Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8: 2022-0149 Critical: gzip/xz Arbitrary File Write Threat

mageia
Calendar Grey April 23, 2022
Dist Mageia Esm H88
Mageia 2022-0150 reveals essential patches for tar and bzip2 tackling potential code execution vulnerabilities on Mageia 8.
zgrep, xzgrep: arbitrary-file-write vulnerability

Summary

zgrep, xzgrep: arbitrary-file-write vulnerability. (CVE-2022-1271)

References

- https://bugs.mageia.org/show_bug.cgi?id=30261

- https://www.openwall.com/lists/oss-security/2022/04/08/3

- https://lists.debian.org/debian-lts-announce/2022/04/msg00007.html

- https://lists.debian.org/debian-lts-announce/2022/04/msg00008.html

- https://ubuntu.com/security/notices/USN-5378-1

- https://ubuntu.com/security/notices/USN-5378-2

- https://lists.debian.org/debian-security-announce/2022/msg00090.html

- https://lists.debian.org/debian-security-announce/2022/msg00091.html

- https://www.cve.org/CVERecord?id=CVE-2022-1271

Topics%20covered

Topics Covered

security advisory update critical gzip arbitrary file write Mageia xz

Resolution

SRPMS

- 8/core/gzip-1.10-4.1.mga8

- 8/core/xz-5.2.5-2.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 23 Apr 2022
URL: https://advisories.mageia.org/MGASA-2022-0149.html
Type: security
CVE: CVE-2022-1271

Topics%20covered

Topics Covered

security advisory update critical gzip arbitrary file write Mageia xz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here