High ELSA-2022-4940 1 CVE

Important: xz security update (Oracle Linux 9)

Published Jun 30, 2022 · Updated Jun 30, 2022

Ecosystem: Oracle Linux

Summary

[5.2.5-8]
- Fix arbitrary file write vulnerability
Resolves: CVE-2022-1271

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	xz	0:5.2.5-8.el9_0
Oracle Linux · 9	xz-devel	0:5.2.5-8.el9_0
Oracle Linux · 9	xz-libs	0:5.2.5-8.el9_0
Oracle Linux · 9	xz-lzma-compat	0:5.2.5-8.el9_0

Vulnerabilities 1

High 8.8

CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…

gzip xz xz-utils gzip Debian Ubuntu Azure Linux Alpine

Aug 31, 2022