USN-5570-2: zlib vulnerability
17 October 2022
zlib could be made to crash or run programs if it received specially crafted input.
Releases
Packages
- zlib - Lossless data-compression library
Details
USN-5570-1 fixed a vulnerability in zlib. This update provides the
corresponding update for Ubuntu 22.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
Evgeny Legerov discovered that zlib incorrectly handled memory when
performing certain inflate operations. An attacker could use this issue
to cause zlib to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.04
-
lib64z1
-
1:1.2.11.dfsg-2ubuntu9.2
-
libx32z1
-
1:1.2.11.dfsg-2ubuntu9.2
-
lib32z1
-
1:1.2.11.dfsg-2ubuntu9.2
-
zlib1g
-
1:1.2.11.dfsg-2ubuntu9.2
Ubuntu 20.04
-
lib64z1
-
1:1.2.11.dfsg-2ubuntu1.5
-
libx32z1
-
1:1.2.11.dfsg-2ubuntu1.5
-
lib32z1
-
1:1.2.11.dfsg-2ubuntu1.5
-
zlib1g
-
1:1.2.11.dfsg-2ubuntu1.5
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-5570-1: lib64z1, zlib1g, zlib1g-dev, libx32z1, lib32z1-dev, zlib, libx32z1-dev, lib32z1, zlib-bin, lib64z1-dev
- USN-5573-1: rsync
- USN-6736-1: klibc, libklibc-dev, klibc-utils, libklibc
- USN-6736-2: klibc, libklibc-dev, klibc-utils, libklibc