Format: 1.8
Date: Fri, 08 Apr 2022 06:53:06 -0400
Source: gzip
Binary: gzip gzip-win32
Built-For-Profiles: noudeb
Architecture: amd64 all
Version: 1.10-4ubuntu4
Distribution: jammy-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@ubuntu>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gzip       - GNU compression utilities
 gzip-win32 - GNU compression utility (win32 build)
Changes:
 gzip (1.10-4ubuntu4) jammy; urgency=medium
 .
   * SECURITY UPDATE: arbitrary file override with crafted file names
     - debian/patches/CVE-2022-1271-1.patch: avoid exploit via multi-newline
       file names in zgrep.in.
     - debian/patches/CVE-2022-1271-2.patch: add test in tests/Makefile.am,
       tests/zgrep-abuse.
     - debian/patches/CVE-2022-1271-3.patch: port to POSIX sed in zgrep.in.
     - debian/patches/CVE-2022-1271-4.patch: optimize out a grep in
       gzexe.in.
     - debian/patches/CVE-2022-1271-5.patch: use C locale more often in
       gzexe.in, sample/zfile, zdiff.in, zgrep.in, znew.in.
     - debian/patches/CVE-2022-1271-6.patch: fix "binary file matches"
       mislabeling in tests/Makefile.am, tests/zgrep-binary, zgrep.in.
     - debian/rules: fix permissions on new test scripts.
     - CVE-2022-1271
Checksums-Sha1:
 491210f04a7307bf1a5e75211d10eba445f0d550 107760 gzip-dbgsym_1.10-4ubuntu4_amd64.ddeb
 53479cf4df71af235db6444c095abbbc6511c6f9 104028 gzip-win32_1.10-4ubuntu4_all.deb
 a234c52760814ee16f384daf5dc4bf24eb7b059f 7592 gzip_1.10-4ubuntu4_amd64.buildinfo
 2ce815a5c84e3fd08503e3807cc7b48d6caab1fb 95986 gzip_1.10-4ubuntu4_amd64.deb
Checksums-Sha256:
 c65f3bb2013656614b37b929f58a5b8158f37632801b01d121b84164e875db6e 107760 gzip-dbgsym_1.10-4ubuntu4_amd64.ddeb
 d2d6859a3416b2e11d4d247c8881b2bf63e558795ddd7581eee155e18886187d 104028 gzip-win32_1.10-4ubuntu4_all.deb
 9a61770ee847bccd2eed56668e1d3231b515b93c8e14c0ff32a471b390d6f7b2 7592 gzip_1.10-4ubuntu4_amd64.buildinfo
 6d20eef7ea5fdb1e678dc650e5e1068d6d1a09a74274d3f22481c9c9be7a2335 95986 gzip_1.10-4ubuntu4_amd64.deb
Files:
 da50e7e18f353f7f38866c31bcf954e5 107760 debug optional gzip-dbgsym_1.10-4ubuntu4_amd64.ddeb
 bc2d6b677d12c6ecd32d5fbaf03266ce 104028 utils optional gzip-win32_1.10-4ubuntu4_all.deb
 fbb76027b81034e47f8d8b10d11ffc05 7592 utils required gzip_1.10-4ubuntu4_amd64.buildinfo
 570ac7ff68a1d2f9f8abcca461fe15ed 95986 utils required gzip_1.10-4ubuntu4_amd64.deb
Original-Maintainer: Milan Kupcevic <milan@debian.org>