Ubuntu
gzip package

gzip 1.10-0ubuntu4.1 source package in Ubuntu

Changelog

gzip (1.10-0ubuntu4.1) focal-security; urgency=medium

  * SECURITY UPDATE: arbitrary file override with crafted file names
    - debian/patches/CVE-2022-1271-1.patch: avoid exploit via multi-newline
      file names in zgrep.in.
    - debian/patches/CVE-2022-1271-2.patch: add test in tests/Makefile.am,
      tests/zgrep-abuse.
    - debian/patches/CVE-2022-1271-3.patch: port to POSIX sed in zgrep.in.
    - debian/patches/CVE-2022-1271-4.patch: optimize out a grep in
      gzexe.in.
    - debian/patches/CVE-2022-1271-5.patch: use C locale more often in
      gzexe.in, sample/zfile, zdiff.in, zgrep.in, znew.in.
    - debian/patches/CVE-2022-1271-6.patch: fix "binary file matches"
      mislabeling in tests/Makefile.am, tests/zgrep-binary, zgrep.in.
    - debian/rules: fix permissions on new test scripts.
    - CVE-2022-1271

 -- Marc Deslauriers <email address hidden>  Fri, 08 Apr 2022 07:05:45 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main utils
Focal security main utils

Downloads

File Size SHA-256 Checksum
gzip_1.10.orig.tar.gz 1.1 MiB c91f74430bf7bc20402e1f657d0b252cb80aa66ba333a25704512af346633c68
gzip_1.10-0ubuntu4.1.debian.tar.xz 30.4 KiB fb22695cee4e383905899e60dc8cce5887ac86d3f7d13e2fc62c6f70c4fce1fa
gzip_1.10-0ubuntu4.1.dsc 2.1 KiB bb05930835b8de3f34abf8ccf4e6dde0162ab3ae366153c7bfecb2d62b49963d

View changes file

Binary packages built by this source

gzip: GNU compression utilities

 This package provides the standard GNU file compression utilities, which
 are also the default compression tools for Debian. They typically operate
 on files with names ending in '.gz', but can also decompress files ending
 in '.Z' created with 'compress'.

gzip-dbgsym: debug symbols for gzip
gzip-win32: GNU compression utility (win32 build)

 This is a win32 version of gzip, meant to be used by the win32-loader
 component of Debian-Installer.