CVE catalog

CVE-2022-1271

gzip: CVE-2022-1271

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Apr 7, 2022, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 5.55% · Oct 25, 2026

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	gzip	sid	`1.14-1`	fixed
Debian	gzip	forky	`1.14-1`	fixed
Debian	gzip	trixie	`1.13-1+deb13u1`	fixed
Debian	gzip	bookworm	`1.12-1`	fixed
Debian	xz-utils	sid	`5.8.4-1`	fixed
Debian	xz-utils	forky	`5.8.4-1`	fixed
Debian	xz-utils	trixie	`5.8.1-1+deb13u1`	fixed
Debian	xz-utils	trixie-security	`5.8.1-1+deb13u2`	fixed
Debian	xz-utils	bookworm	`5.4.1-1+deb12u1`	fixed
Debian	xz-utils	bookworm-security	`5.4.1-1+deb12u2`	fixed
Cpe	gzip	Not reported	`1.12`	fixed
Cpe	jboss_data_grid	Not reported	Not reported	unknown
Cpe	debian_linux	Not reported	Not reported	unknown
Cpe	xz	Not reported	`5.2.5`	fixed
Ubuntu	gzip	pro	`1.6-4ubuntu1`	vulnerable
Ubuntu	gzip	pro	`1.6-4ubuntu1+esm1`	fixed
Ubuntu	xz-utils	pro	`5.1.1alpha+20120614-2ubuntu2`	vulnerable
Ubuntu	xz-utils	pro	`5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1`	fixed
Ubuntu	gzip	pro	`1.6-4ubuntu1`	vulnerable
Ubuntu	gzip	pro	`1.6-4ubuntu1+esm1`	fixed
Ubuntu	xz-utils	pro	`5.1.1alpha+20120614-2ubuntu2`	vulnerable
Ubuntu	xz-utils	pro	`5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1`	fixed
Ubuntu	gzip	18.04	`1.6-5ubuntu1`	vulnerable
Ubuntu	gzip	18.04	`1.6-5ubuntu1.1`	vulnerable
Ubuntu	gzip	18.04	`1.6-5ubuntu1.2`	fixed
Ubuntu	xz-utils	18.04	`5.2.2-1.3`	vulnerable
Ubuntu	xz-utils	18.04	`5.2.2-1.3ubuntu0.1`	fixed
Ubuntu	gzip	20.04	`1.10-0ubuntu3`	vulnerable
Ubuntu	gzip	20.04	`1.10-0ubuntu4`	vulnerable
Ubuntu	gzip	20.04	`1.10-0ubuntu4.1`	fixed
Ubuntu	xz-utils	20.04	`5.2.4-1`	vulnerable
Ubuntu	xz-utils	20.04	`5.2.4-1ubuntu1`	vulnerable
Ubuntu	xz-utils	20.04	`5.2.4-1ubuntu1.1`	fixed
Ubuntu	gzip	22.04	`1.10-4ubuntu1`	vulnerable
Ubuntu	gzip	22.04	`1.10-4ubuntu2`	vulnerable
Ubuntu	gzip	22.04	`1.10-4ubuntu3`	vulnerable
Ubuntu	gzip	22.04	`1.10-4ubuntu4`	fixed
Ubuntu	xz-utils	22.04	`5.2.5-2`	vulnerable
Ubuntu	xz-utils	22.04	`5.2.5-2build1`	vulnerable
Ubuntu	xz-utils	22.04	`5.2.5-2build2`	vulnerable
Ubuntu	xz-utils	22.04	`5.2.5-2ubuntu1`	fixed
Ubuntu	xz-utils	18.04	`5.2.2-1.3`	vulnerable
Ubuntu	xz-utils	18.04	`5.2.2-1.3ubuntu0.1`	fixed
Ubuntu	xz-utils	20.04	`5.2.4-1`	vulnerable
Ubuntu	xz-utils	20.04	`5.2.4-1ubuntu1`	vulnerable
Ubuntu	xz-utils	20.04	`5.2.4-1ubuntu1.1`	fixed
Ubuntu	gzip	18.04	`1.6-5ubuntu1`	vulnerable
Ubuntu	gzip	18.04	`1.6-5ubuntu1.1`	vulnerable
Ubuntu	gzip	18.04	`1.6-5ubuntu1.2`	fixed
Ubuntu	gzip	20.04	`1.10-0ubuntu3`	vulnerable
Ubuntu	gzip	20.04	`1.10-0ubuntu4`	vulnerable
Ubuntu	gzip	20.04	`1.10-0ubuntu4.1`	fixed
Suse	gzip	hpe helion openstack 8	`1.6-9.6.2`	fixed
Suse	gzip	openstack cloud 8	`1.6-9.6.2`	fixed
Suse	gzip	openstack cloud 9	`1.6-9.6.2`	fixed
Suse	gzip	openstack cloud crowbar 8	`1.6-9.6.2`	fixed
Suse	gzip	openstack cloud crowbar 9	`1.6-9.6.2`	fixed
Suse	gzip	linux enterprise server for sap applications 12 sp3	`1.6-9.6.2`	fixed
Suse	gzip	linux enterprise server for sap applications 12 sp4	`1.6-9.6.2`	fixed
Suse	gzip	linux enterprise server 12 sp2-bcl	`1.6-9.6.2`	fixed
Suse	gzip	linux enterprise server 12 sp3-ltss	`1.6-9.6.2`	fixed
Suse	gzip	linux enterprise server 12 sp3-bcl	`1.6-9.6.2`	fixed
Suse	gzip	linux enterprise server 12 sp4-ltss	`1.6-9.6.2`	fixed
Suse	gzip	hpe helion openstack 8	`1.6-9.9.1`	fixed
Suse	gzip	openstack cloud 8	`1.6-9.9.1`	fixed
Suse	gzip	openstack cloud 9	`1.6-9.9.1`	fixed
Suse	gzip	openstack cloud crowbar 8	`1.6-9.9.1`	fixed
Suse	gzip	openstack cloud crowbar 9	`1.6-9.9.1`	fixed
Suse	gzip	linux enterprise server for sap applications 12 sp3	`1.6-9.9.1`	fixed
Suse	gzip	linux enterprise server for sap applications 12 sp4	`1.6-9.9.1`	fixed
Suse	gzip	linux enterprise server 12 sp2-bcl	`1.6-9.9.1`	fixed
Suse	gzip	linux enterprise server 12 sp3-ltss	`1.6-9.9.1`	fixed
Suse	gzip	linux enterprise server 12 sp3-bcl	`1.6-9.9.1`	fixed
Suse	gzip	linux enterprise server 12 sp4-ltss	`1.6-9.9.1`	fixed
Suse	gzip	linux enterprise server 12 sp5	`1.10-4.11.3`	fixed
Suse	gzip	linux enterprise server for sap applications 12 sp5	`1.10-4.11.3`	fixed
Suse	gzip	linux enterprise server 12 sp5	`1.10-4.14.1`	fixed
Suse	gzip	linux enterprise server for sap applications 12 sp5	`1.10-4.14.1`	fixed
Suse	gzip	linux enterprise high performance computing 15-espos	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise high performance computing 15-ltss	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise high performance computing 15 sp1-espos	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise high performance computing 15 sp1-ltss	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise server 15-ltss	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise server 15 sp1-bcl	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise server 15 sp1-ltss	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise server for sap applications 15	`1.10-150000.4.15.1`	fixed
Suse	gzip	linux enterprise server for sap applications 15 sp1	`1.10-150000.4.15.1`	fixed
Suse	gzip	enterprise storage 6	`1.10-150000.4.15.1`	fixed
Suse	xz	linux enterprise point of sale 11 sp3	`5.0.3-0.12.7.1`	fixed
Suse	xz	linux enterprise server 11 sp4-ltss	`5.0.3-0.12.7.1`	fixed
Suse	xz	linux enterprise module for basesystem 15 sp3	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise high performance computing 15-espos	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise high performance computing 15-ltss	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise high performance computing 15 sp1-espos	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise high performance computing 15 sp1-ltss	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise high performance computing 15 sp2-espos	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise high performance computing 15 sp2-ltss	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise real time 15 sp2	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server 15-ltss	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server 15 sp1-bcl	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server 15 sp1-ltss	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server 15 sp2-bcl	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server 15 sp2-ltss	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server for sap applications 15	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server for sap applications 15 sp1	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise server for sap applications 15 sp2	`5.2.3-150000.4.7.1`	fixed
Suse	xz	manager proxy 4.1	`5.2.3-150000.4.7.1`	fixed
Suse	xz	manager retail branch server 4.1	`5.2.3-150000.4.7.1`	fixed
Suse	xz	manager server 4.1	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise micro 5.0	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise micro 5.1	`5.2.3-150000.4.7.1`	fixed
Suse	xz	linux enterprise micro 5.2	`5.2.3-150000.4.7.1`	fixed
Suse	xz	enterprise storage 6	`5.2.3-150000.4.7.1`	fixed
Suse	xz	enterprise storage 7	`5.2.3-150000.4.7.1`	fixed
Opensuse	xz	leap 15.3	`5.2.3-150000.4.7.1`	fixed
Suse	gzip	linux enterprise high performance computing 15-espos	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise high performance computing 15-ltss	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise high performance computing 15 sp1-espos	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise high performance computing 15 sp1-ltss	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise server 15-ltss	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise server 15 sp1-bcl	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise server 15 sp1-ltss	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise server for sap applications 15	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise server for sap applications 15 sp1	`1.10-150000.4.12.1`	fixed
Suse	gzip	enterprise storage 6	`1.10-150000.4.12.1`	fixed
Suse	gzip	linux enterprise module for basesystem 15 sp3	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise module for basesystem 15 sp4	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise high performance computing 15 sp2-espos	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise high performance computing 15 sp2-ltss	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise real time 15 sp2	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise server 15 sp2-bcl	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise server 15 sp2-ltss	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise server for sap applications 15 sp2	`1.10-150200.10.1`	fixed
Suse	gzip	manager proxy 4.1	`1.10-150200.10.1`	fixed
Suse	gzip	manager retail branch server 4.1	`1.10-150200.10.1`	fixed
Suse	gzip	manager server 4.1	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise micro 5.0	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise micro 5.1	`1.10-150200.10.1`	fixed
Suse	gzip	linux enterprise micro 5.2	`1.10-150200.10.1`	fixed
Suse	gzip	enterprise storage 7	`1.10-150200.10.1`	fixed
Opensuse	gzip	leap 15.3	`1.10-150200.10.1`	fixed
Opensuse	gzip	leap 15.4	`1.10-150200.10.1`	fixed
Suse	xz	hpe helion openstack 8	`5.0.5-6.7.1`	fixed
Suse	xz	openstack cloud 8	`5.0.5-6.7.1`	fixed
Suse	xz	openstack cloud 9	`5.0.5-6.7.1`	fixed
Suse	xz	openstack cloud crowbar 8	`5.0.5-6.7.1`	fixed
Suse	xz	openstack cloud crowbar 9	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server for sap applications 12 sp3	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server for sap applications 12 sp4	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise software development kit 12 sp5	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server 12 sp2-bcl	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server 12 sp3-ltss	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server 12 sp3-bcl	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server 12 sp4-ltss	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server 12 sp5	`5.0.5-6.7.1`	fixed
Suse	xz	linux enterprise server for sap applications 12 sp5	`5.0.5-6.7.1`	fixed
Opensuse	apparmor	tumbleweed	`3.0.4-4.1`	fixed
Opensuse	xz	tumbleweed	`5.2.6-1.1`	fixed
Opensuse	gzip	tumbleweed	`1.12-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	gzip	source	sid	`1.12-1`	not yet assigned	Not reported	[1009168]
Debian	gzip	source	forky	`1.12-1`	not yet assigned	Not reported	[1009168]
Debian	gzip	source	trixie	`1.12-1`	not yet assigned	Not reported	[1009168]
Debian	gzip	source	bookworm	`1.12-1`	not yet assigned	Not reported	[1009168]
Debian	xz-utils	source	sid	`5.2.5-2.1`	not yet assigned	Not reported	[1009167]
Debian	xz-utils	source	forky	`5.2.5-2.1`	not yet assigned	Not reported	[1009167]
Debian	xz-utils	source	trixie	`5.2.5-2.1`	not yet assigned	Not reported	[1009167]
Debian	xz-utils	source	bookworm	`5.2.5-2.1`	not yet assigned	Not reported	[1009167]
Cpe	gzip	cpe	Not reported	`1.12`	Not reported	NVD-CVE-2022-1271	Not reported
Cpe	xz	cpe	Not reported	`5.2.5`	Not reported	NVD-CVE-2022-1271	Not reported
Ubuntu	gzip	deb	pro	`1.6-4ubuntu1+esm1`	Not reported	USN-5378-4	Not reported
Ubuntu	xz-utils	deb	pro	`5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1`	Not reported	USN-5378-3	Not reported
Ubuntu	gzip	deb	pro	`1.6-4ubuntu1+esm1`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	xz-utils	deb	pro	`5.1.1alpha+20120614-2ubuntu2.16.04.1+esm1`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	gzip	deb	18.04	`1.6-5ubuntu1.2`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	xz-utils	deb	18.04	`5.2.2-1.3ubuntu0.1`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	gzip	deb	20.04	`1.10-0ubuntu4.1`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	xz-utils	deb	20.04	`5.2.4-1ubuntu1.1`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	gzip	deb	22.04	`1.10-4ubuntu4`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	xz-utils	deb	22.04	`5.2.5-2ubuntu1`	Not reported	UBUNTU-CVE-2022-1271	Not reported
Ubuntu	xz-utils	deb	18.04	`5.2.2-1.3ubuntu0.1`	Not reported	USN-5378-2	Not reported
Ubuntu	xz-utils	deb	20.04	`5.2.4-1ubuntu1.1`	Not reported	USN-5378-2	Not reported
Ubuntu	gzip	deb	18.04	`1.6-5ubuntu1.2`	Not reported	USN-5378-1	Not reported
Ubuntu	gzip	deb	20.04	`1.10-0ubuntu4.1`	Not reported	USN-5378-1	Not reported
Suse	gzip	rpm	hpe helion openstack 8	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	openstack cloud 8	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	openstack cloud 9	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	openstack cloud crowbar 8	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	openstack cloud crowbar 9	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 12 sp3	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 12 sp4	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp2-bcl	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp3-ltss	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp3-bcl	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp4-ltss	`1.6-9.6.2`	Not reported	SUSE-SU-2022:1275-1	Not reported
Suse	gzip	rpm	hpe helion openstack 8	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	openstack cloud 8	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	openstack cloud 9	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	openstack cloud crowbar 8	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	openstack cloud crowbar 9	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 12 sp3	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 12 sp4	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp2-bcl	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp3-ltss	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp3-bcl	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp4-ltss	`1.6-9.9.1`	Not reported	SUSE-SU-2022:1673-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp5	`1.10-4.11.3`	Not reported	SUSE-SU-2022:1272-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 12 sp5	`1.10-4.11.3`	Not reported	SUSE-SU-2022:1272-1	Not reported
Suse	gzip	rpm	linux enterprise server 12 sp5	`1.10-4.14.1`	Not reported	SUSE-SU-2022:1650-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 12 sp5	`1.10-4.14.1`	Not reported	SUSE-SU-2022:1650-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15-espos	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15-ltss	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15 sp1-espos	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15 sp1-ltss	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise server 15-ltss	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise server 15 sp1-bcl	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise server 15 sp1-ltss	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 15	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 15 sp1	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	gzip	rpm	enterprise storage 6	`1.10-150000.4.15.1`	Not reported	SUSE-SU-2022:1674-1	Not reported
Suse	xz	rpm	linux enterprise point of sale 11 sp3	`5.0.3-0.12.7.1`	Not reported	SUSE-SU-2022:14938-1	Not reported
Suse	xz	rpm	linux enterprise server 11 sp4-ltss	`5.0.3-0.12.7.1`	Not reported	SUSE-SU-2022:14938-1	Not reported
Suse	xz	rpm	linux enterprise module for basesystem 15 sp3	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise high performance computing 15-espos	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise high performance computing 15-ltss	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise high performance computing 15 sp1-espos	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise high performance computing 15 sp1-ltss	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise high performance computing 15 sp2-espos	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise high performance computing 15 sp2-ltss	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise real time 15 sp2	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server 15-ltss	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server 15 sp1-bcl	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server 15 sp1-ltss	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server 15 sp2-bcl	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server 15 sp2-ltss	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server for sap applications 15	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server for sap applications 15 sp1	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise server for sap applications 15 sp2	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	manager proxy 4.1	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	manager retail branch server 4.1	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	manager server 4.1	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise micro 5.0	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise micro 5.1	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	linux enterprise micro 5.2	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	enterprise storage 6	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	xz	rpm	enterprise storage 7	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Opensuse	xz	rpm	leap 15.3	`5.2.3-150000.4.7.1`	Not reported	SUSE-SU-2022:1158-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15-espos	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15-ltss	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15 sp1-espos	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15 sp1-ltss	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise server 15-ltss	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise server 15 sp1-bcl	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise server 15 sp1-ltss	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 15	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 15 sp1	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	enterprise storage 6	`1.10-150000.4.12.1`	Not reported	SUSE-SU-2022:1250-1	Not reported
Suse	gzip	rpm	linux enterprise module for basesystem 15 sp3	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise module for basesystem 15 sp4	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15 sp2-espos	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise high performance computing 15 sp2-ltss	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise real time 15 sp2	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise server 15 sp2-bcl	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise server 15 sp2-ltss	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise server for sap applications 15 sp2	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	manager proxy 4.1	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	manager retail branch server 4.1	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	manager server 4.1	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise micro 5.0	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise micro 5.1	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	linux enterprise micro 5.2	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	gzip	rpm	enterprise storage 7	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Opensuse	gzip	rpm	leap 15.3	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Opensuse	gzip	rpm	leap 15.4	`1.10-150200.10.1`	Not reported	SUSE-SU-2022:1617-1	Not reported
Suse	xz	rpm	hpe helion openstack 8	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	openstack cloud 8	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	openstack cloud 9	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	openstack cloud crowbar 8	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	openstack cloud crowbar 9	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server for sap applications 12 sp3	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server for sap applications 12 sp4	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise software development kit 12 sp5	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server 12 sp2-bcl	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server 12 sp3-ltss	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server 12 sp3-bcl	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server 12 sp4-ltss	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server 12 sp5	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Suse	xz	rpm	linux enterprise server for sap applications 12 sp5	`5.0.5-6.7.1`	Not reported	SUSE-SU-2022:1160-1	Not reported
Opensuse	apparmor	rpm	tumbleweed	`3.0.4-4.1`	Not reported	OPENSUSE-SU-2024:11987-1	Not reported
Opensuse	xz	rpm	tumbleweed	`5.2.6-1.1`	Not reported	OPENSUSE-SU-2024:12271-1	Not reported
Opensuse	gzip	rpm	tumbleweed	`1.12-1.1`	Not reported	OPENSUSE-SU-2024:11992-1	Not reported

[Debian bug #1009168][Debian bug #1009167]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[gzip]Unknown
Details (2)
- 1.12-1 · amd64 · bookworm
  Fixed · Fixed: 1.12-1
  dsa · gzip · debian · bookworm
- 1.12-1 · arm64 · bookworm
  Fixed · Fixed: 1.12-1
  dsa · gzip · debian · bookworm
[gzip-win32]Unknown
Source package: [gzip]
Details (2)
- 1.12-1 · all · bookworm
  Fixed · Fixed: 1.12-1
  dsa · gzip · debian · bookworm
- 1.12-1 · all · bookworm
  Fixed · Fixed: 1.12-1
  dsa · gzip · debian · bookworm
[liblzma5]Unknown
Source package: [xz-utils]
Details (4)
- 5.4.1-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
[liblzma-dev]Unknown
Source package: [xz-utils]
Details (4)
- 5.4.1-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
[liblzma-doc]Unknown
Source package: [xz-utils]
Details (4)
- 5.4.1-1+deb12u1 · all · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1+deb12u1 · all · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · all · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · all · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
[xzdec]Unknown
Source package: [xz-utils]
Details (4)
- 5.4.1-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
[xz-utils]Unknown
Details (4)
- 5.4.1-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · amd64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm
- 5.4.1-1 · arm64 · bookworm-security
  Fixed · Fixed: 5.2.5-2.1
  dsa · xz-utils · debian · bookworm

[openSUSE Tumbleweed]

[apache2-mod_apparmor]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[apparmor-abstractions]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · noarch · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[apparmor-docs]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · noarch · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[apparmor-parser]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[apparmor-parser-lang]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · noarch · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[apparmor-profiles]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · noarch · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[apparmor-utils]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · noarch · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[apparmor-utils-lang]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · noarch · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed
[gzip]Unknown
Source package: [gzip]
Details (1)
- 1.14-3.1 · x86_64 · tumbleweed
  Fixed · Fixed: 1.12-1.1
  dsa · gzip · opensuse · tumbleweed
[liblzma5]Unknown
Source package: [xz]
Details (1)
- 5.8.3-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 5.2.6-1.1
  Version impact unknown
  dsa · xz · opensuse · tumbleweed
[liblzma5-32bit]Unknown
Source package: [xz]
Details (1)
- 5.8.3-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 5.2.6-1.1
  Version impact unknown
  dsa · xz · opensuse · tumbleweed
[liblzma5-x86-64-v3]Unknown
Source package: [xz]
Details (1)
- 5.8.3-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 5.2.6-1.1
  Version impact unknown
  dsa · xz · opensuse · tumbleweed
[pam_apparmor]Unknown
Source package: [apparmor]
Details (1)
- 5.0.2-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.0.4-4.1
  Version impact unknown
  dsa · apparmor · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 6:22:58 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]