gzip-1.5-11.el7

エラータID: AXSA:2022-3181:02

Release date: 
Friday, May 13, 2022 - 10:38
Subject: 
gzip-1.5-11.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

The gzip packages contain the gzip (GNU zip) data compression utility. gzip is
used to compress regular files. It replaces them with files containing the .gz
extension, while retaining ownership modes, access, and modification times.

Security Fix(es):

gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE(s):
CVE-2022-1271

Solution: 

Update packages.

CVEs: 
CVE-2022-1271
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Additional Info: 

N/A

Download: 

SRPMS
  1. gzip-1.5-11.el7.src.rpm
    MD5: b572eff7b2756ee2f3c6ca4a286725cb
    SHA-256: 19750bfc10b58373018b5398cf26d753756009ba9c8e5ff496a9153b2ccbffc0
    Size: 736.04 kB

Asianux Server 7 for x86_64
  1. gzip-1.5-11.el7.x86_64.rpm
    MD5: f8cb249468c3e7c42e98ef0914df7066
    SHA-256: 8bc670ad0472fc6a2ad24003960d6b14512315e93ee9730a69336c5245289c2c
    Size: 128.77 kB