High ELSA-2022-5052 1 CVE

Important: xz security update (Oracle Linux 7)

Published Jun 15, 2022 · Updated Jun 15, 2022

Ecosystem: Oracle Linux

Summary

[5.2.2-2]
- Fix CVE-2022-1271
Resolves: CVE-2022-1271

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 7	xz	0:5.2.2-2.el7_9
Oracle Linux · 7	xz-compat-libs	0:5.2.2-2.el7_9
Oracle Linux · 7	xz-devel	0:5.2.2-2.el7_9
Oracle Linux · 7	xz-libs	0:5.2.2-2.el7_9
Oracle Linux · 7	xz-lzma-compat	0:5.2.2-2.el7_9

Vulnerabilities 1

High 8.8

CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's ch…

gzip xz xz-utils gzip Debian Ubuntu Azure Linux Alpine

Aug 31, 2022