Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

Scientific Linux SL7 SLSA-2022-5052-1 Critical: Gzip File Write

Calendar Jun 15, 2022 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory critical security fix gzip file write Scientific Linux xz
gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 xz-5.2.2-2.el7_9.x86_64.rpm xz-debuginfo-5.2.2-2.el7_9.i686.rpm xz-debuginfo-5.2.2-2.el7_9.x86_64.rpm xz-libs-5.2.2-2.el7_9.i686.rpm xz-libs-5.2.2-2.el7_9.x8 [More...] 
Synopsis:          Important: xz security update
Advisory ID:       SLSA-2022:5052-1
Issue Date:        2022-06-15
CVE Numbers:       CVE-2022-1271
--

Security Fix(es):

* gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
--

SL7
  x86_64
    xz-5.2.2-2.el7_9.x86_64.rpm
    xz-debuginfo-5.2.2-2.el7_9.i686.rpm
    xz-debuginfo-5.2.2-2.el7_9.x86_64.rpm
    xz-libs-5.2.2-2.el7_9.i686.rpm
    xz-libs-5.2.2-2.el7_9.x86_64.rpm
    xz-compat-libs-5.2.2-2.el7_9.i686.rpm
    xz-compat-libs-5.2.2-2.el7_9.x86_64.rpm
    xz-devel-5.2.2-2.el7_9.i686.rpm
    xz-devel-5.2.2-2.el7_9.x86_64.rpm
    xz-lzma-compat-5.2.2-2.el7_9.x86_64.rpm

- Scientific Linux Development Team