

MinGW Windows zlib compression library...

[SECURITY] Fedora 43 Update: mingw-zlib-1.3.2-1.fc43

MinGW Windows zlib compression library...

OPENSUSE-SU-2026:10320-1 perl-Compress-Raw-Zlib-2.222-1.1 on GA media

These are all security issues fixed in the perl-Compress-Raw-Zlib-2.222-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : mingw-zlib (2026-0aee6ab474)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0aee6ab474 advisory. Update to 1.3.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora: Security Advisory (FEDORA-2026-0aee6ab474)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-ca44fe35a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : mingw-zlib (2026-ca44fe35a9)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ca44fe35a9 advisory. Update to 1.3.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

SUSE-SU-2026:20659-1 Security update for zlib

This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32combine64 and crc32combinegen64 functions due to missing checks for negative lengths. bsc1258392 - CVE-2023-45853: Fixed an integer overflow and resultant heap-based buffer overflow in...