zlib vulnerability

Compress::Raw::Zlib — the low‑level Perl interface to the ubiquitous zlib compression library — has been flagged in a critical supplier‑chain advisory after versions through 2.219 were found to embed or otherwise use potentially insecure versions of zlib, creating a high‑severity availability...

The zlib library’s inftrees.c bug tracked as CVE-2016-9840 is a subtle but consequential example of how a tiny, non‑portable C optimization can become a wide‑ranging security headache — it allowed improper pointer arithmetic in zlib 1.2.8 to create undefined behavior that, in downstream...