Summary
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
* gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | xz | 5.2.5-8.el9_0 |
| AlmaLinux · 9 | xz-devel | 5.2.5-8.el9_0 |
| AlmaLinux · 9 | xz-libs | 5.2.5-8.el9_0 |
| AlmaLinux · 9 | xz-lzma-compat | 5.2.5-8.el9_0 |
Vulnerabilities 1
-
High 8.8
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…