Denial of service in Zlib - CVE-2016-9840

Vulnerability identifier: #VU6663

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-9840

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in zlib due to out-of-bounds pointer arithmetic in inftrees.c. A remote attacker can send a specially crafted document, trick the victim into opening it, and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

Zlib
Gentoo Linux
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
IBM AIX
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for IBM z Systems
SUSE OpenStack Cloud
Red Hat Enterprise Linux Desktop
Anolis OS
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
SUSE Linux
Ubuntu
SUSE Package Hub 15
Legacy Module
Basesystem Module
openSUSE Leap
openEuler
Opensuse
Fedora
zlib (Ubuntu package)
zlib (Alpine package)
rsync (Ubuntu package)
perl (Alpine package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
klibc-utils (Ubuntu package)
libklibc (Ubuntu package)
zsync
minizip-devel
minizip
zlib
zlib-devel
zlib-static
java-1.6.0-sun-devel (Red Hat package)
java-1.6.0-sun-src (Red Hat package)
java-1.6.0-sun-plugin (Red Hat package)
java-1.6.0-sun-jdbc (Red Hat package)
java-1.6.0-sun-demo (Red Hat package)
java-1.6.0-sun (Red Hat package)
java-1.7.0-oracle-devel (Red Hat package)
java-1.7.0-oracle-jdbc (Red Hat package)
java-1.7.0-oracle-javafx (Red Hat package)
java-1.7.0-oracle-plugin (Red Hat package)
java-1.7.0-oracle-src (Red Hat package)
java-1.7.0-oracle (Red Hat package)
java-1.8.0-oracle-plugin (Red Hat package)
java-1.8.0-oracle-src (Red Hat package)
java-1.8.0-oracle-jdbc (Red Hat package)
java-1.8.0-oracle-javafx (Red Hat package)
java-1.8.0-oracle-devel (Red Hat package)
java-1.8.0-oracle (Red Hat package)
libboost_mpi_python-py2_7-1_66_0-devel
libboost_atomic1_66_0-devel
boost_1_66-jam
boost-base-debugsource
libboost_test1_66_0
libboost_mpi_python-py3-1_66_0-debuginfo
libboost_math1_66_0
libboost_locale1_66_0
libboost_timer1_66_0
python3-boost_parallel_mpi1_66_0
libboost_system1_66_0-32bit-debuginfo
boost_1_66-quickbook-debuginfo
libboost_type_erasure1_66_0-devel
libboost_mpi1_66_0
libboost_signals1_66_0-debuginfo
libboost_mpi_python-py3-1_66_0
libboost_random1_66_0
libboost_container1_66_0-debuginfo
libboost_iostreams1_66_0-devel
libboost_serialization1_66_0-debuginfo
libboost_numpy-py2_7-1_66_0-debuginfo
libboost_chrono1_66_0
libboost_system1_66_0
libboost_filesystem1_66_0
libboost_serialization1_66_0
libboost_graph_parallel1_66_0-devel
libboost_graph_parallel1_66_0-debuginfo
libboost_thread1_66_0
libboost_type_erasure1_66_0
libboost_date_time1_66_0-devel
libboost_math1_66_0-debuginfo
libboost_container1_66_0
libboost_serialization1_66_0-devel
libboost_date_time1_66_0
libboost_program_options1_66_0
libboost_system1_66_0-debuginfo
libboost_signals1_66_0-devel
libboost_thread1_66_0-devel
libboost_signals1_66_0
libboost_iostreams1_66_0
libboost_wave1_66_0-devel
libboost_regex1_66_0
libboost_program_options1_66_0-debuginfo
libboost_fiber1_66_0-32bit
libboost_regex1_66_0-32bit
libboost_type_erasure1_66_0-32bit-debuginfo
libboost_container1_66_0-32bit-debuginfo
libboost_coroutine1_66_0-32bit
libboost_filesystem1_66_0-32bit
libboost_type_erasure1_66_0-32bit
libboost_container1_66_0-32bit
libboost_graph_parallel1_66_0-32bit-debuginfo
libboost_date_time1_66_0-32bit-debuginfo
libboost_iostreams1_66_0-32bit
libboost_iostreams1_66_0-32bit-debuginfo
libboost_graph1_66_0-32bit-debuginfo
libboost_math1_66_0-32bit
libboost_math1_66_0-32bit-debuginfo
libboost_python-py3-1_66_0-32bit
libboost_python-py2_7-1_66_0-32bit
libboost_atomic1_66_0-32bit-debuginfo
libboost_python-py2_7-1_66_0-32bit-debuginfo
libboost_graph_parallel1_66_0-32bit
libboost_date_time1_66_0-32bit
libboost_random1_66_0-32bit-debuginfo
libboost_system1_66_0-32bit
libboost_numpy-py3-1_66_0-devel
boost_1_66-doc-pdf
boost-license1_66_0
boost_1_66-doc-html
libboost_test1_66_0-32bit-debuginfo
libboost_locale1_66_0-32bit
libboost_wave1_66_0-32bit
libboost_filesystem1_66_0-32bit-debuginfo
libboost_program_options1_66_0-32bit
libboost_thread1_66_0-32bit-debuginfo
libboost_atomic1_66_0
libboost_atomic1_66_0-32bit
libboost_graph1_66_0-32bit
libboost_test1_66_0-32bit
libboost_context1_66_0-32bit
libboost_context1_66_0-32bit-debuginfo
libboost_program_options1_66_0-32bit-debuginfo
libboost_python-py3-1_66_0-32bit-debuginfo
libboost_stacktrace1_66_0-32bit-debuginfo
libboost_regex1_66_0-32bit-debuginfo
libboost_program_options1_66_0-devel
libboost_serialization1_66_0-32bit
libboost_locale1_66_0-32bit-debuginfo
libboost_random1_66_0-32bit
libboost_chrono1_66_0-devel
libboost_random1_66_0-debuginfo
libboost_numpy-py2_7-1_66_0-devel
libboost_filesystem1_66_0-devel
libboost_log1_66_0-debuginfo
libboost_locale1_66_0-devel
libboost_stacktrace1_66_0-32bit
libboost_python-py3-1_66_0-devel
libboost_mpi_python-py2_7-1_66_0-debuginfo
libboost_stacktrace1_66_0-debuginfo
libboost_wave1_66_0
libboost_stacktrace1_66_0
libboost_graph1_66_0-devel
libboost_timer1_66_0-devel
libboost_mpi1_66_0-debuginfo
libboost_mpi1_66_0-32bit-debuginfo
libboost_fiber1_66_0
libboost_context1_66_0-debuginfo
libboost_context1_66_0-devel
libboost_fiber1_66_0-debuginfo
libboost_fiber1_66_0-devel
libboost_context1_66_0
libboost_coroutine1_66_0
libboost_coroutine1_66_0-devel
libboost_coroutine1_66_0-debuginfo
libboost_python-py2_7-1_66_0-devel
libboost_thread1_66_0-32bit
libboost_wave1_66_0-32bit-debuginfo
libboost_signals1_66_0-32bit
libboost_mpi1_66_0-32bit
libboost_serialization1_66_0-32bit-debuginfo
libboost_signals1_66_0-32bit-debuginfo
libboost_fiber1_66_0-32bit-debuginfo
libboost_coroutine1_66_0-32bit-debuginfo
libboost_log1_66_0-devel
libboost_graph1_66_0-debuginfo
libboost_container1_66_0-devel
libboost_iostreams1_66_0-debuginfo
libboost_graph1_66_0
libboost_stacktrace1_66_0-devel
libboost_regex1_66_0-devel
libboost_chrono1_66_0-debuginfo
libboost_python-py3-1_66_0-debuginfo
libboost_python-py2_7-1_66_0
libboost_mpi1_66_0-devel
libboost_regex1_66_0-debuginfo
boost_1_66-quickbook
libboost_mpi_python-py3-1_66_0-devel
libboost_numpy-py3-1_66_0
python3-boost_parallel_mpi1_66_0-debuginfo
libboost_random1_66_0-devel
libboost_type_erasure1_66_0-debuginfo
libboost_python-py3-1_66_0
libboost_test1_66_0-devel
libboost_numpy-py3-1_66_0-debuginfo
libboost_test1_66_0-debuginfo
libboost_headers1_66_0-devel
libboost_date_time1_66_0-debuginfo
libboost_numpy-py2_7-1_66_0
libboost_math1_66_0-devel
libboost_atomic1_66_0-debuginfo
libboost_locale1_66_0-debuginfo
libboost_python-py2_7-1_66_0-debuginfo
libboost_filesystem1_66_0-debuginfo
libboost_wave1_66_0-debuginfo
libboost_thread1_66_0-debuginfo
libboost_mpi_python-py2_7-1_66_0
libboost_log1_66_0
libboost_graph_parallel1_66_0
libboost_system1_66_0-devel
libboost_timer1_66_0-debuginfo
rsync (Red Hat package)
rsync-doc
rsync-daemon
rsync
syslinux-extlinux-nonlinux
syslinux-nonlinux
syslinux-tftpboot
syslinux
syslinux-debuginfo
syslinux-extlinux
syslinux-debugsource
syslinux-devel
syslinux-perl
syslinux-efi64
Netcool Operations Insight
Red Hat Satellite
IBM MQ
Ansible Automation Platform
Session Smart Router
NetWorker
Planning Analytics Local
IBM Cloud Pak for Watson AIOps
IBM Qradar SIEM
IBM Cognos Controller
BIG-IQ Centralized Management
BIG-IP
Red Hat OpenShift Serverless
OpenShift Virtualization
Red Hat OpenShift Container Platform

Install update from vendor's website.

Zlib - update to 1.2.9
zlib (Ubuntu package) - update to 1:1.2.8.dfsg-2ubuntu4.3
zlib (Alpine package) - update to 1.2.11-r0
Netcool Operations Insight - update to 1.6.15
rsync (Ubuntu package) - addressed in versions 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1.1
IBM Cloud Pak for Watson AIOps - update to 4.10.0
perl (Alpine package) - update to 5.24.3-r1
IBM Qradar SIEM - update to 7.5.0 Update Pack 12 IF02
klibc-utils (Ubuntu package) - addressed in versions Ubuntu Pro, 2.0.7-1ubuntu5.2, 2.0.10-4ubuntu0.1, 2.0.13-1ubuntu0.1, 2.0.13-4ubuntu0.1
libklibc (Ubuntu package) - addressed in versions Ubuntu Pro, 2.0.7-1ubuntu5.2, 2.0.10-4ubuntu0.1, 2.0.13-1ubuntu0.1, 2.0.13-4ubuntu0.1
zsync - update to 0.6.2-3.fc43
Red Hat OpenShift Serverless - update to 1
minizip-devel - update to 1.2.7-21
minizip - update to 1.2.7-21
zlib - update to 1.2.7-21
zlib-devel - update to 1.2.7-21
zlib-static - update to 1.2.7-21
java-1.6.0-sun-devel (Red Hat package) - addressed in versions 1.6.0.171-1jpp.4.el6, 1.6.0.171-1jpp.4.el7
java-1.6.0-sun-src (Red Hat package) - addressed in versions 1.6.0.171-1jpp.4.el6, 1.6.0.171-1jpp.4.el7
java-1.6.0-sun-plugin (Red Hat package) - addressed in versions 1.6.0.171-1jpp.4.el6, 1.6.0.171-1jpp.4.el7
java-1.6.0-sun-jdbc (Red Hat package) - addressed in versions 1.6.0.171-1jpp.4.el6, 1.6.0.171-1jpp.4.el7
java-1.6.0-sun-demo (Red Hat package) - addressed in versions 1.6.0.171-1jpp.4.el6, 1.6.0.171-1jpp.4.el7
java-1.6.0-sun (Red Hat package) - addressed in versions 1.6.0.171-1jpp.4.el6, 1.6.0.171-1jpp.4.el7
java-1.7.0-oracle-devel (Red Hat package) - addressed in versions 1.7.0.161-1jpp.3.el6, 1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-jdbc (Red Hat package) - addressed in versions 1.7.0.161-1jpp.3.el6, 1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-javafx (Red Hat package) - addressed in versions 1.7.0.161-1jpp.3.el6, 1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-plugin (Red Hat package) - addressed in versions 1.7.0.161-1jpp.3.el6, 1.7.0.161-1jpp.4.el7
java-1.7.0-oracle-src (Red Hat package) - addressed in versions 1.7.0.161-1jpp.3.el6, 1.7.0.161-1jpp.4.el7
java-1.7.0-oracle (Red Hat package) - addressed in versions 1.7.0.161-1jpp.3.el6, 1.7.0.161-1jpp.4.el7
java-1.8.0-oracle-plugin (Red Hat package) - addressed in versions 1.8.0.151-1jpp.1.el6, 1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-src (Red Hat package) - addressed in versions 1.8.0.151-1jpp.1.el6, 1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-jdbc (Red Hat package) - addressed in versions 1.8.0.151-1jpp.1.el6, 1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-javafx (Red Hat package) - addressed in versions 1.8.0.151-1jpp.1.el6, 1.8.0.151-1jpp.5.el7
java-1.8.0-oracle-devel (Red Hat package) - addressed in versions 1.8.0.151-1jpp.1.el6, 1.8.0.151-1jpp.5.el7
java-1.8.0-oracle (Red Hat package) - addressed in versions 1.8.0.151-1jpp.1.el6, 1.8.0.151-1jpp.5.el7
libboost_mpi_python-py2_7-1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_atomic1_66_0-devel - update to 1.66.0-150200.12.7.1
boost_1_66-jam - update to 1.66.0-150200.12.7.1
boost-base-debugsource - update to 1.66.0-150200.12.7.1
libboost_test1_66_0 - update to 1.66.0-150200.12.7.1
libboost_mpi_python-py3-1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_math1_66_0 - update to 1.66.0-150200.12.7.1
libboost_locale1_66_0 - update to 1.66.0-150200.12.7.1
libboost_timer1_66_0 - update to 1.66.0-150200.12.7.1
python3-boost_parallel_mpi1_66_0 - update to 1.66.0-150200.12.7.1
libboost_system1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
boost_1_66-quickbook-debuginfo - update to 1.66.0-150200.12.7.1
libboost_type_erasure1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_mpi1_66_0 - update to 1.66.0-150200.12.7.1
libboost_signals1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_mpi_python-py3-1_66_0 - update to 1.66.0-150200.12.7.1
libboost_random1_66_0 - update to 1.66.0-150200.12.7.1
libboost_container1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_iostreams1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_serialization1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_numpy-py2_7-1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_chrono1_66_0 - update to 1.66.0-150200.12.7.1
libboost_system1_66_0 - update to 1.66.0-150200.12.7.1
libboost_filesystem1_66_0 - update to 1.66.0-150200.12.7.1
libboost_serialization1_66_0 - update to 1.66.0-150200.12.7.1
libboost_graph_parallel1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_graph_parallel1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_thread1_66_0 - update to 1.66.0-150200.12.7.1
libboost_type_erasure1_66_0 - update to 1.66.0-150200.12.7.1
libboost_date_time1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_math1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_container1_66_0 - update to 1.66.0-150200.12.7.1
libboost_serialization1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_date_time1_66_0 - update to 1.66.0-150200.12.7.1
libboost_program_options1_66_0 - update to 1.66.0-150200.12.7.1
libboost_system1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_signals1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_thread1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_signals1_66_0 - update to 1.66.0-150200.12.7.1
libboost_iostreams1_66_0 - update to 1.66.0-150200.12.7.1
libboost_wave1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_regex1_66_0 - update to 1.66.0-150200.12.7.1
libboost_program_options1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_fiber1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_regex1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_type_erasure1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_container1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_coroutine1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_filesystem1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_type_erasure1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_container1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_graph_parallel1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_date_time1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_iostreams1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_iostreams1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_graph1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_math1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_math1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py3-1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_python-py2_7-1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_atomic1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py2_7-1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_graph_parallel1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_date_time1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_random1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_system1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_numpy-py3-1_66_0-devel - update to 1.66.0-150200.12.7.1
boost_1_66-doc-pdf - update to 1.66.0-150200.12.7.1
boost-license1_66_0 - update to 1.66.0-150200.12.7.1
boost_1_66-doc-html - update to 1.66.0-150200.12.7.1
libboost_test1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_locale1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_wave1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_filesystem1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_program_options1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_thread1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_atomic1_66_0 - update to 1.66.0-150200.12.7.1
libboost_atomic1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_graph1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_test1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_context1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_context1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_program_options1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py3-1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_stacktrace1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_regex1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_program_options1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_serialization1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_locale1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_random1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_chrono1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_random1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_numpy-py2_7-1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_filesystem1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_log1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_locale1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_stacktrace1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_python-py3-1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_mpi_python-py2_7-1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_stacktrace1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_wave1_66_0 - update to 1.66.0-150200.12.7.1
libboost_stacktrace1_66_0 - update to 1.66.0-150200.12.7.1
libboost_graph1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_timer1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_mpi1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_mpi1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_fiber1_66_0 - update to 1.66.0-150200.12.7.1
libboost_context1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_context1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_fiber1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_fiber1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_context1_66_0 - update to 1.66.0-150200.12.7.1
libboost_coroutine1_66_0 - update to 1.66.0-150200.12.7.1
libboost_coroutine1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_coroutine1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py2_7-1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_thread1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_wave1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_signals1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_mpi1_66_0-32bit - update to 1.66.0-150200.12.7.1
libboost_serialization1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_signals1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_fiber1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_coroutine1_66_0-32bit-debuginfo - update to 1.66.0-150200.12.7.1
libboost_log1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_graph1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_container1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_iostreams1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_graph1_66_0 - update to 1.66.0-150200.12.7.1
libboost_stacktrace1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_regex1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_chrono1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py3-1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py2_7-1_66_0 - update to 1.66.0-150200.12.7.1
libboost_mpi1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_regex1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
boost_1_66-quickbook - update to 1.66.0-150200.12.7.1
libboost_mpi_python-py3-1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_numpy-py3-1_66_0 - update to 1.66.0-150200.12.7.1
python3-boost_parallel_mpi1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_random1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_type_erasure1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py3-1_66_0 - update to 1.66.0-150200.12.7.1
libboost_test1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_numpy-py3-1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_test1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_headers1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_date_time1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_numpy-py2_7-1_66_0 - update to 1.66.0-150200.12.7.1
libboost_math1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_atomic1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_locale1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_python-py2_7-1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_filesystem1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_wave1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_thread1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
libboost_mpi_python-py2_7-1_66_0 - update to 1.66.0-150200.12.7.1
libboost_log1_66_0 - update to 1.66.0-150200.12.7.1
libboost_graph_parallel1_66_0 - update to 1.66.0-150200.12.7.1
libboost_system1_66_0-devel - update to 1.66.0-150200.12.7.1
libboost_timer1_66_0-debuginfo - update to 1.66.0-150200.12.7.1
Ansible Automation Platform - update to 2.4
rsync (Red Hat package) - addressed in versions 3.1.3-7.el8_2.5, 3.1.3-12.el8_4.5, 3.1.3-14.el8_6.8, 3.1.3-20.el8_8.3, 3.1.3-23.el8_10
rsync-doc - update to 3.1.3-23.0.1
rsync-daemon - update to 3.1.3-23.0.1
rsync - update to 3.1.3-23.0.1
OpenShift Virtualization - update to 4.12.20
Red Hat OpenShift Container Platform - addressed in versions 4.14.53, 4.15.53, 4.17.32, 4.18.16
Session Smart Router - addressed in versions 6.2.10, 6.3.7
syslinux-extlinux-nonlinux - update to 6.04-12
syslinux-nonlinux - update to 6.04-12
syslinux-tftpboot - update to 6.04-12
syslinux - update to 6.04-12
syslinux-debuginfo - update to 6.04-12
syslinux-extlinux - update to 6.04-12
syslinux-debugsource - update to 6.04-12
syslinux-devel - update to 6.04-12
syslinux-perl - update to 6.04-12
syslinux-efi64 - update to 6.04-12
NetWorker - update to 19.9.0.1

• https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0
• https://bugzilla.redhat.com/show_bug.cgi?id=1402345

• SUSE Linux update for java-1_7_1-ibm
• SUSE Linux update for java-1_7_0-ibm
• SUSE Linux update for java-1_8_0-ibm
• SUSE Linux update for java-1_6_0-ibm
• Multiple vulnerabilities in IBM AIX
• Gentoo update for zlib
• Multiple vulnerabilities in IBM WebSphere MQ
• openSUSE update for java-1_8_0-openjdk
• SUSE Linux update for java-1_8_0-openjdk
• Multiple vulnerabilities in IBM Cognos Controller
• Multiple vulnerabilities in IBM Planning Analytics
• Multiple vulnerabilities in IBM Cognos Controller
• Red Hat update for java-1.8.0-ibm
• Red Hat update for java-1.6.0-ibm
• Red Hat update for java-1.7.1-ibm
• Ubuntu update for zlib
• Ubuntu update for rsync
• Gentoo update for rsync
• Denial of service in perl (Alpine package)
• Denial of service in zlib (Alpine package)
• Multiple vulnerabilities in Dell NetWorker
• openEuler update for syslinux
• Ubuntu update for klibc
• Ubuntu update for klibc
• Denial of service in Zlib
• Denial of service in F5 BIG-IP zlib library
• Denial of service in F5 BIG-IQ Centralized Management zlib library
• Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7 update for java-1.8.0-oracle
• Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7 update for java-1.6.0-sun
• Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7 update for java-1.7.0-oracle
• Red Hat Enterprise Linux 8 update for rsync
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Anolis OS update for rsync
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Fedora 43 update for zsync
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Red Hat Enterprise Linux 8 update for rsync
• Red Hat Enterprise Linux 8 update for rsync
• Anolis OS update for zlib
• SUSE update for boost
• Red Hat Enterprise Linux 8 update for rsync
• Red Hat Enterprise Linux 8 update for rsync
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Juniper Session Smart Router update for third-party components