stable

gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

FEDORA-2022-6b512ae9e5 created by jamartis 2 years ago for Fedora 34

zgrep applied to a crafted file name with two or more newlines can no longer overwrite an arbitrary, attacker-selected file.

reproducer:

 $ touch foo.gz
 $ echo foo | gzip > "$(printf '|\n;e touch pwned\n#.gz')"
 $ zgrep foo *.gz

(the unfixed version of zgrep creates the file called pwned)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-6b512ae9e5

This update has been submitted for testing by jamartis.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

jamartis edited this update.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago
karma

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
2 years ago
in testing
2 years ago
in stable
2 years ago
modified
2 years ago

Automated Test Results