{"id":24387,"date":"2022-05-12T23:50:01","date_gmt":"2022-05-12T19:50:01","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/167134\/RHSA-2022-2214-01.txt"},"modified":"2022-05-14T10:35:10","modified_gmt":"2022-05-14T06:05:10","slug":"red-hat-security-advisory-2022-2214-01","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/red-hat-security-advisory-2022-2214-01\/","title":{"rendered":"Red Hat Security Advisory 2022-2214-01"},"content":{"rendered":"<p dir=\"ltr\">&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211;<br \/>\nHash: SHA256<\/p>\n<p dir=\"ltr\">====================================================================<br \/>\nRed Hat Security Advisory<\/p>\n<p dir=\"ltr\">Synopsis: Important: zlib security update<br \/>\nAdvisory ID: RHSA-2022:2214-01<br \/>\nProduct: Red Hat Enterprise Linux<br \/>\nAdvisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:2214<br \/>\nIssue date: 2022-05-11<br \/>\nCVE Names: CVE-2018-25032<br \/>\n====================================================================<br \/>\n1. Summary:<\/p>\n<p dir=\"ltr\">An update for zlib is now available for Red Hat Enterprise Linux 6 Extended<br \/>\nLifecycle Support.<\/p>\n<p dir=\"ltr\">Red Hat Product Security has rated this update as having a security impact<br \/>\nof Important. A Common Vulnerability Scoring System (CVSS) base score,<br \/>\nwhich gives a detailed severity rating, is available for each vulnerability<br \/>\nfrom the CVE link(s) in the References section.<\/p>\n<p dir=\"ltr\">2. Relevant releases\/architectures:<\/p>\n<p dir=\"ltr\">Red Hat Enterprise Linux Server (v. 6 ELS) &#8211; i386, s390x, x86_64<br \/>\nRed Hat Enterprise Linux Server Optional (v. 6 ELS) &#8211; i386, s390x, x86_64<\/p>\n<p dir=\"ltr\">3. Description:<\/p>\n<p dir=\"ltr\">The zlib packages provide a general-purpose lossless data compression<br \/>\nlibrary that is used by many different programs.<\/p>\n<p dir=\"ltr\">Security Fix(es):<\/p>\n<p dir=\"ltr\">* zlib: A flaw found in zlib when compressing (not decompressing) certain<br \/>\ninputs (CVE-2018-25032)<\/p>\n<p dir=\"ltr\">For more details about the security issue(s), including the impact, a CVSS<br \/>\nscore, acknowledgments, and other related information, refer to the CVE<br \/>\npage(s) listed in the References section.<\/p>\n<p dir=\"ltr\">4. Solution:<\/p>\n<p dir=\"ltr\">For details on how to apply this update, which includes the changes<br \/>\ndescribed in this advisory, refer to:<\/p>\n<p dir=\"ltr\">https:\/\/access.redhat.com\/articles\/11258<\/p>\n<p dir=\"ltr\">5. Bugs fixed (https:\/\/bugzilla.redhat.com\/):<\/p>\n<p dir=\"ltr\">2067945 &#8211; CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs<\/p>\n<p dir=\"ltr\">6. Package List:<\/p>\n<p dir=\"ltr\">Red Hat Enterprise Linux Server (v. 6 ELS):<\/p>\n<p dir=\"ltr\">Source:<br \/>\nzlib-1.2.3-31.el6_10.src.rpm<\/p>\n<p dir=\"ltr\">i386:<br \/>\nzlib-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-devel-1.2.3-31.el6_10.i686.rpm<\/p>\n<p dir=\"ltr\">s390x:<br \/>\nzlib-1.2.3-31.el6_10.s390.rpm<br \/>\nzlib-1.2.3-31.el6_10.s390x.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.s390.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.s390x.rpm<br \/>\nzlib-devel-1.2.3-31.el6_10.s390.rpm<br \/>\nzlib-devel-1.2.3-31.el6_10.s390x.rpm<\/p>\n<p dir=\"ltr\">x86_64:<br \/>\nzlib-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-1.2.3-31.el6_10.x86_64.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.x86_64.rpm<br \/>\nzlib-devel-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-devel-1.2.3-31.el6_10.x86_64.rpm<\/p>\n<p dir=\"ltr\">Red Hat Enterprise Linux Server Optional (v. 6 ELS):<\/p>\n<p dir=\"ltr\">i386:<br \/>\nminizip-1.2.3-31.el6_10.i686.rpm<br \/>\nminizip-devel-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-static-1.2.3-31.el6_10.i686.rpm<\/p>\n<p dir=\"ltr\">s390x:<br \/>\nminizip-1.2.3-31.el6_10.s390.rpm<br \/>\nminizip-1.2.3-31.el6_10.s390x.rpm<br \/>\nminizip-devel-1.2.3-31.el6_10.s390.rpm<br \/>\nminizip-devel-1.2.3-31.el6_10.s390x.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.s390.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.s390x.rpm<br \/>\nzlib-static-1.2.3-31.el6_10.s390x.rpm<\/p>\n<p dir=\"ltr\">x86_64:<br \/>\nminizip-1.2.3-31.el6_10.i686.rpm<br \/>\nminizip-1.2.3-31.el6_10.x86_64.rpm<br \/>\nminizip-devel-1.2.3-31.el6_10.i686.rpm<br \/>\nminizip-devel-1.2.3-31.el6_10.x86_64.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.i686.rpm<br \/>\nzlib-debuginfo-1.2.3-31.el6_10.x86_64.rpm<br \/>\nzlib-static-1.2.3-31.el6_10.x86_64.rpm<\/p>\n<p dir=\"ltr\">These packages are GPG signed by Red Hat for security. Our key and<br \/>\ndetails on how to verify the signature are available from<br \/>\nhttps:\/\/access.redhat.com\/security\/team\/key\/<\/p>\n<p dir=\"ltr\">7. References:<\/p>\n<p dir=\"ltr\">https:\/\/access.redhat.com\/security\/cve\/CVE-2018-25032<br \/>\nhttps:\/\/access.redhat.com\/security\/updates\/classification\/#important<\/p>\n<p dir=\"ltr\">8. Contact:<\/p>\n<p dir=\"ltr\">The Red Hat security contact is &lt;secalert@redhat.com&gt;. More contact<br \/>\ndetails at https:\/\/access.redhat.com\/security\/team\/contact\/<\/p>\n<p dir=\"ltr\">Copyright 2022 Red Hat, Inc.<br \/>\n&#8212;&#8211;BEGIN PGP SIGNATURE&#8212;&#8211;<br \/>\nVersion: GnuPG v1<\/p>\n<p dir=\"ltr\">iQIVAwUBYnw2BtzjgjWX9erEAQjeZA\/\/U4fM7CbjmjEFlSLiLXkxAg\/vA4OddfmK<br \/>\nLbxlKPr0\/l6bPXg\/5kp1fTlTitW3dwNBwbciGMEUoELht8nCqp\/6jW39sKaOztAZ<br \/>\nvw+IPoJ3BvnVV4768MnfMCApM\/iPEPE+vP0U8fEtptNrIjQUvNX4mSX5ROyOv2HF<br \/>\nhbFuz3d46IT52bwbVaN5bUaCruefvWPrTsuvQ82QjMykd0TL8P7UTnCJfi9QK9fY<br \/>\nzO+J\/3+sJ4HLoPchM613MHpRgUYIRRxIBy7N5CUdo1iKqibkye05LcAxGHKHEiZq<br \/>\n2OM2\/UKVjIA1DOZ3Z4dYkQx86LM2IrpeELqw5vDAPk+2wexQOtcSNurs1W\/No2GX<br \/>\ny7DkniocnCTrePRQjXF4E2rnDkbEYvK1NkCI+whb28xh8mETBiIrNqUSK2YdxrEq<br \/>\njjICJAEwcjhu14SNuFWvB7767mx38xhRIT+AdM80KJ7g\/EWVS1bUpsFKczaGR6F0<br \/>\nT6s2BeFulSdwP8eN20xjWtweQFzzdW4rmUXFhukFDCHhtdxxjMQaSpSVQbaCr0Vs<br \/>\nD9ja84s9UcLSfcUBHKL2YlsZSJcxfq\/8M6cncb\/z0Iymsa+2dzwPX5wNCUxhHVNm<br \/>\nE5NeH+upigtPr3i6T58SEuqe0aTGTsjt3232bWdI8Mqa9ugGcCSFex8s5IDUT2sh<br \/>\nvOofk4lw2SM=U7km<br \/>\n&#8212;&#8211;END PGP SIGNATURE&#8212;&#8211;<br \/>\n&#8212;<br \/>\nRHSA-announce mailing list<br \/>\nRHSA-announce@redhat.com<br \/>\nhttps:\/\/listman.redhat.com\/mailman\/listinfo\/rhsa-announce<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211; Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: zlib security update Advisory ID: RHSA-2022:2214-01 Product: Red Hat Enterprise Linux Advisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2022:2214 Issue date: 2022-05-11 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for zlib is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-24387","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/24387","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=24387"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/24387\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=24387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=24387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=24387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}