Ubuntu 21.10: USN-5378-1 Moderate: Gzip File Overwrite Risk

ubuntu

April 13, 2022

Gzip could be made to overwrite arbitrary files.

Summary

Gzip could be made to overwrite arbitrary files.

Software Description:

- gzip: GNU compression utilities

Details:

Cleemy Desu Wayo discovered that Gzip incorrectly handled certain

filenames. If a user or automated system were tricked into performing zgrep

operations with specially crafted filenames, a remote attacker could

overwrite arbitrary files.

Topics Covered

security advisory file overwrite ubuntu gzip arbitrary file

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  gzip                            1.10-4ubuntu1.1

Ubuntu 20.04 LTS:
  gzip                            1.10-0ubuntu4.1

Ubuntu 18.04 LTS:
  gzip                            1.6-5ubuntu1.2

In general, a standard system update will make all the necessary changes.