Release Info

Advisory: CLSA-2022:1649170583

OS: Ubuntu 16.04 ELS

Public date: 2022-04-05 00:00:00

Project: zlib

Version: 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els1

Errata link: https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2022-1649170583.html

Changelog

* SECURITY UPDATE: memory corruption when deflating - debian/patches/CVE-2018-25032-1.patch: fix a bug that can crash deflate on some input when using Z_FIXED in deflate.c, deflate.h. - debian/patches/CVE-2018-25032-2.patch: assure that the number of bits for deflatePrime() is valid in deflate.c. - CVE-2018-25032

Update

Update command: apt-get update apt-get --only-upgrade install zlib*

Packages list

lib32z1_1.2.8.dfsg-2ubuntu4.3+tuxcare.els1_amd64.deb lib32z1-dev_1.2.8.dfsg-2ubuntu4.3+tuxcare.els1_amd64.deb libx32z1_1.2.8.dfsg-2ubuntu4.3+tuxcare.els1_amd64.deb libx32z1-dev_1.2.8.dfsg-2ubuntu4.3+tuxcare.els1_amd64.deb zlib1g_1.2.8.dfsg-2ubuntu4.3+tuxcare.els1_amd64.deb zlib1g-dev_1.2.8.dfsg-2ubuntu4.3+tuxcare.els1_amd64.deb

CVEs

CVE-2018-25032