Lucene search
GoogleOSV:USN-5378-3HistoryApr 13, 2022 - 2:47 p.m.
xz-utils vulnerability
2022-04-1314:47:08
Google
osv.dev
8
USN-5378-2 fixed a vulnerability in XZ Utils. This update provides
the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM.
Original advisory details:
Cleemy Desu Wayo discovered that Gzip incorrectly handled certain
filenames. If a user or automated system were tricked into performing zgrep
operations with specially crafted filenames, a remote attacker could
overwrite arbitrary files.
Related
nessus
nessus
EulerOS 2.0 SP8 : xz (EulerOS-SA-2022-1955)
2022-06-22 00:00:00
Debian DSA-5122-1 : gzip - security update
2022-04-19 00:00:00
NewStart CGSL MAIN 6.06 : gzip Vulnerability (NS-SA-2023-0081)
2023-12-27 00:00:00
amazon
amazon
Important: gzip, xz
2022-04-25 22:56:00
Important: gzip
2022-05-31 23:47:00
Important: xz
2022-05-31 23:47:00
openvas
openvas
Huawei EulerOS: Security Advisory for gzip (EulerOS-SA-2023-1258)
2023-01-31 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1275-1)
2022-04-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1674-1)
2022-05-17 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: xz-5.2.5-9.fc36
2022-05-02 19:43:52
[SECURITY] Fedora 35 Update: xz-5.2.5-9.fc35
2022-04-21 21:22:38
[SECURITY] Fedora 35 Update: gzip-1.10-6.fc35
2022-04-20 19:13:37
rocky
rocky
xz security update
2022-06-13 07:15:31
gzip security update
2022-05-17 22:32:54
gzip security update
2022-04-26 09:54:04
redhat
redhat
(RHSA-2022:4940) Important: xz security update
2022-06-08 08:20:11
(RHSA-2022:4582) Important: gzip security update
2022-05-17 22:32:54
(RHSA-2022:1537) Important: gzip security update
2022-04-26 09:54:04
osv
osv
Important: gzip security update
2022-05-17 22:32:54
gzip - security update
2022-04-10 00:00:00
Important: xz security update
2022-06-13 07:15:31
ubuntu
ubuntu
Gzip vulnerability
2022-04-13 00:00:00
Gzip vulnerability
2022-04-13 00:00:00
XZ Utils vulnerability
2022-04-13 00:00:00
almalinux
almalinux
Important: xz security update
2022-06-08 00:00:00
Important: xz security update
2022-06-13 00:00:00
Important: gzip security update
2022-04-26 09:54:04
slackware
slackware
[slackware-security] gzip
2022-04-14 21:21:03
[slackware-security] xz
2022-04-14 21:21:34
ibm
ibm
veracode
veracode
Remote Code Execution
2022-04-10 10:33:43
oraclelinux
oraclelinux
xz security update
2022-06-13 00:00:00
gzip security update
2022-06-30 00:00:00
xz security update
2022-06-30 00:00:00
ubuntucve
ubuntucve
CVE-2022-1271
2022-04-07 00:00:00
freebsd
freebsd
zgrep -- arbitrary file write
2022-04-07 00:00:00
zdi
zdi
archlinux
archlinux
[ASA-202204-8] xz: arbitrary command execution
2022-04-07 00:00:00
cloudfoundry
cloudfoundry
USN-5378-1: Gzip vulnerability | Cloud Foundry
2022-05-23 00:00:00
USN-5378-2: XZ Utils vulnerability | Cloud Foundry
2022-05-23 00:00:00
debian
debian
[SECURITY] [DSA 5123-1] xz-utils security update
2022-04-18 19:36:12
[SECURITY] [DLA 2976-1] gzip security update
2022-04-10 13:01:05
[SECURITY] [DSA 5122-1] gzip security update
2022-04-18 19:31:16
alpinelinux
alpinelinux
CVE-2022-1271
2022-08-31 16:15:09
debiancve
debiancve
CVE-2022-1271
2022-08-31 16:15:09
cvelist
cvelist
CVE-2022-1271
2022-08-31 15:33:00
redos
redos
ROS-20220516-02
2022-05-16 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package gzip version 1.12-alt1
2022-04-11 00:00:00
Security fix for the ALT Linux 9 package gzip version 1.10-alt1.p9.1
2023-04-10 00:00:00
suse
suse
Security update for xz (important)
2022-04-12 00:00:00
Security update for gzip (important)
2022-05-10 00:00:00
centos
centos
xz security update
2022-08-02 19:22:54
cloudlinux
cloudlinux
Fixed CVE-2022-1271 in gzip
2022-05-20 00:06:18
rosalinux
rosalinux
Advisory ROSA-SA-2023-2301
2023-12-05 10:33:39
f5
f5
K000130546 : Gzip vulnerability CVE-2022-1271
2023-01-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-1271 affecting package gzip 1.9-5
2022-09-17 05:56:35
redhatcve
redhatcve
CVE-2022-1271
2022-04-08 08:27:59
gentoo
gentoo
GNU Gzip, XZ Utils: Arbitrary file write
2022-09-07 00:00:00
nvd
nvd
CVE-2022-1271
2022-08-31 16:15:09
prion
prion
Input validation
2022-08-31 16:15:00
mageia
mageia
Updated gzip/xz packages fix security vulnerability
2022-04-23 20:22:42