Security
Headlines
HeadlinesLatestCVEs

Headline

RHSA-2022:4940: Red Hat Security Advisory: xz security update

An update for xz is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

  • CVE-2022-1271: gzip: arbitrary-file-write vulnerability
Red Hat Security Data
#vulnerability#linux#red_hat#ibm#sap#ssl

Synopsis

Important: xz security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for xz is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.

Security Fix(es):

  • gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates 9.0 aarch64
  • Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

  • BZ - 2073310 - CVE-2022-1271 gzip: arbitrary-file-write vulnerability

Red Hat Enterprise Linux for x86_64 9

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

x86_64

xz-5.2.5-8.el9_0.x86_64.rpm

SHA-256: f16d17c26a241400586ddc3d734ce863e3f19d433881ec640a47bedf0dafd07b

xz-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38

xz-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38

xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe

xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe

xz-debugsource-5.2.5-8.el9_0.i686.rpm

SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807

xz-debugsource-5.2.5-8.el9_0.i686.rpm

SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807

xz-debugsource-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c

xz-debugsource-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c

xz-devel-5.2.5-8.el9_0.i686.rpm

SHA-256: bcec84c9b1c0188b90a647f4c72db3acc9200bc69b2548fb20c85e2035725de3

xz-devel-5.2.5-8.el9_0.x86_64.rpm

SHA-256: f4bd3abbd2101e636d61c7bfc0c176e0b24e48da77c767fc3d07859fd8001d56

xz-libs-5.2.5-8.el9_0.i686.rpm

SHA-256: 3b7eec6d5c30f96095e9e5599b3234da0037b16ba50aff8c9bc23a146c3af8f8

xz-libs-5.2.5-8.el9_0.x86_64.rpm

SHA-256: de263f880a4394f04b5e84254ba0a88d781b5bd63665c9e028bc10351490c982

xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749

xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749

xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae

xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae

xz-lzma-compat-5.2.5-8.el9_0.x86_64.rpm

SHA-256: e0526b1916ea97da65cf28ddaa417dc8be7d85e579076da1530cff146a4058d3

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

x86_64

xz-5.2.5-8.el9_0.x86_64.rpm

SHA-256: f16d17c26a241400586ddc3d734ce863e3f19d433881ec640a47bedf0dafd07b

xz-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38

xz-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38

xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe

xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe

xz-debugsource-5.2.5-8.el9_0.i686.rpm

SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807

xz-debugsource-5.2.5-8.el9_0.i686.rpm

SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807

xz-debugsource-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c

xz-debugsource-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c

xz-devel-5.2.5-8.el9_0.i686.rpm

SHA-256: bcec84c9b1c0188b90a647f4c72db3acc9200bc69b2548fb20c85e2035725de3

xz-devel-5.2.5-8.el9_0.x86_64.rpm

SHA-256: f4bd3abbd2101e636d61c7bfc0c176e0b24e48da77c767fc3d07859fd8001d56

xz-libs-5.2.5-8.el9_0.i686.rpm

SHA-256: 3b7eec6d5c30f96095e9e5599b3234da0037b16ba50aff8c9bc23a146c3af8f8

xz-libs-5.2.5-8.el9_0.x86_64.rpm

SHA-256: de263f880a4394f04b5e84254ba0a88d781b5bd63665c9e028bc10351490c982

xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749

xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749

xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae

xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae

xz-lzma-compat-5.2.5-8.el9_0.x86_64.rpm

SHA-256: e0526b1916ea97da65cf28ddaa417dc8be7d85e579076da1530cff146a4058d3

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf

Red Hat Enterprise Linux for IBM z Systems 9

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

s390x

xz-5.2.5-8.el9_0.s390x.rpm

SHA-256: c06f44e6fb5a0a1fbf3c052d065b6336c3d17cedbc796260cf0c097b98326906

xz-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6

xz-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6

xz-debugsource-5.2.5-8.el9_0.s390x.rpm

SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c

xz-debugsource-5.2.5-8.el9_0.s390x.rpm

SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c

xz-devel-5.2.5-8.el9_0.s390x.rpm

SHA-256: 184521cb2a444fa96b993a02afd22b44a28c89256339a718c7277c49c084f04a

xz-libs-5.2.5-8.el9_0.s390x.rpm

SHA-256: e2418fcfafbaa9f6dc6db42ebd4da74a6b91bddf59e1e2a1e1c74cf5d04f14be

xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495

xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495

xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm

SHA-256: 36933008c8802f8db9c17c3c9b7d5ed291004290ef3a7faa63eb5a3dcf9c654a

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

s390x

xz-5.2.5-8.el9_0.s390x.rpm

SHA-256: c06f44e6fb5a0a1fbf3c052d065b6336c3d17cedbc796260cf0c097b98326906

xz-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6

xz-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6

xz-debugsource-5.2.5-8.el9_0.s390x.rpm

SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c

xz-debugsource-5.2.5-8.el9_0.s390x.rpm

SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c

xz-devel-5.2.5-8.el9_0.s390x.rpm

SHA-256: 184521cb2a444fa96b993a02afd22b44a28c89256339a718c7277c49c084f04a

xz-libs-5.2.5-8.el9_0.s390x.rpm

SHA-256: e2418fcfafbaa9f6dc6db42ebd4da74a6b91bddf59e1e2a1e1c74cf5d04f14be

xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495

xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495

xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm

SHA-256: 36933008c8802f8db9c17c3c9b7d5ed291004290ef3a7faa63eb5a3dcf9c654a

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4

Red Hat Enterprise Linux for Power, little endian 9

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

ppc64le

xz-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 44cd014634f8a5cb83aff336500b0f2e3bec156a34e7da09e0ae6ef4b5e26467

xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691

xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691

xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4

xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4

xz-devel-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: d8fcebe718cc8257ba38917bc437ad2664735fdaf28adb78d41e8336e63fa892

xz-libs-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4e67d1701dc3e5f23191fcbc72e01d48e3287dc32046db9514eb19b902dfc089

xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556

xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556

xz-lzma-compat-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 42b44724911d3a585a582ad5820f16906b459ae6f3b2477cca033fdd3881be84

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

ppc64le

xz-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 44cd014634f8a5cb83aff336500b0f2e3bec156a34e7da09e0ae6ef4b5e26467

xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691

xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691

xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4

xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4

xz-devel-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: d8fcebe718cc8257ba38917bc437ad2664735fdaf28adb78d41e8336e63fa892

xz-libs-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4e67d1701dc3e5f23191fcbc72e01d48e3287dc32046db9514eb19b902dfc089

xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556

xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556

xz-lzma-compat-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 42b44724911d3a585a582ad5820f16906b459ae6f3b2477cca033fdd3881be84

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf

Red Hat Enterprise Linux for ARM 64 9

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

aarch64

xz-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 26ac21be6c1e396c7bcbaa9d4786e3275e996d9d78c01f75bbbc6962e6c9bef7

xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f

xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f

xz-debugsource-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf

xz-debugsource-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf

xz-devel-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 6f022d62d571550bf8147357f4ff7ccee60b772e013552f7fb622b5672436663

xz-libs-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 06931afb372ed4a6893e51558beaa6b0eab7adda0af93456fd99a081a8b80779

xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb

xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb

xz-lzma-compat-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 4292b4d72c150cd88c15560055d72b5cc507f850e044f03a358f63f99ed68d83

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

aarch64

xz-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 26ac21be6c1e396c7bcbaa9d4786e3275e996d9d78c01f75bbbc6962e6c9bef7

xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f

xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f

xz-debugsource-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf

xz-debugsource-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf

xz-devel-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 6f022d62d571550bf8147357f4ff7ccee60b772e013552f7fb622b5672436663

xz-libs-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 06931afb372ed4a6893e51558beaa6b0eab7adda0af93456fd99a081a8b80779

xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb

xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb

xz-lzma-compat-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 4292b4d72c150cd88c15560055d72b5cc507f850e044f03a358f63f99ed68d83

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

ppc64le

xz-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 44cd014634f8a5cb83aff336500b0f2e3bec156a34e7da09e0ae6ef4b5e26467

xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691

xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691

xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4

xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4

xz-devel-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: d8fcebe718cc8257ba38917bc437ad2664735fdaf28adb78d41e8336e63fa892

xz-libs-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4e67d1701dc3e5f23191fcbc72e01d48e3287dc32046db9514eb19b902dfc089

xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556

xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556

xz-lzma-compat-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: 42b44724911d3a585a582ad5820f16906b459ae6f3b2477cca033fdd3881be84

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm

SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

x86_64

xz-5.2.5-8.el9_0.x86_64.rpm

SHA-256: f16d17c26a241400586ddc3d734ce863e3f19d433881ec640a47bedf0dafd07b

xz-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38

xz-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38

xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe

xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe

xz-debugsource-5.2.5-8.el9_0.i686.rpm

SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807

xz-debugsource-5.2.5-8.el9_0.i686.rpm

SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807

xz-debugsource-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c

xz-debugsource-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c

xz-devel-5.2.5-8.el9_0.i686.rpm

SHA-256: bcec84c9b1c0188b90a647f4c72db3acc9200bc69b2548fb20c85e2035725de3

xz-devel-5.2.5-8.el9_0.x86_64.rpm

SHA-256: f4bd3abbd2101e636d61c7bfc0c176e0b24e48da77c767fc3d07859fd8001d56

xz-libs-5.2.5-8.el9_0.i686.rpm

SHA-256: 3b7eec6d5c30f96095e9e5599b3234da0037b16ba50aff8c9bc23a146c3af8f8

xz-libs-5.2.5-8.el9_0.x86_64.rpm

SHA-256: de263f880a4394f04b5e84254ba0a88d781b5bd63665c9e028bc10351490c982

xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749

xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749

xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae

xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae

xz-lzma-compat-5.2.5-8.el9_0.x86_64.rpm

SHA-256: e0526b1916ea97da65cf28ddaa417dc8be7d85e579076da1530cff146a4058d3

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm

SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm

SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf

Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

aarch64

xz-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 26ac21be6c1e396c7bcbaa9d4786e3275e996d9d78c01f75bbbc6962e6c9bef7

xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f

xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f

xz-debugsource-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf

xz-debugsource-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf

xz-devel-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 6f022d62d571550bf8147357f4ff7ccee60b772e013552f7fb622b5672436663

xz-libs-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 06931afb372ed4a6893e51558beaa6b0eab7adda0af93456fd99a081a8b80779

xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb

xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb

xz-lzma-compat-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 4292b4d72c150cd88c15560055d72b5cc507f850e044f03a358f63f99ed68d83

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm

SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8

Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates 9.0

SRPM

xz-5.2.5-8.el9_0.src.rpm

SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46

s390x

xz-5.2.5-8.el9_0.s390x.rpm

SHA-256: c06f44e6fb5a0a1fbf3c052d065b6336c3d17cedbc796260cf0c097b98326906

xz-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6

xz-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6

xz-debugsource-5.2.5-8.el9_0.s390x.rpm

SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c

xz-debugsource-5.2.5-8.el9_0.s390x.rpm

SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c

xz-devel-5.2.5-8.el9_0.s390x.rpm

SHA-256: 184521cb2a444fa96b993a02afd22b44a28c89256339a718c7277c49c084f04a

xz-libs-5.2.5-8.el9_0.s390x.rpm

SHA-256: e2418fcfafbaa9f6dc6db42ebd4da74a6b91bddf59e1e2a1e1c74cf5d04f14be

xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495

xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495

xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm

SHA-256: 36933008c8802f8db9c17c3c9b7d5ed291004290ef3a7faa63eb5a3dcf9c654a

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4

xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm

SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4

Related news

RHSA-2023:4053: Red Hat Security Advisory: OpenShift Container Platform 4.11.45 bug fix and security update

Red Hat OpenShift Container Platform release 4.11.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-21235: A flaw was found in the VCS package, caused by improper validation of user-supplied input. By using a specially-crafted argument, a remote attacker could execute arbitrary commands o...

RHSA-2023:3742: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.13.0 security and bug fix update

Updated images that include numerous enhancements, security, and bug fixes are now available in Red Hat Container Registry for Red Hat OpenShift Data Foundation 4.13.0 on Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2020-16250: A flaw was found in Vault and Vault Enterprise (“Vault”). In the affected versions of Vault, with the AWS Auth Method configured and under certain circumstances, the values relied upon by Vault to validate AWS IAM ident...

Red Hat Security Advisory 2023-0786-01

Red Hat Security Advisory 2023-0786-01 - Network observability is an OpenShift operator that provides a monitoring pipeline to collect and enrich network flows that are produced by the Network observability eBPF agent. The operator provides dashboards, metrics, and keeps flows accessible in a queryable log store, Grafana Loki. When a FlowCollector is deployed, new dashboards are available in the Console.

Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs

Hello everyone! Great news for my open source Scanvus project! You can now perform vulnerability checks on Linux hosts and docker images not only using the Vulners.com API, but also with the Vulns.io VM API. It’s especially nice that all the code to support the new API was written and contributed by colleagues from Vulns.io. […]

Red Hat Security Advisory 2022-6890-01

Red Hat Security Advisory 2022-6890-01 - Red Hat OpenShift Virtualization release 4.8.7 is now available with updates to packages and images that fix several bugs and add enhancements.

Red Hat Security Advisory 2022-6681-01

Red Hat Security Advisory 2022-6681-01 - Red Hat OpenShift Virtualization release 4.9.6 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important.

Red Hat Security Advisory 2022-6430-01

Red Hat Security Advisory 2022-6430-01 - OpenShift API for Data Protection enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes. Issues addressed include a denial of service vulnerability.

RHSA-2022:6430: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update

OpenShift API for Data Protection (OADP) 1.0.4 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1705: golang: net/http: improper sanitization of Transfer-Encoding header * CVE-2022-1962: golang: go/parser: stack exhaustion in all Parse* functions * CVE-2022-21698: prometheus/client_golang: Denial of service using InstrumentHandlerCounter * CVE-2022-24675: golang: encoding/pem: fix stack overflow in Decode * CVE-2022-30629: golang: crypto/tls: session ti...

RHSA-2022:6429: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.4 security and bug fix update

The Migration Toolkit for Containers (MTC) 1.7.4 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2020-28500: nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions * CVE-2021-23337: nodejs-lodash: command injection via template * CVE-2022-0512: nodejs-url-parse: authorization bypass through user-controlled key * CVE-2022-0639: npm-url-parse: Authorization Bypass Through User-Controlled Key * CVE-2022-0686: npm-url-parse: Authorization bypass thr...

CVE-2022-1271: Invalid Bug ID

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Red Hat Security Advisory 2022-5069-01

Red Hat Security Advisory 2022-5069-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.11.0. Issues addressed include code execution, cross site scripting, denial of service, information leakage, and traversal vulnerabilities.

Red Hat Security Advisory 2022-5924-01

Red Hat Security Advisory 2022-5924-01 - Service Telemetry Framework provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat OpenShift Container Platform deployment for storage, retrieval, and monitoring.

Red Hat Security Advisory 2022-5556-01

Red Hat Security Advisory 2022-5556-01 - Logging Subsystem 5.4.3 has security updates. Issues addressed include denial of service and out of bounds read vulnerabilities.

CVE-2022-21586: Oracle Critical Patch Update Advisory - July 2022

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).

RHSA-2022:5483: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.2 security and bug fix update

The Migration Toolkit for Containers (MTC) 1.7.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-3807: nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes * CVE-2022-0235: node-fetch: exposure of sensitive information to an unauthorized actor * CVE-2022-0536: follow-redirects: Exposure of Sensitive Information via Authorization Header leak

Red Hat Security Advisory 2022-5153-01

Red Hat Security Advisory 2022-5153-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.

Red Hat Security Advisory 2022-5189-01

Red Hat Security Advisory 2022-5189-01 - Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug and security fixes.

Red Hat Security Advisory 2022-5152-01

Red Hat Security Advisory 2022-5152-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.

RHSA-2022:5132: Red Hat Security Advisory: RHACS 3.68 security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug and security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1902: stackrox: Improper sanitization allows users to retrieve Notifier secrets from GraphQL API in plaintext

Red Hat Security Advisory 2022-5006-01

Red Hat Security Advisory 2022-5006-01 - Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. This advisory covers the RPM packages for the release. Issues addressed include a traversal vulnerability.

Red Hat Security Advisory 2022-4992-01

Red Hat Security Advisory 2022-4992-01 - XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.

Red Hat Security Advisory 2022-4993-01

Red Hat Security Advisory 2022-4993-01 - XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.

RHSA-2022:4993: Red Hat Security Advisory: xz security update

An update for xz is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1271: gzip: arbitrary-file-write vulnerability

RHSA-2022:4994: Red Hat Security Advisory: xz security update

An update for xz is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1271: gzip: arbitrary-file-write vulnerability

Red Hat Security Advisory 2022-4940-01

Red Hat Security Advisory 2022-4940-01 - XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.

Red Hat Security Advisory 2022-4896-01

Red Hat Security Advisory 2022-4896-01 - The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Issues addressed include heap overflow, out of bounds write, and use-after-free vulnerabilities.

Red Hat Security Advisory 2022-4582-01

Red Hat Security Advisory 2022-4582-01 - The gzip packages contain the gzip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times.

RHSA-2022:4896: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0]

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2018-25032: zlib: A flaw found in zlib when compressing (not decompressing) certain inputs * CVE-2021-4028: kernel: use-after-free in RDMA listen() * CVE-2021-4083: kernel: fget: check that the fd still exists after getting a ref to it * CVE-2022-0778: openssl:...

Red Hat Security Advisory 2022-4880-01

Red Hat Security Advisory 2022-4880-01 - Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug fixes and feature improvements. Issues addressed include a bypass vulnerability.

RHSA-2022:4880: Red Hat Security Advisory: ACS 3.70 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug fixes and feature improvements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-23820: json-pointer: type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays * CVE-2021-41190: opencontainers: OCI manifest and index parsing confusion

Red Hat Security Advisory 2022-2265-01

Red Hat Security Advisory 2022-2265-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.6.58.

Red Hat Security Advisory 2022-2268-01

Red Hat Security Advisory 2022-2268-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.7.51.

Red Hat Security Advisory 2022-4690-01

Red Hat Security Advisory 2022-4690-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a spoofing vulnerability.

RHSA-2022:4582: Red Hat Security Advisory: gzip security update

An update for gzip is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1271: gzip: arbitrary-file-write vulnerability

RHSA-2022:2183: Red Hat Security Advisory: Release of containers for OSP 16.2.z director operator tech preview

Red Hat OpenStack Platform 16.2 (Train) director Operator containers are available for technology preview.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2019-11253: kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service * CVE-2019-19794: golang-github-miekg-dns: predictable TXID can lead to response forgeries * CVE-2020-15257: containerd: unrestricted access to abstract Unix domain socket can lead to privileges escalation * CVE-2021-29482: ulikunitz/xz: Infinite loop in readUvarint allows for denial of service * CVE-2021-32760: containerd: pulling and extracting crafted container image may result in Unix file permission changes