Lucene search
RedHatRHSA-2022:4992HistoryJun 13, 2022 - 7:15 a.m.
(RHSA-2022:4992) Important: xz security update
2022-06-1307:15:56
access.redhat.com
173
0.007 Low
EPSS
Percentile
80.6%
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
- gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | x86_64 | xz-debugsource | < 5.2.4-4.el8_2 | xz-debugsource-5.2.4-4.el8_2.x86_64.rpm |
| RedHat | 8 | x86_64 | xz-libs-debuginfo | < 5.2.4-4.el8_2 | xz-libs-debuginfo-5.2.4-4.el8_2.x86_64.rpm |
| RedHat | 8 | x86_64 | xz | < 5.2.4-4.el8_2 | xz-5.2.4-4.el8_2.x86_64.rpm |
| RedHat | 8 | ppc64le | xz-devel | < 5.2.4-4.el8_2 | xz-devel-5.2.4-4.el8_2.ppc64le.rpm |
| RedHat | 8 | ppc64le | xz | < 5.2.4-4.el8_2 | xz-5.2.4-4.el8_2.ppc64le.rpm |
| RedHat | 8 | aarch64 | xz-libs | < 5.2.4-4.el8_2 | xz-libs-5.2.4-4.el8_2.aarch64.rpm |
| RedHat | 8 | x86_64 | xz-devel | < 5.2.4-4.el8_2 | xz-devel-5.2.4-4.el8_2.x86_64.rpm |
| RedHat | 8 | s390x | xz-libs | < 5.2.4-4.el8_2 | xz-libs-5.2.4-4.el8_2.s390x.rpm |
| RedHat | 8 | x86_64 | xz-libs | < 5.2.4-4.el8_2 | xz-libs-5.2.4-4.el8_2.x86_64.rpm |
| RedHat | 8 | s390x | xz-libs-debuginfo | < 5.2.4-4.el8_2 | xz-libs-debuginfo-5.2.4-4.el8_2.s390x.rpm |
Related
ubuntu
ubuntu
Gzip vulnerability
2022-04-13 00:00:00
Gzip vulnerability
2022-04-13 00:00:00
XZ Utils vulnerability
2022-04-13 00:00:00
freebsd
freebsd
zgrep -- arbitrary file write
2022-04-07 00:00:00
veracode
veracode
Remote Code Execution
2022-04-10 10:33:43
oraclelinux
oraclelinux
xz security update
2022-06-13 00:00:00
xz security update
2022-06-30 00:00:00
xz security update
2022-06-15 00:00:00
ubuntucve
ubuntucve
CVE-2022-1271
2022-04-07 00:00:00
osv
osv
gzip - security update
2022-04-10 00:00:00
Important: xz security update
2022-06-13 07:15:31
Important: gzip security update
2022-04-26 09:54:04
rocky
rocky
gzip security update
2022-05-17 22:32:54
xz security update
2022-06-13 07:15:31
gzip security update
2022-04-26 09:54:04
almalinux
almalinux
Important: xz security update
2022-06-13 00:00:00
Important: xz security update
2022-06-08 00:00:00
Important: gzip security update
2022-04-26 09:54:04
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1275-1)
2022-04-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1674-1)
2022-05-17 00:00:00
Huawei EulerOS: Security Advisory for xz (EulerOS-SA-2022-2149)
2022-07-29 00:00:00
nessus
nessus
Debian DSA-5122-1 : gzip - security update
2022-04-19 00:00:00
Scientific Linux Security Update : xz on SL7.x i686/x86_64 (2022:5052)
2022-06-16 00:00:00
Amazon Linux AMI : xz (ALAS-2022-1598)
2022-06-10 00:00:00
amazon
amazon
Important: gzip, xz
2022-04-25 22:56:00
Important: gzip
2022-05-31 23:47:00
Important: xz
2022-05-31 23:47:00
fedora
fedora
[SECURITY] Fedora 36 Update: xz-5.2.5-9.fc36
2022-05-02 19:43:52
[SECURITY] Fedora 35 Update: gzip-1.10-6.fc35
2022-04-20 19:13:37
[SECURITY] Fedora 35 Update: xz-5.2.5-9.fc35
2022-04-21 21:22:38
redhat
redhat
(RHSA-2022:4940) Important: xz security update
2022-06-08 08:20:11
(RHSA-2022:4582) Important: gzip security update
2022-05-17 22:32:54
(RHSA-2022:4994) Important: xz security update
2022-06-13 07:16:53
slackware
slackware
[slackware-security] gzip
2022-04-14 21:21:03
[slackware-security] xz
2022-04-14 21:21:34
ibm
ibm
cloudfoundry
cloudfoundry
USN-5378-2: XZ Utils vulnerability | Cloud Foundry
2022-05-23 00:00:00
USN-5378-1: Gzip vulnerability | Cloud Foundry
2022-05-23 00:00:00
redos
redos
ROS-20220516-02
2022-05-16 00:00:00
centos
centos
xz security update
2022-08-02 19:22:54
altlinux
altlinux
Security fix for the ALT Linux 10 package gzip version 1.12-alt1
2022-04-11 00:00:00
Security fix for the ALT Linux 9 package gzip version 1.10-alt1.p9.1
2023-04-10 00:00:00
suse
suse
Security update for xz (important)
2022-04-12 00:00:00
Security update for gzip (important)
2022-05-10 00:00:00
zdi
zdi
archlinux
archlinux
[ASA-202204-8] xz: arbitrary command execution
2022-04-07 00:00:00
debian
debian
[SECURITY] [DSA 5123-1] xz-utils security update
2022-04-18 19:36:12
[SECURITY] [DSA 5122-1] gzip security update
2022-04-18 19:31:16
[SECURITY] [DLA 2976-1] gzip security update
2022-04-10 13:01:05
alpinelinux
alpinelinux
CVE-2022-1271
2022-08-31 16:15:09
debiancve
debiancve
CVE-2022-1271
2022-08-31 16:15:09
cvelist
cvelist
CVE-2022-1271
2022-08-31 15:33:00
cloudlinux
cloudlinux
Fixed CVE-2022-1271 in gzip
2022-05-20 00:06:18
rosalinux
rosalinux
Advisory ROSA-SA-2023-2301
2023-12-05 10:33:39
f5
f5
K000130546 : Gzip vulnerability CVE-2022-1271
2023-01-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-1271 affecting package gzip 1.9-5
2022-09-17 05:56:35
redhatcve
redhatcve
CVE-2022-1271
2022-04-08 08:27:59
gentoo
gentoo
GNU Gzip, XZ Utils: Arbitrary file write
2022-09-07 00:00:00
nvd
nvd
CVE-2022-1271
2022-08-31 16:15:09
prion
prion
Input validation
2022-08-31 16:15:00
mageia
mageia
Updated gzip/xz packages fix security vulnerability
2022-04-23 20:22:42