[CLSA-2026:1791916248] zlib: Fix of CVE-2026-76844
Type:
security
Severity:
Important
Release date:
2026-10-13 18:30:58 UTC
Description:
- CVE-2026-76844: reset strm.next_in and strm.avail_in in gz_write() when a direct write fails, so a later gzwrite() after gzclearerr() cannot copy past the input buffer
CVEs fixed:
Updated packages:
  • zlib-1.2.11-17.el8.tuxcare.els4.i686.rpm
    sha:8808a6e9c9b4c276f15469af87bf5bd2058f5a96448dc4d2fef44c196351d6cf
  • zlib-1.2.11-17.el8.tuxcare.els4.x86_64.rpm
    sha:682358ae6e16d1a108d0b6ac8ee55e5e604dc8fca8c38283a57d1dba5dbd9012
  • zlib-devel-1.2.11-17.el8.tuxcare.els4.i686.rpm
    sha:bba2f833cf41fa6f785ef9b53e968f41f434446bf439c7363689f3f8ad557fbf
  • zlib-devel-1.2.11-17.el8.tuxcare.els4.x86_64.rpm
    sha:6e64817d9baee814533b7e9319773ce68b035e8559bc1fa434bcbc0185fe8231
  • zlib-static-1.2.11-17.el8.tuxcare.els4.i686.rpm
    sha:ab74e3bc997c1407df3da5a6e04e5279ffd0f678e8b812738f550a2fd76fe6f7
  • zlib-static-1.2.11-17.el8.tuxcare.els4.x86_64.rpm
    sha:4b497adcf7124871eb1dd132017ea9355d2c004123e0de5e961680972c818c29
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.