PT-2026-41613 · Julia · Gccbootstrap Jll+3

Published 2026-05-07 · Updated 2026-05-07

OSV

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Related Identifiers

JLSEC-2026-477

Affected Products

Gccbootstrap Jll

Openresty Jll

Python Jll

Zlib Jll

References · 30

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F · Vendor Advisory
• https://debian.org/security/2022/dsa-5111 · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2026-477 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y · Vendor Advisory
• https://github.com/madler/zlib/issues/605 · Note
• https://github.com/madler/zlib/compare/v1.2.11...v1.2.12 · Note
• https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 · Note
• https://security.netapp.com/advisory/ntap-20220526-0009 · Note
• http://openwall.com/lists/oss-security/2022/03/25/2 · Note
• http://seclists.org/fulldisclosure/2022/May/33 · Note
• https://openwall.com/lists/oss-security/2022/03/28/1 · Note