SUSE-SU-2026:0783-1

Details

This update for zlib fixes the following issue:

CVE-2026-27171: Fixed infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths (bsc#1258392).

Affected Packages(11 packages)

libz1

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

zlib

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Module for Development Tools 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

zlib-devel

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

libminizip1

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

libz1-32bit

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

minizip-devel

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

zlib-devel-static

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

zlib-devel-32bit

SUSE Linux Enterprise Module for Development Tools 15 SP7openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

libminizip1-32bit

openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

zlib-devel-static-32bit

openSUSE Leap 15.6

Fixed in:

1.2.13-150500.4.6.1

References

REPORT

https://bugzilla.suse.com/1258392

WEB

https://www.suse.com/security/cve/CVE-2026-27171

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260783-1/