Ubuntu
gzip package

gzip 1.6-5ubuntu1.2 source package in Ubuntu

Changelog

gzip (1.6-5ubuntu1.2) bionic-security; urgency=medium

  * SECURITY UPDATE: arbitrary file override with crafted file names
    - debian/patches/CVE-2022-1271-1.patch: avoid exploit via multi-newline
      file names in zgrep.in.
    - debian/patches/CVE-2022-1271-2.patch: add test in tests/Makefile.am,
      tests/zgrep-abuse.
    - debian/patches/CVE-2022-1271-3.patch: port to POSIX sed in zgrep.in.
    - debian/patches/CVE-2022-1271-4.patch: optimize out a grep in
      gzexe.in.
    - debian/patches/CVE-2022-1271-5.patch: use C locale more often in
      gzexe.in, sample/zfile, zdiff.in, zgrep.in, znew.in.
    - debian/patches/CVE-2022-1271-6.patch: fix "binary file matches"
      mislabeling in tests/Makefile.am, tests/zgrep-binary, zgrep.in.
    - debian/rules: fix permissions on new test scripts.
    - CVE-2022-1271

 -- Marc Deslauriers <email address hidden>  Fri, 08 Apr 2022 07:12:17 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main utils
Bionic security main utils

Downloads

File Size SHA-256 Checksum
gzip_1.6.orig.tar.gz 1.0 MiB 97eb83b763d9e5ad35f351fe5517e6b71521d7aac7acf3e3cacdb6b1496d8f7e
gzip_1.6-5ubuntu1.2.debian.tar.xz 19.9 KiB c5f7e753e9d000eb20fdbf476052619f4a0369d9414db4d45f39e146f6c735b5
gzip_1.6-5ubuntu1.2.dsc 2.0 KiB 9da3a1220375c5036047bcf7fd18e8ecd3d467697d66b05373bb16df9beafc27

View changes file

Binary packages built by this source

gzip: GNU compression utilities

 This package provides the standard GNU file compression utilities, which
 are also the default compression tools for Debian. They typically operate
 on files with names ending in '.gz', but can also decompress files ending
 in '.Z' created with 'compress'.

gzip-dbgsym: debug symbols for gzip
gzip-win32: GNU compression utility (win32 build)

 This is a win32 version of gzip, meant to be used by the win32-loader
 component of Debian-Installer.