Headline
RHSA-2022:4940: Red Hat Security Advisory: xz security update
An update for xz is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Related CVEs:
- CVE-2022-1271: gzip: arbitrary-file-write vulnerability
Synopsis
Important: xz security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
An update for xz is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
- gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
- Red Hat Enterprise Linux for x86_64 9 x86_64
- Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0 x86_64
- Red Hat Enterprise Linux for IBM z Systems 9 s390x
- Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0 s390x
- Red Hat Enterprise Linux for Power, little endian 9 ppc64le
- Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0 ppc64le
- Red Hat Enterprise Linux for ARM 64 9 aarch64
- Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0 aarch64
- Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
- Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
- Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates 9.0 aarch64
- Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates 9.0 s390x
Fixes
- BZ - 2073310 - CVE-2022-1271 gzip: arbitrary-file-write vulnerability
Red Hat Enterprise Linux for x86_64 9
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
x86_64
xz-5.2.5-8.el9_0.x86_64.rpm
SHA-256: f16d17c26a241400586ddc3d734ce863e3f19d433881ec640a47bedf0dafd07b
xz-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38
xz-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38
xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe
xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe
xz-debugsource-5.2.5-8.el9_0.i686.rpm
SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807
xz-debugsource-5.2.5-8.el9_0.i686.rpm
SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807
xz-debugsource-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c
xz-debugsource-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c
xz-devel-5.2.5-8.el9_0.i686.rpm
SHA-256: bcec84c9b1c0188b90a647f4c72db3acc9200bc69b2548fb20c85e2035725de3
xz-devel-5.2.5-8.el9_0.x86_64.rpm
SHA-256: f4bd3abbd2101e636d61c7bfc0c176e0b24e48da77c767fc3d07859fd8001d56
xz-libs-5.2.5-8.el9_0.i686.rpm
SHA-256: 3b7eec6d5c30f96095e9e5599b3234da0037b16ba50aff8c9bc23a146c3af8f8
xz-libs-5.2.5-8.el9_0.x86_64.rpm
SHA-256: de263f880a4394f04b5e84254ba0a88d781b5bd63665c9e028bc10351490c982
xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749
xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749
xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae
xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae
xz-lzma-compat-5.2.5-8.el9_0.x86_64.rpm
SHA-256: e0526b1916ea97da65cf28ddaa417dc8be7d85e579076da1530cff146a4058d3
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
x86_64
xz-5.2.5-8.el9_0.x86_64.rpm
SHA-256: f16d17c26a241400586ddc3d734ce863e3f19d433881ec640a47bedf0dafd07b
xz-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38
xz-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38
xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe
xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe
xz-debugsource-5.2.5-8.el9_0.i686.rpm
SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807
xz-debugsource-5.2.5-8.el9_0.i686.rpm
SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807
xz-debugsource-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c
xz-debugsource-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c
xz-devel-5.2.5-8.el9_0.i686.rpm
SHA-256: bcec84c9b1c0188b90a647f4c72db3acc9200bc69b2548fb20c85e2035725de3
xz-devel-5.2.5-8.el9_0.x86_64.rpm
SHA-256: f4bd3abbd2101e636d61c7bfc0c176e0b24e48da77c767fc3d07859fd8001d56
xz-libs-5.2.5-8.el9_0.i686.rpm
SHA-256: 3b7eec6d5c30f96095e9e5599b3234da0037b16ba50aff8c9bc23a146c3af8f8
xz-libs-5.2.5-8.el9_0.x86_64.rpm
SHA-256: de263f880a4394f04b5e84254ba0a88d781b5bd63665c9e028bc10351490c982
xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749
xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749
xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae
xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae
xz-lzma-compat-5.2.5-8.el9_0.x86_64.rpm
SHA-256: e0526b1916ea97da65cf28ddaa417dc8be7d85e579076da1530cff146a4058d3
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf
Red Hat Enterprise Linux for IBM z Systems 9
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
s390x
xz-5.2.5-8.el9_0.s390x.rpm
SHA-256: c06f44e6fb5a0a1fbf3c052d065b6336c3d17cedbc796260cf0c097b98326906
xz-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6
xz-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6
xz-debugsource-5.2.5-8.el9_0.s390x.rpm
SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c
xz-debugsource-5.2.5-8.el9_0.s390x.rpm
SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c
xz-devel-5.2.5-8.el9_0.s390x.rpm
SHA-256: 184521cb2a444fa96b993a02afd22b44a28c89256339a718c7277c49c084f04a
xz-libs-5.2.5-8.el9_0.s390x.rpm
SHA-256: e2418fcfafbaa9f6dc6db42ebd4da74a6b91bddf59e1e2a1e1c74cf5d04f14be
xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495
xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495
xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm
SHA-256: 36933008c8802f8db9c17c3c9b7d5ed291004290ef3a7faa63eb5a3dcf9c654a
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
s390x
xz-5.2.5-8.el9_0.s390x.rpm
SHA-256: c06f44e6fb5a0a1fbf3c052d065b6336c3d17cedbc796260cf0c097b98326906
xz-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6
xz-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6
xz-debugsource-5.2.5-8.el9_0.s390x.rpm
SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c
xz-debugsource-5.2.5-8.el9_0.s390x.rpm
SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c
xz-devel-5.2.5-8.el9_0.s390x.rpm
SHA-256: 184521cb2a444fa96b993a02afd22b44a28c89256339a718c7277c49c084f04a
xz-libs-5.2.5-8.el9_0.s390x.rpm
SHA-256: e2418fcfafbaa9f6dc6db42ebd4da74a6b91bddf59e1e2a1e1c74cf5d04f14be
xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495
xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495
xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm
SHA-256: 36933008c8802f8db9c17c3c9b7d5ed291004290ef3a7faa63eb5a3dcf9c654a
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4
Red Hat Enterprise Linux for Power, little endian 9
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
ppc64le
xz-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 44cd014634f8a5cb83aff336500b0f2e3bec156a34e7da09e0ae6ef4b5e26467
xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691
xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691
xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4
xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4
xz-devel-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: d8fcebe718cc8257ba38917bc437ad2664735fdaf28adb78d41e8336e63fa892
xz-libs-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4e67d1701dc3e5f23191fcbc72e01d48e3287dc32046db9514eb19b902dfc089
xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556
xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556
xz-lzma-compat-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 42b44724911d3a585a582ad5820f16906b459ae6f3b2477cca033fdd3881be84
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
ppc64le
xz-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 44cd014634f8a5cb83aff336500b0f2e3bec156a34e7da09e0ae6ef4b5e26467
xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691
xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691
xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4
xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4
xz-devel-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: d8fcebe718cc8257ba38917bc437ad2664735fdaf28adb78d41e8336e63fa892
xz-libs-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4e67d1701dc3e5f23191fcbc72e01d48e3287dc32046db9514eb19b902dfc089
xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556
xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556
xz-lzma-compat-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 42b44724911d3a585a582ad5820f16906b459ae6f3b2477cca033fdd3881be84
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf
Red Hat Enterprise Linux for ARM 64 9
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
aarch64
xz-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 26ac21be6c1e396c7bcbaa9d4786e3275e996d9d78c01f75bbbc6962e6c9bef7
xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f
xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f
xz-debugsource-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf
xz-debugsource-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf
xz-devel-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 6f022d62d571550bf8147357f4ff7ccee60b772e013552f7fb622b5672436663
xz-libs-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 06931afb372ed4a6893e51558beaa6b0eab7adda0af93456fd99a081a8b80779
xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb
xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb
xz-lzma-compat-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 4292b4d72c150cd88c15560055d72b5cc507f850e044f03a358f63f99ed68d83
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
aarch64
xz-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 26ac21be6c1e396c7bcbaa9d4786e3275e996d9d78c01f75bbbc6962e6c9bef7
xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f
xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f
xz-debugsource-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf
xz-debugsource-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf
xz-devel-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 6f022d62d571550bf8147357f4ff7ccee60b772e013552f7fb622b5672436663
xz-libs-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 06931afb372ed4a6893e51558beaa6b0eab7adda0af93456fd99a081a8b80779
xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb
xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb
xz-lzma-compat-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 4292b4d72c150cd88c15560055d72b5cc507f850e044f03a358f63f99ed68d83
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
ppc64le
xz-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 44cd014634f8a5cb83aff336500b0f2e3bec156a34e7da09e0ae6ef4b5e26467
xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691
xz-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 7db8166d67c60bfd045acad341f0da9e62296f8281aefa538d5c6c19c47bc691
xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4
xz-debugsource-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 648d78f8d865f0e8fa9215dfd58802e2242db4c61546067055ea08184bc937d4
xz-devel-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: d8fcebe718cc8257ba38917bc437ad2664735fdaf28adb78d41e8336e63fa892
xz-libs-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4e67d1701dc3e5f23191fcbc72e01d48e3287dc32046db9514eb19b902dfc089
xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556
xz-libs-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 4de1919705a7ac4531452a7194e36de05da3d68b7ab76509edbc7e1ff4a09556
xz-lzma-compat-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: 42b44724911d3a585a582ad5820f16906b459ae6f3b2477cca033fdd3881be84
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.ppc64le.rpm
SHA-256: a00cf8f84a1a6278f7a2e7673f9c0baa1a81f5456d13a192817c126c56b52aaf
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
x86_64
xz-5.2.5-8.el9_0.x86_64.rpm
SHA-256: f16d17c26a241400586ddc3d734ce863e3f19d433881ec640a47bedf0dafd07b
xz-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38
xz-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: a8d52d81115bd03ed537bf1173732d5fde856303929dc26fb1b6200ec8e49a38
xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe
xz-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: fc88e5b0fb171ee7b81a1bd188be6c00ae930b4f058ea8cd5d26fb2f89f7cafe
xz-debugsource-5.2.5-8.el9_0.i686.rpm
SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807
xz-debugsource-5.2.5-8.el9_0.i686.rpm
SHA-256: b6d6e89272b43ef11d4c2b892c56bec2eaa93b2ee00026d431ef84bf704f4807
xz-debugsource-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c
xz-debugsource-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3e4f5c6090af8546849a29ea61223fca75b5bb5cebcffd79f20b4adf3a95e32c
xz-devel-5.2.5-8.el9_0.i686.rpm
SHA-256: bcec84c9b1c0188b90a647f4c72db3acc9200bc69b2548fb20c85e2035725de3
xz-devel-5.2.5-8.el9_0.x86_64.rpm
SHA-256: f4bd3abbd2101e636d61c7bfc0c176e0b24e48da77c767fc3d07859fd8001d56
xz-libs-5.2.5-8.el9_0.i686.rpm
SHA-256: 3b7eec6d5c30f96095e9e5599b3234da0037b16ba50aff8c9bc23a146c3af8f8
xz-libs-5.2.5-8.el9_0.x86_64.rpm
SHA-256: de263f880a4394f04b5e84254ba0a88d781b5bd63665c9e028bc10351490c982
xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749
xz-libs-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: c52857e7941ac4a71db53c4ab6fa1c4402bf1140de73fbf2a8f80695f3c5e749
xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae
xz-libs-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 3d39613d2e936391a903bd02b0289e98579e3ad23f4976627b73fc4b78b6b7ae
xz-lzma-compat-5.2.5-8.el9_0.x86_64.rpm
SHA-256: e0526b1916ea97da65cf28ddaa417dc8be7d85e579076da1530cff146a4058d3
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.i686.rpm
SHA-256: 5a67f2d7e64960703716aabcb20f7290052557cbb24cb7957506521ac5cc04b1
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.x86_64.rpm
SHA-256: 14666f546cb528e094dedfd7da523b2a2e73f8ab5f2b1444d56eb8d3fd90e1bf
Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
aarch64
xz-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 26ac21be6c1e396c7bcbaa9d4786e3275e996d9d78c01f75bbbc6962e6c9bef7
xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f
xz-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: d88db4dba08c05ed8bfd7ab778aa5732386799fd2b3136e3c42a56dee3ecdb0f
xz-debugsource-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf
xz-debugsource-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 9613f4426d9a3b0641cb6d1709d75ec6c935b8d12c20ed8aa0b549bec253febf
xz-devel-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 6f022d62d571550bf8147357f4ff7ccee60b772e013552f7fb622b5672436663
xz-libs-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 06931afb372ed4a6893e51558beaa6b0eab7adda0af93456fd99a081a8b80779
xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb
xz-libs-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 447f73cf44962e81de4c0cbe6728f93fcddcae51662639aa4db8ec8e8e51efeb
xz-lzma-compat-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 4292b4d72c150cd88c15560055d72b5cc507f850e044f03a358f63f99ed68d83
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.aarch64.rpm
SHA-256: 5e4e08fec002f731cfbc6fefda65473eec2d23aad0325a3a878fe50bd67989a8
Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates 9.0
SRPM
xz-5.2.5-8.el9_0.src.rpm
SHA-256: bce98f3a307e75a8ac28f909e29b41d64b15461fa9ddf0bf4ef3c2f6de946b46
s390x
xz-5.2.5-8.el9_0.s390x.rpm
SHA-256: c06f44e6fb5a0a1fbf3c052d065b6336c3d17cedbc796260cf0c097b98326906
xz-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6
xz-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 387bfff647b97a49eea987562b98638e02c149afbb134cf117576c83d11a25b6
xz-debugsource-5.2.5-8.el9_0.s390x.rpm
SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c
xz-debugsource-5.2.5-8.el9_0.s390x.rpm
SHA-256: 34eed92e394da81ea34969bc524202d44e584875ac0e483b8828c947387c809c
xz-devel-5.2.5-8.el9_0.s390x.rpm
SHA-256: 184521cb2a444fa96b993a02afd22b44a28c89256339a718c7277c49c084f04a
xz-libs-5.2.5-8.el9_0.s390x.rpm
SHA-256: e2418fcfafbaa9f6dc6db42ebd4da74a6b91bddf59e1e2a1e1c74cf5d04f14be
xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495
xz-libs-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: 66102a88fd0978fc195c28aecdb24534ee825d43cff7f27284176c93800d1495
xz-lzma-compat-5.2.5-8.el9_0.s390x.rpm
SHA-256: 36933008c8802f8db9c17c3c9b7d5ed291004290ef3a7faa63eb5a3dcf9c654a
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4
xz-lzma-compat-debuginfo-5.2.5-8.el9_0.s390x.rpm
SHA-256: e947bc4b9d3c473c8238f7ed06e45af7af09900c571e1ec0a108fdcc48d2d2a4
Related news
Red Hat OpenShift Container Platform release 4.11.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-21235: A flaw was found in the VCS package, caused by improper validation of user-supplied input. By using a specially-crafted argument, a remote attacker could execute arbitrary commands o...
Updated images that include numerous enhancements, security, and bug fixes are now available in Red Hat Container Registry for Red Hat OpenShift Data Foundation 4.13.0 on Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2020-16250: A flaw was found in Vault and Vault Enterprise (“Vault”). In the affected versions of Vault, with the AWS Auth Method configured and under certain circumstances, the values relied upon by Vault to validate AWS IAM ident...
Red Hat Security Advisory 2023-0786-01 - Network observability is an OpenShift operator that provides a monitoring pipeline to collect and enrich network flows that are produced by the Network observability eBPF agent. The operator provides dashboards, metrics, and keeps flows accessible in a queryable log store, Grafana Loki. When a FlowCollector is deployed, new dashboards are available in the Console.
Hello everyone! Great news for my open source Scanvus project! You can now perform vulnerability checks on Linux hosts and docker images not only using the Vulners.com API, but also with the Vulns.io VM API. It’s especially nice that all the code to support the new API was written and contributed by colleagues from Vulns.io. […]
Red Hat Security Advisory 2022-6890-01 - Red Hat OpenShift Virtualization release 4.8.7 is now available with updates to packages and images that fix several bugs and add enhancements.
Red Hat Security Advisory 2022-6681-01 - Red Hat OpenShift Virtualization release 4.9.6 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important.
Red Hat Security Advisory 2022-6430-01 - OpenShift API for Data Protection enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and snapshot-based backups for persistent volumes. Issues addressed include a denial of service vulnerability.
OpenShift API for Data Protection (OADP) 1.0.4 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1705: golang: net/http: improper sanitization of Transfer-Encoding header * CVE-2022-1962: golang: go/parser: stack exhaustion in all Parse* functions * CVE-2022-21698: prometheus/client_golang: Denial of service using InstrumentHandlerCounter * CVE-2022-24675: golang: encoding/pem: fix stack overflow in Decode * CVE-2022-30629: golang: crypto/tls: session ti...
The Migration Toolkit for Containers (MTC) 1.7.4 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2020-28500: nodejs-lodash: ReDoS via the toNumber, trim and trimEnd functions * CVE-2021-23337: nodejs-lodash: command injection via template * CVE-2022-0512: nodejs-url-parse: authorization bypass through user-controlled key * CVE-2022-0639: npm-url-parse: Authorization Bypass Through User-Controlled Key * CVE-2022-0686: npm-url-parse: Authorization bypass thr...
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.
Red Hat Security Advisory 2022-5069-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.11.0. Issues addressed include code execution, cross site scripting, denial of service, information leakage, and traversal vulnerabilities.
Red Hat Security Advisory 2022-5924-01 - Service Telemetry Framework provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat OpenShift Container Platform deployment for storage, retrieval, and monitoring.
Red Hat Security Advisory 2022-5556-01 - Logging Subsystem 5.4.3 has security updates. Issues addressed include denial of service and out of bounds read vulnerabilities.
Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Trade Finance. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Trade Finance accessible data as well as unauthorized access to critical data or complete access to all Oracle Banking Trade Finance accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N).
The Migration Toolkit for Containers (MTC) 1.7.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-3807: nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes * CVE-2022-0235: node-fetch: exposure of sensitive information to an unauthorized actor * CVE-2022-0536: follow-redirects: Exposure of Sensitive Information via Authorization Header leak
Red Hat Security Advisory 2022-5153-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.
Red Hat Security Advisory 2022-5189-01 - Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug and security fixes.
Red Hat Security Advisory 2022-5152-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a cross site scripting vulnerability.
Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug and security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1902: stackrox: Improper sanitization allows users to retrieve Notifier secrets from GraphQL API in plaintext
Red Hat Security Advisory 2022-5006-01 - Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. This advisory covers the RPM packages for the release. Issues addressed include a traversal vulnerability.
Red Hat Security Advisory 2022-4992-01 - XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Red Hat Security Advisory 2022-4993-01 - XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
An update for xz is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1271: gzip: arbitrary-file-write vulnerability
An update for xz is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1271: gzip: arbitrary-file-write vulnerability
Red Hat Security Advisory 2022-4940-01 - XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm, which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Red Hat Security Advisory 2022-4896-01 - The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Issues addressed include heap overflow, out of bounds write, and use-after-free vulnerabilities.
Red Hat Security Advisory 2022-4582-01 - The gzip packages contain the gzip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times.
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2018-25032: zlib: A flaw found in zlib when compressing (not decompressing) certain inputs * CVE-2021-4028: kernel: use-after-free in RDMA listen() * CVE-2021-4083: kernel: fget: check that the fd still exists after getting a ref to it * CVE-2022-0778: openssl:...
Red Hat Security Advisory 2022-4880-01 - Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug fixes and feature improvements. Issues addressed include a bypass vulnerability.
Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug fixes and feature improvements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2021-23820: json-pointer: type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays * CVE-2021-41190: opencontainers: OCI manifest and index parsing confusion
Red Hat Security Advisory 2022-2265-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.6.58.
Red Hat Security Advisory 2022-2268-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.7.51.
Red Hat Security Advisory 2022-4690-01 - Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Issues addressed include a spoofing vulnerability.
An update for gzip is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1271: gzip: arbitrary-file-write vulnerability
Red Hat OpenStack Platform 16.2 (Train) director Operator containers are available for technology preview.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2019-11253: kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service * CVE-2019-19794: golang-github-miekg-dns: predictable TXID can lead to response forgeries * CVE-2020-15257: containerd: unrestricted access to abstract Unix domain socket can lead to privileges escalation * CVE-2021-29482: ulikunitz/xz: Infinite loop in readUvarint allows for denial of service * CVE-2021-32760: containerd: pulling and extracting crafted container image may result in Unix file permission changes