PT-2026-41613 · Julia · Gccbootstrap Jll+3

Publicado 2026-05-07 · Atualizado 2026-05-07

OSV

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Identificadores relacionados

JLSEC-2026-477

Produtos afetados

Gccbootstrap Jll

Openresty Jll

Python Jll

Zlib Jll

Referências · 30

• https://github.com/madler/zlib/issues/605 · Nota
• https://github.com/madler/zlib/compare/v1.2.11...v1.2.12 · Nota
• https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 · Nota
• https://security.netapp.com/advisory/ntap-20220526-0009 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2022/03/25/2 · Nota
• https://debian.org/security/2022/dsa-5111 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2022/May/33 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-477 · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2022/03/28/1 · Nota
• https://support.apple.com/kb/HT213255 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2022/May/38 · Nota
• https://oracle.com/security-alerts/cpujul2022.html · Nota