zlib-1.2.7-20.el7

エラータID: AXSA:2022-3180:02

Release date: 
Monday, May 16, 2022 - 09:59
Subject: 
zlib-1.2.7-20.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The gzip packages contain the gzip (GNU zip) data compression utility. gzip is
used to compress regular files. It replaces them with files containing the .gz
extension, while retaining ownership modes, access, and modification times.

Security Fix(es):

gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE(s):
CVE-2022-1271

Solution: 

Update packages.

CVEs: 
CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Additional Info: 

N/A

Download: 

SRPMS
  1. zlib-1.2.7-20.el7.src.rpm
    MD5: b9730898753f5f1e14cee1b3e061e038
    SHA-256: c6cb406055081b184d8150f7932a5e292f680ebf9b04e1b2bd495190705bed0e
    Size: 520.16 kB

Asianux Server 7 for x86_64
  1. zlib-1.2.7-20.el7.x86_64.rpm
    MD5: 1ae00418033ff29bfda91aa2c2848d4d
    SHA-256: cc5980e92363836d1a32b9305872ddbd4d61d8ca744e8131c34481612ca87262
    Size: 89.03 kB
  2. zlib-devel-1.2.7-20.el7.x86_64.rpm
    MD5: b7abc9aa42909762e7375a50204abcef
    SHA-256: c4fbfdb8f2a3b10188c2f9214314f6466ebe193806ae408274564fa5758c8524
    Size: 49.22 kB
  3. zlib-1.2.7-20.el7.i686.rpm
    MD5: 1b3ba51d1354687023c45b378bcfa43b
    SHA-256: e4fc5d1bf53ddead4c2795d6a7692035b1fd73e89ad50a8e9c1a50a90e1cdc47
    Size: 89.94 kB
  4. zlib-devel-1.2.7-20.el7.i686.rpm
    MD5: 2250e9d235dbfdee0e9341cb7a8c4262
    SHA-256: 2f35e20085069db07062dad5cbf9c25d052d3e3cd990cd97df91d9c049c6d9a0
    Size: 49.26 kB