Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 837152 - <app-arch/gzip-1.12: Incorrect escaping for filenames in zgrep
Summary: <app-arch/gzip-1.12: Incorrect escaping for filenames in zgrep
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal major
Assignee: Gentoo Security
URL:
Whiteboard: A2 [glsa+]
Keywords:
Depends on: 837161
Blocks: CVE-2022-1271
  Show dependency tree
 
Reported: 2022-04-07 18:05 UTC by Sam James
Modified: 2022-09-07 03:19 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-04-07 18:05:01 UTC 
Fixed in 1.12.
Comment 1 Larry the Git Cow gentoo-dev 2022-04-07 18:11:32 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5a839041a61fbf7f8b54d26c9c9f4d082e8b3561

commit 5a839041a61fbf7f8b54d26c9c9f4d082e8b3561
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-04-07 18:06:15 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-04-07 18:06:15 +0000

    app-arch/gzip: add 1.12
    
    Bug: https://bugs.gentoo.org/837152
    Signed-off-by: Sam James <sam@gentoo.org>

 app-arch/gzip/Manifest         |  2 ++
 app-arch/gzip/gzip-1.12.ebuild | 49 ++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 51 insertions(+)
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-04-17 17:15:22 UTC 
cleanup done
Comment 3 Larry the Git Cow gentoo-dev 2022-09-07 03:01:32 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=142c539cc4c68c3dc0a3c55f8a7996f7a5b3c3d6

commit 142c539cc4c68c3dc0a3c55f8a7996f7a5b3c3d6
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2022-09-07 02:51:56 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2022-09-07 02:58:05 +0000

    [ GLSA 202209-01 ] GNU Gzip, XZ Utils: Arbitrary file write
    
    Bug: https://bugs.gentoo.org/837152
    Bug: https://bugs.gentoo.org/837155
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 glsa-202209-01.xml | 56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
Comment 4 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-09-07 03:19:52 UTC 
GLSA released, all done!