diff options
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -21,6 +21,7 @@ GNU gzip NEWS -*- outline -*- zgrep applied to a crafted file name with two or more newlines can no longer overwrite an arbitrary, attacker-selected file. + This addresses CVE-2022-1271, ZDI-CAN-16587. [bug introduced in gzip-1.3.10] zgrep now names input file on error instead of mislabeling it as |