Your message dated Sun, 25 Oct 2026 23:50:23 +0000
with message-id <[email protected]>
and subject line Bug#1146895: fixed in zlib 1:1.3.dfsg+really1.3.2-4
has caused the Debian Bug report #1146895,
regarding zlib: CVE-2026-85091
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1146895: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1146895
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: zlib
Version: 1:1.3.dfsg+really1.3.2-1
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerability was published for zlib.
CVE-2026-85091[0]:
| zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow
| vulnerability in the gz_vacate() function when processing non-
| blocking gzwrite() operations with stale external buffer pointers.
| Attackers can trigger the overflow by calling gzprintf() or
| gzvprintf() after a write stall, causing an unchecked memmove() to
| write beyond the internal input buffer boundary.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-85091
https://www.cve.org/CVERecord?id=CVE-2026-85091
[1] https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490
[2]
https://github.com/madler/zlib/commit/e3dc0a85b7032e98380dec011bc8f2c2ee0d8fca
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: zlib
Source-Version: 1:1.3.dfsg+really1.3.2-4
Done: Mark Brown <[email protected]>
We believe that the bug you reported is fixed in the latest version of
zlib, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mark Brown <[email protected]> (supplier of updated zlib package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 25 Oct 2026 22:40:02 +0000
Source: zlib
Architecture: source
Version: 1:1.3.dfsg+really1.3.2-4
Distribution: unstable
Urgency: low
Maintainer: Mark Brown <[email protected]>
Changed-By: Mark Brown <[email protected]>
Closes: 1141300 1146895
Changes:
zlib (1:1.3.dfsg+really1.3.2-4) unstable; urgency=low
.
* Pull in upstream patch to fix void undefined behavior in gzwrite.c.
* Pull in upstream patch to fix buffer overflow bug in non-blocking
gzwrite (CVE-2026-85091) (Closes: #1146895).
* Apply patch from Helmut Grohne <[email protected]> making the
multilib dependencies massively more verbose to avoid cross build
issues due to incomplete gcc-multilib not being available on some
architectures (closes: #1141300).
Checksums-Sha1:
fe42bb63d416e3716a4fd57454f6117297a74a7e 3931 zlib_1.3.dfsg+really1.3.2-4.dsc
00655a512f6bee30dc3a8ede9a827f693c5cb33c 18988
zlib_1.3.dfsg+really1.3.2-4.debian.tar.xz
Checksums-Sha256:
5735985df9244ebceb03e606342d3d0bf2fd76284f3ccc939a266b43b559a8e1 3931
zlib_1.3.dfsg+really1.3.2-4.dsc
ee9db06d87b2d810b9edd8485b8b39433b18eb30d93f9e1d40fe8dbd40eda7a1 18988
zlib_1.3.dfsg+really1.3.2-4.debian.tar.xz
Files:
bdd9ce491c9505232be99c1d40fb3f2c 3931 libs optional
zlib_1.3.dfsg+really1.3.2-4.dsc
d59fcdbd3ab0221d457793f5e67dfd63 18988 libs optional
zlib_1.3.dfsg+really1.3.2-4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEEreZoqmdXGLWf4p/qJNaLcl1Uh9AFAmrejvYACgkQJNaLcl1U
h9CliQf7BTF845QsbzBKAVreIHobEUUJHdesKORDo3RI2dCbW75fyJ3lB85f8AJ/
KJ45xsSAFE/AddMijqYTfOPNcFQ07lLxI3FWSkiQiiHKIccA80+Dg5BPdG4zQXEV
ufM6Mwv+nVkCRmJtn5kUixUH1taTimNVZHxXaRhZnQEvHInB8lxujSuvjsnJZkrG
hhIyFNuVkg+W/gQ6X28asytj3uWTwyu+CtfrIoNm8lEARJ/3rhxRVt9nHuyYYWsD
awz2wiv4Lbgglld1A744jSwuXJ4vh17wQKIfnOTZuE4s1ZFFqfQmkRr20JrG/7TH
p3q1yQbdoBeHjW9Rbc0Quakmzc1csQ==
=Q/n+
-----END PGP SIGNATURE-----
pgp8vyLfbtlxs.pgp
Description: PGP signature
--- End Message ---
