SUSE alert openSUSE-SU-2026:21142-1 (perl-compress-raw-zlib)

From:
             
 
null@suse.de
To:
             
 
security-announce@lists.opensuse.org
Subject:
             
 
openSUSE-SU-2026:21142-1: critical: Security update for perl-Compress-Raw-Zlib
Date:
             
 
Tue, 30 Jun 2026 09:48:35 +0200
Message-ID:
             
 
<20260630074835.31125FF7F@maintenance.suse.de>
Archive-link:
             
 
Article
openSUSE security update: security update for perl-compress-raw-zlib
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21142-1
Rating: critical

Cross-References:

  * CVE-2026-3381



Affected Products:

         openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves one vulnerability can now be installed.

Description:

This update for perl-Compress-Raw-Zlib fixes the following issues:

Changes in perl-Compress-Raw-Zlib:

- updated to 2.222
   see /usr/share/doc/packages/perl-Compress-Raw-Zlib/Changes

    2.222 27 February 2026
      * Add SECURITY.md. Fixes #40
      * Fix spelling typos
    2.221 27 February 2026
      * Merge remote-tracking branch 'refs/remotes/origin/master'
      * Merge pull request #39 from jkeenan/correct-changes-date-20260227
      * Update to 2.221
      * Version number wrong in Changes file. Fixes #38
    2.220 27 February 2026
      * Update to version 2.220
      * zlib 1.3.2: Update references to zlib 1.3.1 to use zlib 1.3.2
        CVE-2026-3381
      * zlib 1.3.2: Add "Perl_crz" prefix to "z_errmsg". Fixes #32
      * Fix spelling typo
    2.219 23 February 2026
        * Update to version 2.219
        * zlib 1.3.2:  Add a few casts to allow zlib sources to build with C++
        * Test workflows with upstream zlib 1.32
        * zlib 1.3.2: Add "Perl_crz_" prefix  to exported symbols
        * zlib-1.3.2: Force include of <stddef.h> to get definition for NULL
        * Refresh zlib-src directory with unmodified zlib-1.3.2 files

- updated to 2.218
   see /usr/share/doc/packages/perl-Compress-Raw-Zlib/Changes

    2.218 3 February 2026
        * Update version to 2.218
        * Fix for regression of #34
    2.217 31 January 2026
        * Update version to 2.217

- updated to 2.214
   see /usr/share/doc/packages/perl-Compress-Raw-Zlib/Changes

    2.214 28 October 2025
        * version 2.214
        * remove 1.2.13 from mac upstream zlib build
        * Disable some older zlib versions
        * Bump actions/checkout from 1 to 5
        * remove target-branch from dependabot
        * Add dependabot.yml to police workflow files
        * disable push and pull_request
        * Add perl 5.42 to workflow files
        * Add support for zlib-ng 2.2.5
        * get_Bufsize is correct, but the document says get_BufSize - Fixes #34
        * add zlib-ng 2.2.4 to workflow
        * add zlib-ng 2.2.3
        * More updates for zlib-ng 2.2.2 and 2.1.8
        * Add zlib-ng 2.2.2 and 2.18 to GitHub workflows


Patch instructions:

   To install this openSUSE security update use the suse recommended installation methods
   like YaST online_update or "zypper patch".
   Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

   zypper in -t patch openSUSE-Leap-16.0-packagehub-337=1

Package List:

- openSUSE Leap 16.0:

  perl-Compress-Raw-Zlib-2.222-bp160.1.1

References:

  * https://www.suse.com/security/cve/CVE-2026-3381.html