CVE-2026-3381: Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

Overview

Severity

Critical (CVSS 9.8)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploit Status

Not Exploited

Patch Tuesday

2026-Mar

Released

2026-03-07

Last Updated

2026-03-11

EPSS Score

0.07% (percentile: 21.7%)

Affected Products (50)

Open Source Software

• cbl2 boost 1.76.0-4 on CBL Mariner 2.0
• cbl2 ceph 16.2.10-11 on CBL Mariner 2.0
• cbl2 cloud-hypervisor 32.0-7 on CBL Mariner 2.0
• cbl2 cloud-hypervisor-cvm 38.0.72.2-5 on CBL Mariner 2.0
• cbl2 cmake 3.21.4-21 on CBL Mariner 2.0
• azl3 binutils 2.41-10 on Azure Linux 3.0
• cbl2 conda 4.11.0-1 on CBL Mariner 2.0
• azl3 boost 1.83.0-2 on Azure Linux 3.0
• azl3 ceph 18.2.2-12 on Azure Linux 3.0
• cbl2 erlang 25.3.2.21-4 on CBL Mariner 2.0
• azl3 cloud-hypervisor 48.0.246-3 on Azure Linux 3.0
• azl3 cmake 3.30.3-12 on Azure Linux 3.0
• azl3 conda 24.3.0-4 on Azure Linux 3.0
• azl3 crash 9.0.0-1 on Azure Linux 3.0
• azl3 erlang 26.2.5.17-1 on Azure Linux 3.0
• azl3 gdb 13.2-6 on Azure Linux 3.0
• cbl2 keras 2.11.0-3 on CBL Mariner 2.0
• cbl2 mariadb 10.6.24-1 on CBL Mariner 2.0
• cbl2 mariadb-connector-c 3.1.10-6 on CBL Mariner 2.0
• cbl2 mysql 8.0.45-2 on CBL Mariner 2.0
• cbl2 nmap 7.93-4 on CBL Mariner 2.0
• cbl2 nss 3.75-2 on CBL Mariner 2.0
• azl3 kata-containers 3.19.1.kata2-6 on Azure Linux 3.0
• cbl2 perl 5.34.1-491 on CBL Mariner 2.0
• cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0
• cbl2 python-tensorflow-estimator 2.11.0-2 on CBL Mariner 2.0
• azl3 mariadb-connector-c 3.3.8-3 on Azure Linux 3.0
• azl3 mysql 8.0.45-1 on Azure Linux 3.0
• azl3 nmap 7.95-3 on Azure Linux 3.0
• azl3 nss 3.96.1-3 on Azure Linux 3.0
• cbl2 qt5-qtbase 5.12.11-19 on CBL Mariner 2.0
• cbl2 rubygem-mini_portile2 2.8.0-1 on CBL Mariner 2.0
• cbl2 rust 1.72.0-14 on CBL Mariner 2.0
• azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
• cbl2 sudo 1.9.17-1 on CBL Mariner 2.0
• cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
• azl3 rubygem-mini_portile2 2.8.4-1 on Azure Linux 3.0
• azl3 rust 1.75.0-25 on Azure Linux 3.0
• azl3 rust 1.90.0-4 on Azure Linux 3.0
• azl3 tensorflow 2.16.1-11 on Azure Linux 3.0

Mariner

• cbl2 grpc 1.42.0-11 on CBL Mariner 2.0
• azl3 grpc 1.62.3-1 on Azure Linux 3.0
• cbl2 syslinux 6.04-10 on CBL Mariner 2.0
• cbl2 tcl 8.6.13-3 on CBL Mariner 2.0
• azl3 qtbase 6.6.3-4 on Azure Linux 3.0
• cbl2 zlib 1.2.13-2 on CBL Mariner 2.0
• azl3 sudo 1.9.17-1 on Azure Linux 3.0
• azl3 syslinux 6.04-11 on Azure Linux 3.0
• azl3 tcl 8.6.13-3 on Azure Linux 3.0
• azl3 zlib 1.3.1-1 on Azure Linux 3.0

Revision History

• 2026-03-07: Information published.
• 2026-03-11: Information published.