Description
Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | QATzip software maintained by Intel(R) | before version 1.0.9 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | qatzip +2 | 1.0.9-1.el9 | RHBA-2022:8256 |
| RHEL 8 | qatzip +2 | 1.0.9-1.el8 | RHBA-2022:7667 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.0 EUS | qatzip +2 | 1.1.2-1.el9_0 | RHSA-2023:1976 |
| RHEL 8.6 EUS | qatzip +2 | 1.1.2-1.el8_6 | RHSA-2023:3397 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | qatzip +2 | 1.0.9-1.el9 | ALBA-2022:8256 |
| AlmaLinux 8 | qatzip +2 | 1.0.9-1.el8 | ALBA-2022:7667 |
Advisories 7
- ALBA-2022:8256 Important: qatzip bug fix and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALBA-2022:7667 Important: qatzip bug fix and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:1976 Red Hat Security Advisory: qatzip security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2023:3397 Red Hat Security Advisory: qatzip security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHBA-2022:7667 Red Hat Bug Fix Advisory: qatzip bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHBA-2022:8256 Red Hat Bug Fix Advisory: qatzip bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- WID-SEC-2023-1078 Red Hat Enterprise Linux: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · May 31, 2023