Ubuntu
xz-utils package

Change logs for xz-utils source package in Kinetic

  1. Kinetic (22.10)
  2. Change log 
  • xz-utils (5.2.5-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * xzgrep: Fix escaping of malicious filenames (ZDI-CAN-16587)
    (CVE-2022-1271) (Closes: #1009167)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 10 Apr 2022 13:31:29 +0200
  • xz-utils (5.2.5-2ubuntu1) jammy; urgency=medium

  * SECURITY UPDATE: arbitrary file overwrite or code execution with
    crafted file names
    - debian/patches/CVE-2022-1271.patch: fix escaping of malicious
      filenames in src/scripts/xzgrep.in.
    - CVE-2022-1271

 -- Marc Deslauriers <email address hidden>  Fri, 08 Apr 2022 08:51:38 -0400