diff --git a/Cargo.lock b/Cargo.lock
index 2a8fca6ef4584..fcbddca1e6840 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -14889,9 +14889,9 @@ dependencies = [
 
 [[package]]
 name = "zlib-rs"
-version = "0.6.0"
+version = "0.6.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a7948af682ccbc3342b6e9420e8c51c1fe5d7bf7756002b4a3c6cabfe96a7e3c"
+checksum = "b142a20ec14a91d5bc708c1dc21b080c550113d8aa77afa29635673a65dd02c5"
 
 [[package]]
 name = "zmij"
diff --git a/changelog.d/bump_zlib_rs_aarch64_checksum.fix.md b/changelog.d/bump_zlib_rs_aarch64_checksum.fix.md
new file mode 100644
index 0000000000000..d5dc19c41b788
--- /dev/null
+++ b/changelog.d/bump_zlib_rs_aarch64_checksum.fix.md
@@ -0,0 +1,3 @@
+Updated the zlib backend (`zlib-rs`) from 0.6.0 to 0.6.6, pulling in an upstream fix for an aarch64 NEON Adler-32 bug that could produce incorrect checksums. On arm64, valid zlib-format (RFC 1950) payloads, such as `deflate` content-encoding handled by HTTP-based sources, could previously be rejected as corrupt with an `incorrect data check` error.
+
+authors: Stunned1