High ELSA-2022-4991 1 CVE

Important: xz security update (Oracle Linux 8)

Published Jun 13, 2022 · Updated Jun 13, 2022

Ecosystem: Oracle Linux

Summary

[5.2.4-4]
- Fix arbitrary file write vulnerability
Resolves: CVE-2022-1271

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	xz	0:5.2.4-4.el8_6
Oracle Linux · 8	xz-devel	0:5.2.4-4.el8_6
Oracle Linux · 8	xz-libs	0:5.2.4-4.el8_6
Oracle Linux · 8	xz-lzma-compat	0:5.2.4-4.el8_6

Vulnerabilities 1

High 8.8

CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…

gzip xz xz-utils gzip Debian Ubuntu Azure Linux Alpine

Aug 31, 2022