#zlib

1 stories this week · 4 this month · 7 in 6 months · mostly security

Stories per day · 30 days

7 stories, newest first · one card per story

zlib 1.4 includes security fixes for the library.

Fixed builds are 22.23.4, 24.22.1 and 26.12.1; Rapid7 reports no known exploitation and it is not on the KEV list.

Ali Firas found mishandled writes that can crash zlib or allow arbitrary code execution.

FreeType 2.15.0 fixes CVE-2026-95512, CVE-2026-50811, and vendored zlib flaw CVE-2026-27171.

libpng 1.6.59 fixes medium-severity use-after-free CVE-2026-46675 in the sequential reader.

A developer shows gzip can continue text by beam-searching byte sequences that compress best against a primed corpus.

4 min readgzip zlib

Apache MINA CompressionFilter allows unbounded zlib inflation, enabling a decompression-amplification denial of service.

Stories tagged #zlib