Format: 1.8
Date: Fri, 08 Apr 2022 07:04:04 -0400
Source: gzip
Binary: gzip
Built-For-Profiles: noudeb
Architecture: i386
Version: 1.10-4ubuntu1.1
Distribution: impish
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@ubuntu>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 gzip       - GNU compression utilities
Changes:
 gzip (1.10-4ubuntu1.1) impish-security; urgency=medium
 .
   * SECURITY UPDATE: arbitrary file override with crafted file names
     - debian/patches/CVE-2022-1271-1.patch: avoid exploit via multi-newline
       file names in zgrep.in.
     - debian/patches/CVE-2022-1271-2.patch: add test in tests/Makefile.am,
       tests/zgrep-abuse.
     - debian/patches/CVE-2022-1271-3.patch: port to POSIX sed in zgrep.in.
     - debian/patches/CVE-2022-1271-4.patch: optimize out a grep in
       gzexe.in.
     - debian/patches/CVE-2022-1271-5.patch: use C locale more often in
       gzexe.in, sample/zfile, zdiff.in, zgrep.in, znew.in.
     - debian/patches/CVE-2022-1271-6.patch: fix "binary file matches"
       mislabeling in tests/Makefile.am, tests/zgrep-binary, zgrep.in.
     - debian/rules: fix permissions on new test scripts.
     - CVE-2022-1271
Checksums-Sha1:
 f71e93e71c91ae2798cad1ef29ebfa7b4b8a721f 101548 gzip-dbgsym_1.10-4ubuntu1.1_i386.ddeb
 322731ccefe29effbec97dbadb3c999d71088f7b 6104 gzip_1.10-4ubuntu1.1_i386.buildinfo
 994e600130b3310de1219ee12ec5d58a98f19ba7 98858 gzip_1.10-4ubuntu1.1_i386.deb
Checksums-Sha256:
 c38ea968d518b2d810ed560aa3c88726c5f89b152759a083298e524b5d6ee66c 101548 gzip-dbgsym_1.10-4ubuntu1.1_i386.ddeb
 cc1013b30081f4a673840737e4e3062b341f5ea8103eafd060a139f2a7468cc7 6104 gzip_1.10-4ubuntu1.1_i386.buildinfo
 d32d5f138949c309167ebedf8941e4be18269c30513bcdb1c4eb07902ffa67ae 98858 gzip_1.10-4ubuntu1.1_i386.deb
Files:
 5ced68275881500585c58aab2b143d87 101548 debug optional gzip-dbgsym_1.10-4ubuntu1.1_i386.ddeb
 12501bc828ebfeafab387f490e9c4bab 6104 utils required gzip_1.10-4ubuntu1.1_i386.buildinfo
 657cb0250498c3aa093f67a73186baf1 98858 utils required gzip_1.10-4ubuntu1.1_i386.deb
Original-Maintainer: Milan Kupcevic <milan@debian.org>