High Nessus Plugin ID 19333
SynopsisThe remote host is missing a vendor-supplied security patch
DescriptionThe remote host is missing the patch for the advisory SUSE-SA:2005:043 (zlib).
The previous zlib update for CVE-2005-2096 fixed a flaw in zlib that could allow a carefully crafted compressed stream to crash an application. While the original patch corrected the reported overflow, Markus Oberhumer discovered additional ways a stream could trigger an overflow. This update fixes those problems as well.
This issue is tracked by the Mitre CVE ID CVE-2005-1849.
Since only zlib 1.2.x is affected, older SUSE products are not affected by this problem.