Every CVE Search/ Get API key

CVE-2022-1271

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is...

8.8 HighFix available

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

5.55%Up 4.3 points since Sep 1, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
CVE-2022-1271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-179, CWE-20
Updated
2026-11-02
CVE List 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
CVE-2022-1271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-179
Updated
2026-11-02
EUVDEUVD-2022-24604 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
EUVD-2022-24604
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jrpw-543v-8r62 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is...

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
GHSA-jrpw-543v-8r62
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20, CWE-179
Updated
2026-11-02
OSVALPINE-CVE-2022-1271 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
ALPINE-CVE-2022-1271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-10819 8.8

CVE-2022-1271 affecting package gzip for versions less than 1.12-1

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
AZL-10819
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 44 moreShow less
OSVBELL-CVE-2022-1271 8.8

CVE-2022-1271 does not affect BellSoft software

Record
BELL-CVE-2022-1271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
CVE-2022-1271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-179
Updated
2026-11-02
OSVDEBIAN-CVE-2022-1271 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
DEBIAN-CVE-2022-1271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVJLSEC-2026-61 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
JLSEC-2026-61
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-1629 7.1

gzip security update

gzip is a single-file/stream lossless data compression utility, where the resulting compressed file generally has the suffix .gz.

Security Fix(es):

The vulnerability exists due to insufficient validation when handling filenames with two or more newlines. A remote attacker can force zgrep or xzgrep to write arbitrary files on the system. The vulnerability allows a remote attacker to compromise an affected system.(CVE-2022-1271)

Record
OESA-2022-1629
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-1650 7.1

xz security update

XZ Utils is free general-purpose data compression software with a high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils. The core of the XZ Utils compression code is based on LZMA SDK, but it has been modified quite a lot to be suitable for XZ Utils. The primary compression algorithm is currently LZMA2, which is used inside the .xz container format. With typical files, XZ Utils create 30% smaller output than gzip and 15% smaller output than bzip2.

Security Fix(es):

The vulnerability exists due to insufficient validation when handling filenames with two or more newlines. A remote attacker can force zgrep or xzgrep to write arbitrary files on the system. The vulnerability allows a remote attacker to compromise an affected system.(CVE-2022-1271)

Record
OESA-2022-1650
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1537 8.8

Red Hat Security Advisory: gzip security update

Record
RHSA-2022:1537
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1592 8.8

Red Hat Security Advisory: gzip security update

Record
RHSA-2022:1592
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1665 8.8

Red Hat Security Advisory: gzip security update

Record
RHSA-2022:1665
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:1676 8.8

Red Hat Security Advisory: gzip security update

Record
RHSA-2022:1676
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:2191 8.8

Red Hat Security Advisory: gzip security update

Record
RHSA-2022:2191
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4582 8.8

Red Hat Security Advisory: gzip security update

Record
RHSA-2022:4582
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4896 8.8

Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0]

Record
RHSA-2022:4896
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4940 8.8

Red Hat Security Advisory: xz security update

Record
RHSA-2022:4940
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4991 8.8

Red Hat Security Advisory: xz security update

Record
RHSA-2022:4991
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4992 8.8

Red Hat Security Advisory: xz security update

Record
RHSA-2022:4992
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4993 8.8

Red Hat Security Advisory: xz security update

Record
RHSA-2022:4993
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4994 8.8

Red Hat Security Advisory: xz security update

Record
RHSA-2022:4994
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:5052 8.8

Red Hat Security Advisory: xz security update

Record
RHSA-2022:5052
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:5439 8.8

Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.23

Record
RHSA-2022:5439
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:1537 8.8

Important: gzip security update

The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times.

Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:1537
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:4582 8.8

Important: gzip security update

The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times.

Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:4582
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:4940 8.8

Important: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.

Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:4940
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:4991 8.8

Important: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.

Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:4991
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-1271 8.8

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Record
UBUNTU-CVE-2022-1271
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2022:1537 No score

Important: gzip security update

The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times.

Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:1537
Updated
2026-11-02
OSVALSA-2022:4940 No score

Important: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:4940
Updated
2026-11-02
OSVALSA-2022:4991 No score

Important: xz security update

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short. Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:4991
Updated
2026-11-02
OSVCLSA-2022-1652706322 No score

Fix CVE(s): CVE-2022-1271

  • SECURITY UPDATE: arbitrary file override with crafted file names
    • debian/patches/CVE-2022-1271-1.patch: avoid exploit via multi-newline file names in zgrep.in.
    • debian/patches/CVE-2022-1271-2.patch: add test in tests/Makefile.am, tests/zgrep-abuse.
    • debian/patches/CVE-2022-1271-3.patch: port to POSIX sed in zgrep.in.
    • debian/patches/CVE-2022-1271-4.patch: optimize out a grep in gzexe.in.
    • debian/patches/CVE-2022-1271-5.patch: use C locale more often in gzexe.in, sample/zfile, zdiff.in, zgrep.in, znew.in.
    • debian/patches/CVE-2022-1271-6.patch: fix "binary file matches" mislabeling in tests/Makefile.am, tests/zgrep-binary, zgrep.in.
    • debian/rules: fix permissions on new test scripts.
    • CVE-2022-1271
Record
CLSA-2022-1652706322
Updated
2026-11-02
OSVCLSA-2022-1652801011 No score

Fix CVE(s): CVE-2022-1271

  • SECURITY UPDATE: arbitrary file overwrite or code execution with crafted file names
    • debian/patches/CVE-2022-1271.patch: fix escaping of malicious filenames in src/scripts/xzgrep.in.
    • CVE-2022-1271
Record
CLSA-2022-1652801011
Updated
2026-11-02
OSVCLSA-2022-1652801052 No score

Fixed CVE-2022-1271 in gzip

  • CVE-2022-1271: Fix arbitrary file override with crafted file names
Record
CLSA-2022-1652801052
Updated
2026-11-02
OSVCLSA-2022-1652801135 No score

Fixed CVE-2022-1271 in gzip

  • CVE-2022-1271: Fix arbitrary file override with crafted file names
Record
CLSA-2022-1652801135
Updated
2026-11-02
OSVCLSA-2022-1652986585 No score

Fixed CVE-2022-1271 in gzip

  • CVE-2022-1271: Fix arbitrary file override with crafted file names
Record
CLSA-2022-1652986585
Updated
2026-11-02
OSVCLSA-2022-1653005178 No score

Fixed CVE-2022-1271 in gzip

  • CVE-2022-1271: Fix arbitrary file override with crafted file names
Record
CLSA-2022-1653005178
Updated
2026-11-02
OSVCLSA-2022-1668546739 No score

xz: Fix of CVE-2022-1271

  • CVE-2022-1271: Fix arbitrary file write vulnerability in xzgrep utility
Record
CLSA-2022-1668546739
Updated
2026-11-02
OSVCLSA-2022-1668547209 No score

xz: Fix of CVE-2022-1271

  • CVE-2022-1271: Fix arbitrary file write vulnerability in xzgrep utility
Record
CLSA-2022-1668547209
Updated
2026-11-02
OSVMGASA-2022-0149 No score

Updated gzip/xz packages fix security vulnerability

zgrep, xzgrep: arbitrary-file-write vulnerability. (CVE-2022-1271)

Record
MGASA-2022-0149
Updated
2026-11-02
OSVopenSUSE-SU-2024:11987-1 No score

apache2-mod_apparmor-3.0.4-4.1 on GA media

These are all security issues fixed in the apache2-mod_apparmor-3.0.4-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11987-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11992-1 No score

gzip-1.12-1.1 on GA media

These are all security issues fixed in the gzip-1.12-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11992-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12271-1 No score

liblzma5-32bit-5.2.6-1.1 on GA media

These are all security issues fixed in the liblzma5-32bit-5.2.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12271-1
Updated
2026-11-02
OSVSUSE-SU-2022:1158-1 No score

Security update for xz

This update for xz fixes the following issues:

  • CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
Record
SUSE-SU-2022:1158-1
Updated
2026-11-02
OSVSUSE-SU-2022:1160-1 No score

Security update for xz

This update for xz fixes the following issues:

  • CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
Record
SUSE-SU-2022:1160-1
Updated
2026-11-02
OSVSUSE-SU-2022:1250-1 No score

Security update for gzip

This update for gzip fixes the following issues:

  • CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

The following non-security bugs were fixed:

  • Fixed an issue when 'gzexe' counts the lines to skip wrong. (bsc#1180713)
  • Fixed a potential segfault when zlib acceleration is enabled (bsc#1177047)
Record
SUSE-SU-2022:1250-1
Updated
2026-11-02
OSVSUSE-SU-2022:1272-1 No score

Security update for gzip

This update for gzip fixes the following issues:

  • CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
Record
SUSE-SU-2022:1272-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gzip
Alpine:v3.12
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.13
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.14
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.15
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.16
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.17
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.18
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.19
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.20
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.21
 before 1.12-r0
1.12-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
gzip
Alpine:v3.22
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.23
 before 1.12-r0
1.12-r0
gzip
Alpine:v3.24
 before 1.12-r0
1.12-r0
xz
Alpine:v3.12
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.13
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.14
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.15
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.16
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.17
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.18
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.19
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.20
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.21
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.22
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.23
 before 5.2.5-r1
5.2.5-r1
xz
Alpine:v3.24
 before 5.2.5-r1
5.2.5-r1
gzip
AlmaLinux:8
 before 1.9-13.el8_5
1.9-13.el8_5
xz
AlmaLinux:9
 before 5.2.5-8.el9_0
5.2.5-8.el9_0
xz-devel
AlmaLinux:9
 before 5.2.5-8.el9_0
5.2.5-8.el9_0
xz-libs
AlmaLinux:9
 before 5.2.5-8.el9_0
5.2.5-8.el9_0
xz-lzma-compat
AlmaLinux:9
 before 5.2.5-8.el9_0
5.2.5-8.el9_0
xz
AlmaLinux:8
 before 5.2.4-4.el8_6
5.2.4-4.el8_6
xz-devel
AlmaLinux:8
 before 5.2.4-4.el8_6
5.2.4-4.el8_6
xz-libs
AlmaLinux:8
 before 5.2.4-4.el8_6
5.2.4-4.el8_6
xz-lzma-compat
AlmaLinux:8
 before 5.2.4-4.el8_6
5.2.4-4.el8_6
gzip
Azure Linux:2
 before 1.12-1
1.12-1
gzip
TuxCare:Ubuntu:16.04
 before 1.6-4ubuntu1+tuxcare.els1
1.6-4ubuntu1+tuxcare.els1
liblzma-dev
TuxCare:Ubuntu:16.04
 before 5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
liblzma-doc
TuxCare:Ubuntu:16.04
 before 5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
liblzma5
TuxCare:Ubuntu:16.04
 before 5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
xz-utils
TuxCare:Ubuntu:16.04
 before 5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
xzdec
TuxCare:Ubuntu:16.04
 before 5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
5.1.1alpha+20120614-2ubuntu2+tuxcare.els1
gzip
TuxCare:CentOS:8.4
 before 1.9-12.el8.tuxcare.els1
1.9-12.el8.tuxcare.els1
gzip
TuxCare:CentOS:8.5
 before 1.9-12.el8.tuxcare.els1
1.9-12.el8.tuxcare.els1
gzip
TuxCare:OracleLinux:6
 before 1.3.12-24.el6.tuxcare.els1
1.3.12-24.el6.tuxcare.els1
gzip
TuxCare:CentOS:6
 before 1.3.12-24.el6.tuxcare.els1
1.3.12-24.el6.tuxcare.els1
xz
TuxCare:CentOS:8.5
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-devel
TuxCare:CentOS:8.5
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-libs
TuxCare:CentOS:8.5
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-lzma-compat
TuxCare:CentOS:8.5
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-static
TuxCare:CentOS:8.5
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz
TuxCare:CentOS:8.4
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-devel
TuxCare:CentOS:8.4
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-libs
TuxCare:CentOS:8.4
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-lzma-compat
TuxCare:CentOS:8.4
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
xz-static
TuxCare:CentOS:8.4
 before 5.2.4-3.el8.tuxcare.els1
5.2.4-3.el8.tuxcare.els1
gzip
Debian:12
 before 1.12-1
1.12-1
gzip
Debian:13
 before 1.12-1
1.12-1
gzip
Debian:14
 before 1.12-1
1.12-1
xz-utils
Debian:12
 before 5.2.5-2.1
5.2.5-2.1
xz-utils
Debian:13
 before 5.2.5-2.1
5.2.5-2.1
xz-utils
Debian:14
 before 5.2.5-2.1
5.2.5-2.1
gzip
Debian:9
 before 1.6-5+deb9u1, plus listed versions
1.6-5
1.6-5+deb9u1
xz-utils
Debian:9
 before 5.2.2-1.2+deb9u1, plus listed versions
5.2.2-1.2
5.2.2-1.2+deb9u1
gzip
Debian:10
 before 1.9-3+deb10u1, plus listed versions
1.9-3
1.9-3+deb10u1
gzip
Debian:11
 before 1.10-4+deb11u1, plus listed versions
1.10-4
1.10-4+deb11u1
xz-utils
Debian:10
 before 5.2.4-1+deb10u1, plus listed versions
5.2.4-1
5.2.4-1+deb10u1
xz-utils
Debian:11
 before 5.2.5-2.1~deb11u1, plus listed versions
5.2.5-2
5.2.5-2.1~deb11u1
Gzip_jll
Julia
 before 1.12.0+0
1.12.0+0
XZ_jll
Julia
 before 5.2.5+0
5.2.5+0
gzip
Mageia:8
 before 1.10-4.1.mga8
1.10-4.1.mga8
xz
Mageia:8
 before 5.2.5-2.1.mga8
5.2.5-2.1.mga8
gzip
openEuler:20.03-LTS-SP1
 before 1.10-3.oe1
1.10-3.oe1
gzip
openEuler:20.03-LTS-SP3
 before 1.10-3.oe1
1.10-3.oe1
gzip
openEuler:22.03-LTS
 before 1.11-3.oe2203
1.11-3.oe2203
xz
openEuler:20.03-LTS-SP1
 before 5.2.5-2.oe1
5.2.5-2.oe1
xz
openEuler:20.03-LTS-SP3
 before 5.2.5-2.oe1
5.2.5-2.oe1
xz
openEuler:22.03-LTS
 before 5.2.5-2.oe2203
5.2.5-2.oe2203
gzip
Red Hat:enterprise_linux:8::baseos
 before 0:1.9-13.el8_5
0:1.9-13.el8_5
gzip-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.9-13.el8_5
0:1.9-13.el8_5
gzip-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.9-13.el8_5
0:1.9-13.el8_5
gzip
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.9-10.el8_1
0:1.9-10.el8_1
gzip-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.9-10.el8_1
0:1.9-10.el8_1
gzip-debugsource
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.9-10.el8_1
0:1.9-10.el8_1
gzip
Red Hat:rhel_eus:8.2::baseos
 before 0:1.9-10.el8_2
0:1.9-10.el8_2
gzip-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.9-10.el8_2
0:1.9-10.el8_2
gzip-debugsource
Red Hat:rhel_eus:8.2::baseos
 before 0:1.9-10.el8_2
0:1.9-10.el8_2
gzip
Red Hat:rhel_eus:8.4::baseos
 before 0:1.9-13.el8_4
0:1.9-13.el8_4
gzip-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:1.9-13.el8_4
0:1.9-13.el8_4
gzip-debugsource
Red Hat:rhel_eus:8.4::baseos
 before 0:1.9-13.el8_4
0:1.9-13.el8_4
gzip
Red Hat:enterprise_linux:7::client
 before 0:1.5-11.el7_9
0:1.5-11.el7_9
gzip-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.5-11.el7_9
0:1.5-11.el7_9
gzip
Red Hat:enterprise_linux:7::server
 before 0:1.5-11.el7_9
0:1.5-11.el7_9
gzip-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.5-11.el7_9
0:1.5-11.el7_9
gzip
Red Hat:enterprise_linux:7::workstation
 before 0:1.5-11.el7_9
0:1.5-11.el7_9
gzip-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.5-11.el7_9
0:1.5-11.el7_9
gzip
Red Hat:enterprise_linux:9::baseos
 before 0:1.10-9.el9_0
0:1.10-9.el9_0
gzip-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.10-9.el9_0
0:1.10-9.el9_0
gzip-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:1.10-9.el9_0
0:1.10-9.el9_0
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 7 CVEs
 before 0:4.5.0-202205291010_8.6
0:4.5.0-202205291010_8.6
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 7 CVEs
 before 0:4.5.0-202205291010_8.6
0:4.5.0-202205291010_8.6
xz-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-devel
Red Hat:enterprise_linux:9::appstream
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-lzma-compat
Red Hat:enterprise_linux:9::appstream
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-lzma-compat-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz
Red Hat:enterprise_linux:9::baseos
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-libs
Red Hat:enterprise_linux:9::baseos
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz-lzma-compat-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz
Red Hat:enterprise_linux:8::baseos
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-devel
Red Hat:enterprise_linux:8::baseos
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-libs
Red Hat:enterprise_linux:8::baseos
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-lzma-compat-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-libs-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-lzma-compat
Red Hat:enterprise_linux:8::crb
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz-lzma-compat-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz
Red Hat:rhel_eus:8.2::baseos
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-debugsource
Red Hat:rhel_eus:8.2::baseos
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-devel
Red Hat:rhel_eus:8.2::baseos
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-libs
Red Hat:rhel_eus:8.2::baseos
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-libs-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-lzma-compat-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-debugsource
Red Hat:rhel_eus:8.2::crb
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-libs-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-lzma-compat
Red Hat:rhel_eus:8.2::crb
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz-lzma-compat-debuginfo
Red Hat:rhel_eus:8.2::crb
 before 0:5.2.4-4.el8_2
0:5.2.4-4.el8_2
xz
Red Hat:rhel_eus:8.4::baseos
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-debugsource
Red Hat:rhel_eus:8.4::baseos
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-devel
Red Hat:rhel_eus:8.4::baseos
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-libs
Red Hat:rhel_eus:8.4::baseos
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-libs-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-lzma-compat-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-debuginfo
Red Hat:rhel_eus:8.4::crb
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-debugsource
Red Hat:rhel_eus:8.4::crb
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-libs-debuginfo
Red Hat:rhel_eus:8.4::crb
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-lzma-compat
Red Hat:rhel_eus:8.4::crb
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz-lzma-compat-debuginfo
Red Hat:rhel_eus:8.4::crb
 before 0:5.2.4-4.el8_4
0:5.2.4-4.el8_4
xz
Red Hat:rhel_e4s:8.1::baseos
 before 0:5.2.4-4.el8_1
0:5.2.4-4.el8_1
xz-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:5.2.4-4.el8_1
0:5.2.4-4.el8_1
xz-debugsource
Red Hat:rhel_e4s:8.1::baseos
 before 0:5.2.4-4.el8_1
0:5.2.4-4.el8_1
xz-devel
Red Hat:rhel_e4s:8.1::baseos
 before 0:5.2.4-4.el8_1
0:5.2.4-4.el8_1
xz-libs
Red Hat:rhel_e4s:8.1::baseos
 before 0:5.2.4-4.el8_1
0:5.2.4-4.el8_1
xz-libs-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:5.2.4-4.el8_1
0:5.2.4-4.el8_1
xz-lzma-compat-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:5.2.4-4.el8_1
0:5.2.4-4.el8_1
xz
Red Hat:enterprise_linux:7::client
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-libs
Red Hat:enterprise_linux:7::client
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-compat-libs
Red Hat:enterprise_linux:7::client
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-devel
Red Hat:enterprise_linux:7::client
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-lzma-compat
Red Hat:enterprise_linux:7::client
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-compat-libs
Red Hat:enterprise_linux:7::computenode
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-devel
Red Hat:enterprise_linux:7::computenode
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-lzma-compat
Red Hat:enterprise_linux:7::computenode
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz
Red Hat:enterprise_linux:7::server
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-devel
Red Hat:enterprise_linux:7::server
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-libs
Red Hat:enterprise_linux:7::server
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-compat-libs
Red Hat:enterprise_linux:7::server
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-lzma-compat
Red Hat:enterprise_linux:7::server
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz
Red Hat:enterprise_linux:7::workstation
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-devel
Red Hat:enterprise_linux:7::workstation
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-libs
Red Hat:enterprise_linux:7::workstation
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-compat-libs
Red Hat:enterprise_linux:7::workstation
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
xz-lzma-compat
Red Hat:enterprise_linux:7::workstation
 before 0:5.2.2-2.el7_9
0:5.2.2-2.el7_9
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 5 CVEs
 before 0:4.3.23-20220622.0.el7_9
0:4.3.23-20220622.0.el7_9
gzip
Rocky Linux:8
 before 0:1.9-13.el8_5
0:1.9-13.el8_5
gzip
Rocky Linux:9
 before 0:1.10-9.el9_0
0:1.10-9.el9_0
xz
Rocky Linux:9
 before 0:5.2.5-8.el9_0
0:5.2.5-8.el9_0
xz
Rocky Linux:8
 before 0:5.2.4-4.el8_6
0:5.2.4-4.el8_6
xz
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Real Time 15 SP2
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server 15-LTSS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server for SAP Applications 15
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Manager Proxy 4.1
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Manager Retail Branch Server 4.1
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Manager Server 4.1
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Micro 5.0
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Micro 5.1
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Linux Enterprise Micro 5.2
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Enterprise Storage 6
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:Enterprise Storage 7
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
openSUSE:Leap 15.3
 before 5.2.3-150000.4.7.1
5.2.3-150000.4.7.1
xz
SUSE:HPE Helion OpenStack 8
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:OpenStack Cloud 8
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:OpenStack Cloud 9
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:OpenStack Cloud Crowbar 8
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:OpenStack Cloud Crowbar 9
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server 12 SP5
 before 5.0.5-6.7.1
5.0.5-6.7.1
xz
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 5.0.5-6.7.1
5.0.5-6.7.1
gzip
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise Server 15-LTSS
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Enterprise Storage 6
 before 1.10-150000.4.12.1
1.10-150000.4.12.1
gzip
SUSE:Linux Enterprise Server 12 SP5
 before 1.10-4.11.3
1.10-4.11.3
gzip
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.10-4.11.3
1.10-4.11.3
gzip
SUSE:HPE Helion OpenStack 8
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:OpenStack Cloud 8
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:OpenStack Cloud 9
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:OpenStack Cloud Crowbar 8
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:OpenStack Cloud Crowbar 9
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.6-9.6.2
1.6-9.6.2
gzip
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.6-9.6.2
1.6-9.6.2
xz
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 5.0.3-0.12.7.1
5.0.3-0.12.7.1
xz
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 5.0.3-0.12.7.1
5.0.3-0.12.7.1
gzip
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Real Time 15 SP2
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Manager Proxy 4.1
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Manager Retail Branch Server 4.1
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Manager Server 4.1
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Micro 5.0
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Micro 5.1
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Micro 5.2
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Enterprise Storage 7
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
openSUSE:Leap 15.3
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
openSUSE:Leap 15.4
 before 1.10-150200.10.1
1.10-150200.10.1
gzip
SUSE:Linux Enterprise Server 12 SP5
 before 1.10-4.14.1
1.10-4.14.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.10-4.14.1
1.10-4.14.1
gzip
SUSE:HPE Helion OpenStack 8
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:OpenStack Cloud 8
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:OpenStack Cloud 9
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:OpenStack Cloud Crowbar 8
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:OpenStack Cloud Crowbar 9
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.6-9.9.1
1.6-9.9.1
gzip
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise Server 15-LTSS
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
SUSE:Enterprise Storage 6
 before 1.10-150000.4.15.1
1.10-150000.4.15.1
gzip
Ubuntu:Pro:14.04:LTS
 before 1.6-3ubuntu1+esm1, plus listed versions
1.6-2ubuntu11.6-3ubuntu1
1.6-3ubuntu1+esm1
xz-utils
Ubuntu:Pro:14.04:LTS
 before 5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1, plus listed versions
5.1.1alpha+20120614-2ubuntu15.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.14.04.1+esm1
gzip
Ubuntu:Pro:16.04:LTS
 before 1.6-4ubuntu1+esm1, plus listed versions
1.6-4ubuntu1
1.6-4ubuntu1+esm1
xz-utils
Ubuntu:Pro:16.04:LTS
 before 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1, plus listed versions
5.1.1alpha+20120614-2ubuntu2
5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1
gzip
Ubuntu:18.04:LTS
 before 1.6-5ubuntu1.2, plus listed versions
1.6-5ubuntu11.6-5ubuntu1.1
1.6-5ubuntu1.2
xz-utils
Ubuntu:18.04:LTS
 before 5.2.2-1.3ubuntu0.1, plus listed versions
5.2.2-1.3
5.2.2-1.3ubuntu0.1
gzip
Ubuntu:20.04:LTS
 before 1.10-0ubuntu4.1, plus listed versions
1.10-0ubuntu31.10-0ubuntu4
1.10-0ubuntu4.1
xz-utils
Ubuntu:20.04:LTS
 before 5.2.4-1ubuntu1.1, plus listed versions
5.2.4-15.2.4-1ubuntu1
5.2.4-1ubuntu1.1
gzip
Ubuntu:22.04:LTS
 before 1.10-4ubuntu4, plus listed versions
1.10-4ubuntu11.10-4ubuntu21.10-4ubuntu3
1.10-4ubuntu4
xz-utils
Ubuntu:22.04:LTS
 before 5.2.5-2ubuntu1, plus listed versions
5.2.5-25.2.5-2build15.2.5-2build2
5.2.5-2ubuntu1
apparmor
openSUSE:Tumbleweed
 before 3.0.4-4.1
3.0.4-4.1
gzip
openSUSE:Tumbleweed
 before 1.12-1.1
1.12-1.1
xz
openSUSE:Tumbleweed
 before 5.2.6-1.1
5.2.6-1.1

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-1271 is a high vulnerability (CVSS 8.8) in Gnu Gzip, published April 7, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.55%, the 92nd percentile. Fixed in gzip 1.12-r0.

References

Show 140 moreShow less
This page doesn't list everything

Left out here: 1 package row. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 10 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open