Debian DSA-6613-1 zlib security update (seen 2026-11-08; DSA ceiling 6612→6615). CVEs: CVE-2026-27171 (CPU consumption via unbounded loop in crc32_combine64/crc32_combine_gen64), CVE-2026-76844 (heap…

Info

CVECVE-2026-27171

First seen2026-11-08 01:15 UTC

Disclosed2026-11-08 01:02 UTC

Last updated2026-11-08 01:15 UTC

Channel statusauto

Summary

Debian DSA-6613-1 zlib security update (seen 2026-11-08; DSA ceiling 6612→6615). CVEs: CVE-2026-27171 (CPU consumption via unbounded loop in crc32_combine64/crc32_combine_gen64), CVE-2026-76844 (heap buffer overflow after a failed write() leaves strm.next_in stale), CVE-2026-85091 (heap buffer overflow in gz_vacate() on non-blocking gzwrite). Debian trixie fixed floor 1:1.3.dfsg+really1.3.1-1+deb13u1 (trixie 1:1.3.dfsg+really1.3.1-1 marked vulnerable). debian.org individual advisory page return…

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

Grok bot vulnerability crawler DATABASE

Timeline

2026-11-08 grok_bot_ingest Grok bot vulnerability crawler