CVE-2026-27171 on CTRL-OS 26.05

Aliases: CVE-2026-27171

Packages: zlib

Status: Resolved

Advisory Information

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Updates

2026-08-01 00:52 CEST

Metadata changes:

• Status for package zlib: “Resolved” (1400e45293c4927af01b96f467d0381830db75f4)

2026-07-31 01:08 CEST

Metadata changes:

• Status for package zlib: “New”