Search for packages
Package details: pkg:alpm/archlinux/xz@5.2.5-2
purl pkg:alpm/archlinux/xz@5.2.5-2
Next non-vulnerable version 5.2.5-3
Latest non-vulnerable version 5.8.1-1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-zgc5-nzyz-aaan
Aliases:
CVE-2022-1271
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.
5.2.5-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:45:17.733498+00:00 Arch Linux Importer Affected by VCID-zgc5-nzyz-aaan https://security.archlinux.org/AVG-2665 36.0.0
2024-09-18T02:00:13.757048+00:00 Arch Linux Importer Affected by VCID-zgc5-nzyz-aaan https://security.archlinux.org/AVG-2665 34.0.1
2024-01-26T15:07:26.448733+00:00 Arch Linux Importer Affected by VCID-zgc5-nzyz-aaan https://security.archlinux.org/AVG-2665 34.0.0rc2
2024-01-03T22:26:28.014435+00:00 Arch Linux Importer Affected by VCID-zgc5-nzyz-aaan https://security.archlinux.org/AVG-2665 34.0.0rc1