First published: Tue May 17 2022(Updated: )
The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times.<br>Security Fix(es):<br><li> gzip: arbitrary-file-write vulnerability (CVE-2022-1271)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/gzip | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip-debuginfo | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip-debugsource | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip-debuginfo | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip-debugsource | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip-debuginfo | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip-debugsource | <1.10-9.el9_0 | 1.10-9.el9_0 |
redhat/gzip | <1.10-9.el9_0.aa | 1.10-9.el9_0.aa |
redhat/gzip-debuginfo | <1.10-9.el9_0.aa | 1.10-9.el9_0.aa |
redhat/gzip-debugsource | <1.10-9.el9_0.aa | 1.10-9.el9_0.aa |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2022:4582 is classified as 'important'.
To fix RHSA-2022:4582, update the gzip package to version 1.10-9.el9_0.
RHSA-2022:4582 affects the gzip, gzip-debuginfo, and gzip-debugsource packages.
RHSA-2022:4582 addresses an arbitrary file access vulnerability in the gzip package.
There are no known public exploits specifically targeting the vulnerability described in RHSA-2022:4582.