Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-27171

Fixed in a distro release EPSS <1%CVSS 2.9

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Published 2026-02-18 · CVE record · OSV

Products: zlib

Distro releases

ReleasePackageFixed in
Alpine 3.20zlib1.3.2-r0
Alpine 3.21zlib1.3.2-r0
Alpine 3.22zlib1.3.2-r0
Alpine 3.23zlib1.3.2-r0
Alpine 3.24zlib1.3.2-r0
Amazon Linux 2023nodejs201:20.20.2-1.amzn2023.0.2
Amazon Linux 2023nodejs20-devel1:20.20.2-1.amzn2023.0.2
Amazon Linux 2023nodejs20-docs1:20.20.2-1.amzn2023.0.2
Amazon Linux 2023nodejs20-full-i18n1:20.20.2-1.amzn2023.0.2
Amazon Linux 2023nodejs20-libs1:20.20.2-1.amzn2023.0.2
Amazon Linux 2023nodejs20-npm1:10.8.2-1.20.20.2.1.amzn2023.0.2
Amazon Linux 2023nodejs221:22.22.2-1.amzn2023.0.2
Amazon Linux 2023nodejs22-devel1:22.22.2-1.amzn2023.0.2
Amazon Linux 2023nodejs22-docs1:22.22.2-1.amzn2023.0.2
Amazon Linux 2023nodejs22-full-i18n1:22.22.2-1.amzn2023.0.2
Amazon Linux 2023nodejs22-libs1:22.22.2-1.amzn2023.0.2
Amazon Linux 2023nodejs22-npm1:10.9.7-1.22.22.2.1.amzn2023.0.2
Amazon Linux 2023nodejs241:24.15.0-1.amzn2023.0.1
Amazon Linux 2023nodejs24-devel1:24.15.0-1.amzn2023.0.1
Amazon Linux 2023nodejs24-docs1:24.15.0-1.amzn2023.0.1
Amazon Linux 2023nodejs24-full-i18n1:24.15.0-1.amzn2023.0.1
Amazon Linux 2023nodejs24-libs1:24.15.0-1.amzn2023.0.1
Amazon Linux 2023nodejs24-npm1:11.12.1-1.24.15.0.1.amzn2023.0.1
Amazon Linux 2023v8-11.3-devel3:11.3.244.8-1.20.20.2.1.amzn2023.0.2
Amazon Linux 2023v8-12.4-devel3:12.4.254.21-1.22.22.2.1.amzn2023.0.2
Amazon Linux 2023v8-13.6-devel3:13.6.233.17-1.24.15.0.1.amzn2023.0.1
Chainguardzlib1.3.2-r0
Chainguardzlib-dev1.3.2-r0
Debian 12zlibno fix
Debian 13zlibno fix
Debian 14zlib1:1.3.dfsg+really1.3.2-1
SUSE Linux Enterprise Micro 5.5zlib1.2.13-150500.4.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP7zlib1.2.13-150500.4.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7zlib1.2.13-150500.4.6.1
SUSE Linux Enterprise Server 16.0zlib1.2.13-160000.3.1
SUSE Linux Enterprise Server for SAP applications 16.0zlib1.2.13-160000.3.1
SUSE Linux Micro 6.0zlib1.2.13-7.1
SUSE Linux Micro 6.1zlib1.2.13-slfo.1.1_2.1
SUSE Linux Micro 6.2zlib1.2.13-160000.3.1
Ubuntu 24.04 LTSzlib1:1.3.dfsg-3.1ubuntu2.2
Ubuntu 25.10zlibno fix
Ubuntu 26.04 LTSzlib1:1.3.dfsg+really1.3.1-1ubuntu3.1
Wolfizlib1.3.2-r0
Wolfizlib-dev1.3.2-r0
openSUSE Leap 15.6zlib1.2.13-150500.4.6.1
openSUSE Leap 16.0zlib1.2.13-160000.3.1
openSUSE Tumbleweedfreetype22.15.0-1.1
openSUSE Tumbleweedzlib1.3.1-2.1