Security
zlib advisories
The compression library inside PNG and Deflate-compressed TIFF, so a flaw in it reaches every program that opens either
3 advisories recorded for zlib (zlib on Debian); the project is at https://github.com/madler/zlib. Newest first.
| Published | Advisory | Reaches you | What sillybos does |
|---|---|---|---|
| zlib's gz_vacate overflows a heap buffer after a stalled gzwrite CVE-2026-85091 | on a save path | Not reached by opening a file | |
| zlib's crc32_combine can spin on a shift loop CVE-2026-27171 | through another call | Not reached by opening a file | |
| zlib's untgz demonstration overruns a global buffer CVE-2026-22184 | through a command-line tool | Not reached by opening a file |
Back to the whole watch.