SUSE-SU-2022:14938-1

UNKNOWN

Security update for xz

Published Apr 12, 2022

Modified 3 years ago

Fix available

Details

This update for xz fixes the following issues:

CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

Affected Packages

liblzma5

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

5.0.3-0.12.7.1

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

5.0.3-0.12.7.1

xz-lang

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

5.0.3-0.12.7.1

liblzma5-32bit

SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

5.0.3-0.12.7.1

References

Upstream

Ecosystems

Timeline

PublishedApr 12, 2022

ModifiedApr 12, 2022