Red Hat Security AdvisoryRHSA-2022:5052
xz security update
Released 2022-06-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) xz-5.2.2-2.el7_9, xz-libs-5.2.2-2.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) xz-compat-libs-5.2.2-2.el7_9, xz-devel-5.2.2-2.el7_9, xz-lzma-compat-5.2.2-2.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xz-compat-libs-5.2.2-2.el7_9, xz-devel-5.2.2-2.el7_9, xz-lzma-compat-5.2.2-2.el7_9
- Red Hat Enterprise Linux Server (v. 7) xz-5.2.2-2.el7_9, xz-devel-5.2.2-2.el7_9, xz-devel-5.2.2-2.el7_9.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 7) xz-compat-libs-5.2.2-2.el7_9, xz-compat-libs-5.2.2-2.el7_9.ppc, xz-lzma-compat-5.2.2-2.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) xz-5.2.2-2.el7_9, xz-devel-5.2.2-2.el7_9, xz-libs-5.2.2-2.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) xz-compat-libs-5.2.2-2.el7_9, xz-lzma-compat-5.2.2-2.el7_9
Fixes 1 record
Priority MEDIUM 49
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05549 · Published 2022-08-31 · Partial fix CWE-179