CVE-2026-3381
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib
Summary
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib
Original description
The description as published by the source.
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.
Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2026-3381 perl-compress-raw-zlib Fixed in: 2.222-r0
- Debian DEBIAN-CVE-2026-3381 libcompress-raw-zlib-perl Fixed in: 2.011-2
- Ubuntu UBUNTU-CVE-2026-3381 libcompress-raw-zlib-perl
References
- advisory github.com
- advisory github.com
- advisory metacpan.org
- advisory nvd.nist.gov
- advisory cve.org
- package github.com
- package github.com
- report github.com
- web cpan.org
- web zlib.net
- web 7asecurity.com