SUSE-SU-2026:20709-1

Security update for zlib

view advisory published 2026-03-09

Security update for zlib

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-27171US	medium5.5	0.25% (16th)	—	2026-02-18
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
CVE-2023-45853US	critical9.8	3.45% (89th)	—	2023-10-14
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip…

references

External citations — patches, advisories, analysis.

SUSE Bug 1216378self
SUSE Bug 1258392self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20709-1self
SUSE CVE CVE-2023-45853 pageself
SUSE CVE CVE-2026-27171 pageself
SUSE ratingsexternal
URL for SUSE-SU-2026:20709-1self

remediations (12)

Fixedlibz1-0:1.2.13-7.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibz1-0:1.2.13-7.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibz1-0:1.2.13-7.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibz1-0:1.2.13-7.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibz1-0:1.2.13-7.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibz1-0:1.2.13-7.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedzlib-devel-0:1.2.13-7.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedzlib-devel-0:1.2.13-7.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedzlib-devel-0:1.2.13-7.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedzlib-devel-0:1.2.13-7.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedzlib-devel-0:1.2.13-7.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedzlib-devel-0:1.2.13-7.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan