[CLSA-2026:1791915688] zlib: Fix of CVE-2026-76844
Type:
security
Severity:
Important
Release date:
2026-10-13 18:21:38 UTC
Description:
- CVE-2026-76844: reset strm.next_in and strm.avail_in in gz_write() when a direct write fails, so a later gzwrite() after gzclearerr() cannot copy past the input buffer
CVEs fixed:
Updated packages:
  • zlib-1.2.11-17.el8.tuxcare.els4.i686.rpm
    sha:3ba7cde645ffd69b0afbb0e999d9429f92cb3007bcfd2f4760addb7e0bc09702
  • zlib-1.2.11-17.el8.tuxcare.els4.x86_64.rpm
    sha:c18de6980686f3f7ac4ef7246e1ef9f171a33fa3f90881feae0cae9c8a28b176
  • zlib-devel-1.2.11-17.el8.tuxcare.els4.i686.rpm
    sha:09d321190a5b8b8b37ad6039c44af898bac09555635c05444b3d73ded0f06026
  • zlib-devel-1.2.11-17.el8.tuxcare.els4.x86_64.rpm
    sha:25e871747a58049d589978abce34ea4635a841351b89f6a128141831312e4386
  • zlib-static-1.2.11-17.el8.tuxcare.els4.i686.rpm
    sha:517424e28b6308b948d07a64e5fc2d97ca96f638afb75b3b086de428906cb167
  • zlib-static-1.2.11-17.el8.tuxcare.els4.x86_64.rpm
    sha:f33f2b7b696c16cf2cc118bb92382e0600841e9d2d86e427c5f958d0001148c3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.