SUSE-SU-2022:1617-1

Details

Description of the patch:

This update for gzip fixes the following issues:

CVE-2022-1271: Fix escaping of malicious filenames. (bsc#1198062)

Affected Packages

gzip

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise Desktop 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

1.10-150200.10.1

References

ADVISORY

https://bugzilla.suse.com/1198062

ADVISORY

https://bugzilla.suse.com/1198922

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-May/010979.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-1271/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20221617-1/