--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2022-07cd35f6b8
2022-05-02 19:43:02.631404
--------------------------------------------------------------------------------Name        : xz
Product     : Fedora 36
Version     : 5.2.5
Release     : 9.fc36
URL         : https://tukaani.org/xz/
Summary     : LZMA compression utilities
Description :
XZ Utils are an attempt to make LZMA compression easy to use on free (as in
freedom) operating systems. This is achieved by providing tools and libraries
which are similar to use than the equivalents of the most popular existing
compression algorithms.

LZMA is a general purpose compression algorithm designed by Igor Pavlov as
part of 7-Zip. It provides high compression ratio while keeping the
decompression speed fast.

--------------------------------------------------------------------------------Update Information:

verify upstream GPG signature, fix arbitrary-file-write vulnerability
CVE-2022-1271.
--------------------------------------------------------------------------------ChangeLog:

* Sat Apr 16 2022 Todd Zullinger  - 5.2.5-9
- verify upstream GPG signature
- xzgrep: arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #2080938 - CVE-2022-1271
        https://bugzilla.redhat.com/show_bug.cgi?id=2080938
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-07cd35f6b8' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Fedora 36: xz 2022-07cd35f6b8

May 2, 2022
verify upstream GPG signature, fix arbitrary-file-write vulnerability CVE-2022-1271.

Summary

XZ Utils are an attempt to make LZMA compression easy to use on free (as in

freedom) operating systems. This is achieved by providing tools and libraries

which are similar to use than the equivalents of the most popular existing

compression algorithms.

LZMA is a general purpose compression algorithm designed by Igor Pavlov as

part of 7-Zip. It provides high compression ratio while keeping the

decompression speed fast.

verify upstream GPG signature, fix arbitrary-file-write vulnerability

CVE-2022-1271.

* Sat Apr 16 2022 Todd Zullinger - 5.2.5-9

- verify upstream GPG signature

- xzgrep: arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)

[ 1 ] Bug #2080938 - CVE-2022-1271

https://bugzilla.redhat.com/show_bug.cgi?id=2080938

su -c 'dnf upgrade --advisory FEDORA-2022-07cd35f6b8' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/keys

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

FEDORA-2022-07cd35f6b8 2022-05-02 19:43:02.631404 Product : Fedora 36 Version : 5.2.5 Release : 9.fc36 URL : https://tukaani.org/xz/ Summary : LZMA compression utilities Description : XZ Utils are an attempt to make LZMA compression easy to use on free (as in freedom) operating systems. This is achieved by providing tools and libraries which are similar to use than the equivalents of the most popular existing compression algorithms. LZMA is a general purpose compression algorithm designed by Igor Pavlov as part of 7-Zip. It provides high compression ratio while keeping the decompression speed fast. verify upstream GPG signature, fix arbitrary-file-write vulnerability CVE-2022-1271. * Sat Apr 16 2022 Todd Zullinger - 5.2.5-9 - verify upstream GPG signature - xzgrep: arbitrary-file-write vulnerability (#2073310, CVE-2022-1271) [ 1 ] Bug #2080938 - CVE-2022-1271 https://bugzilla.redhat.com/show_bug.cgi?id=2080938 su -c 'dnf upgrade --advisory FEDORA-2022-07cd35f6b8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
Product : Fedora 36
Version : 5.2.5
Release : 9.fc36
URL : https://tukaani.org/xz/
Summary : LZMA compression utilities

Related News