# CVE-2022-1271: gzip: The gzip packages contain the gzip (GNU zip) data compression utility

CVE-2022-1271 is fixed in 16 products on 1 platform, first by gzip 1.6-5ubuntu1.2, released April 6, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-1271
- Priority: High
- CVSS: 8.8 (Important)
- EPSS: 0.0555
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 6, 2022

## Description

The gzip packages contain the gzip (GNU zip) data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times.  Security Fix(es):  * gzip: arbitrary-file-write vulnerability (CVE-2022-1271)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | gzip Debian 11.6 (bullseye) | 1.10-4+deb11u1 | [DSA-5122-1](https://patchblox.com/security/data/fix/linux/dsa-5122-1.md) | Apr 18, 2022 |
| Linux | gzip Debian 12.15 (bookworm) | 1.12-1 | [DEBIAN-CVE-2022-1271](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1271.md) | Aug 31, 2022 |
| Linux | gzip Debian 13.5 (trixie) | 1.12-1 | [DEBIAN-CVE-2022-1271](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1271.md) | Aug 31, 2022 |
| Linux | gzip Debian 14 | 1.12-1 | [DEBIAN-CVE-2022-1271](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1271.md) | Aug 31, 2022 |
| Linux | gzip RHEL 8 | 0:1.9-13.el8_5 | [RHSA-2022:1537](https://patchblox.com/security/data/fix/linux/rhsa-2022-1537.md) | Apr 26, 2022 |
| Linux | gzip RHEL 9 | 0:1.10-9.el9_0 | [RHSA-2022:4582](https://patchblox.com/security/data/fix/linux/rhsa-2022-4582.md) | May 17, 2022 |
| Linux | gzip Ubuntu 18.04.6 LTS (bionic) | 1.6-5ubuntu1.2 | [gzip 1.6-5ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gzip-1.6-5ubuntu1.2.md) | Apr 6, 2022 |
| Linux | gzip Ubuntu 20.04 LTS (focal) | 1.10-0ubuntu4.1 | [gzip 1.10-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gzip-1.10-0ubuntu4.1.md) | Apr 6, 2022 |
| Linux | gzip Ubuntu 22.04.1 LTS (jammy) | 1.10-4ubuntu4 | [gzip 1.10-4ubuntu4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gzip-1.10-4ubuntu4.md) | Apr 6, 2022 |
| Linux | gzip almalinux 8 | 1.9-13.el8_5 | [ALSA-2022:1537](https://patchblox.com/security/data/fix/linux/alsa-2022-1537.md) | Apr 26, 2022 |
| Linux | gzip amzn 2023 | 1.10-5.amzn2023.0.2 | [ALAS2023-2023-043](https://patchblox.com/security/data/fix/linux/alas2023-2023-043.md) | Feb 17, 2023 |
| Linux | gzip ol 8 | 0:1.9-13.el8_5 | [ELSA-2022-1537](https://patchblox.com/security/data/fix/linux/elsa-2022-1537.md) | Apr 26, 2022 |
| Linux | gzip ol 9 | 0:1.10-9.el9_0 | [ELSA-2022-4582](https://patchblox.com/security/data/fix/linux/elsa-2022-4582.md) | Jun 30, 2022 |
| Linux | gzip rocky 8 | 0:1.9-13.el8_5 | [RLSA-2022:1537](https://patchblox.com/security/data/fix/linux/rlsa-2022-1537.md) | Apr 26, 2022 |
| Linux | gzip rocky 9 | 0:1.10-9.el9_0 | [RLSA-2022:4582](https://patchblox.com/security/data/fix/linux/rlsa-2022-4582.md) | May 17, 2022 |
| Linux | gzip-debuginfo amzn 2023 | 1.10-5.amzn2023.0.2 | [ALAS2023-2023-043](https://patchblox.com/security/data/fix/linux/alas2023-2023-043.md) | Feb 17, 2023 |
| Linux | gzip-debugsource amzn 2023 | 1.10-5.amzn2023.0.2 | [ALAS2023-2023-043](https://patchblox.com/security/data/fix/linux/alas2023-2023-043.md) | Feb 17, 2023 |
| Linux | gzip-win32 Ubuntu 18.04.6 LTS (bionic) | 1.6-5ubuntu1.2 | [gzip-win32 1.6-5ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gzip-win32-1.6-5ubuntu1.2.md) | Apr 6, 2022 |
| Linux | gzip-win32 Ubuntu 20.04 LTS (focal) | 1.10-0ubuntu4.1 | [gzip-win32 1.10-0ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gzip-win32-1.10-0ubuntu4.1.md) | Apr 6, 2022 |
| Linux | gzip-win32 Ubuntu 22.04.1 LTS (jammy) | 1.10-4ubuntu4 | [gzip-win32 1.10-4ubuntu4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gzip-win32-1.10-4ubuntu4.md) | Apr 6, 2022 |
| Linux | liblzma5 Ubuntu 18.04.6 LTS (bionic) | 5.2.2-1.3ubuntu0.1 | [liblzma5 5.2.2-1.3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-liblzma5-5.2.2-1.3ubuntu0.1.md) | Apr 6, 2022 |
| Linux | liblzma5 Ubuntu 20.04 LTS (focal) | 5.2.4-1ubuntu1.1 | [liblzma5 5.2.4-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-liblzma5-5.2.4-1ubuntu1.1.md) | Apr 6, 2022 |
| Linux | liblzma5 Ubuntu 22.04.1 LTS (jammy) | 5.2.5-2ubuntu1 | [liblzma5 5.2.5-2ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-liblzma5-5.2.5-2ubuntu1.md) | Apr 6, 2022 |
| Linux | xz RHEL 8 | 0:5.2.4-4.el8_6 | [RHSA-2022:4991](https://patchblox.com/security/data/fix/linux/rhsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz RHEL 9 | 0:5.2.5-8.el9_0 | [RHSA-2022:4940](https://patchblox.com/security/data/fix/linux/rhsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz almalinux 8 | 5.2.4-4.el8_6 | [ALSA-2022:4991](https://patchblox.com/security/data/fix/linux/alsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz almalinux 9 | 5.2.5-8.el9_0 | [ALSA-2022:4940](https://patchblox.com/security/data/fix/linux/alsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz ol 8 | 0:5.2.4-4.el8_6 | [ELSA-2022-4991](https://patchblox.com/security/data/fix/linux/elsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz ol 9 | 0:5.2.5-8.el9_0 | [ELSA-2022-4940](https://patchblox.com/security/data/fix/linux/elsa-2022-4940.md) | Jun 30, 2022 |
| Linux | xz rocky 8 | 0:5.2.4-4.el8_6 | [RLSA-2022:4991](https://patchblox.com/security/data/fix/linux/rlsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz rocky 9 | 0:5.2.5-8.el9_0 | [RLSA-2022:4940](https://patchblox.com/security/data/fix/linux/rlsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz-debuginfo amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-debugsource amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-devel RHEL 8 | 0:5.2.4-4.el8_6 | [RHSA-2022:4991](https://patchblox.com/security/data/fix/linux/rhsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-devel RHEL 9 | 0:5.2.5-8.el9_0 | [RHSA-2022:4940](https://patchblox.com/security/data/fix/linux/rhsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz-devel almalinux 8 | 5.2.4-4.el8_6 | [ALSA-2022:4991](https://patchblox.com/security/data/fix/linux/alsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-devel almalinux 9 | 5.2.5-8.el9_0 | [ALSA-2022:4940](https://patchblox.com/security/data/fix/linux/alsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz-devel amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-devel ol 8 | 0:5.2.4-4.el8_6 | [ELSA-2022-4991](https://patchblox.com/security/data/fix/linux/elsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-devel ol 9 | 0:5.2.5-8.el9_0 | [ELSA-2022-4940](https://patchblox.com/security/data/fix/linux/elsa-2022-4940.md) | Jun 30, 2022 |
| Linux | xz-libs RHEL 8 | 0:5.2.4-4.el8_6 | [RHSA-2022:4991](https://patchblox.com/security/data/fix/linux/rhsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-libs RHEL 9 | 0:5.2.5-8.el9_0 | [RHSA-2022:4940](https://patchblox.com/security/data/fix/linux/rhsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz-libs almalinux 8 | 5.2.4-4.el8_6 | [ALSA-2022:4991](https://patchblox.com/security/data/fix/linux/alsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-libs almalinux 9 | 5.2.5-8.el9_0 | [ALSA-2022:4940](https://patchblox.com/security/data/fix/linux/alsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz-libs amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-libs ol 8 | 0:5.2.4-4.el8_6 | [ELSA-2022-4991](https://patchblox.com/security/data/fix/linux/elsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-libs ol 9 | 0:5.2.5-8.el9_0 | [ELSA-2022-4940](https://patchblox.com/security/data/fix/linux/elsa-2022-4940.md) | Jun 30, 2022 |
| Linux | xz-libs-debuginfo amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-lzma-compat RHEL 8 | 0:5.2.4-4.el8_6 | [RHSA-2022:4991](https://patchblox.com/security/data/fix/linux/rhsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-lzma-compat RHEL 9 | 0:5.2.5-8.el9_0 | [RHSA-2022:4940](https://patchblox.com/security/data/fix/linux/rhsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz-lzma-compat almalinux 8 | 5.2.4-4.el8_6 | [ALSA-2022:4991](https://patchblox.com/security/data/fix/linux/alsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-lzma-compat almalinux 9 | 5.2.5-8.el9_0 | [ALSA-2022:4940](https://patchblox.com/security/data/fix/linux/alsa-2022-4940.md) | Jun 8, 2022 |
| Linux | xz-lzma-compat amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-lzma-compat ol 8 | 0:5.2.4-4.el8_6 | [ELSA-2022-4991](https://patchblox.com/security/data/fix/linux/elsa-2022-4991.md) | Jun 13, 2022 |
| Linux | xz-lzma-compat ol 9 | 0:5.2.5-8.el9_0 | [ELSA-2022-4940](https://patchblox.com/security/data/fix/linux/elsa-2022-4940.md) | Jun 30, 2022 |
| Linux | xz-lzma-compat-debuginfo amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-static amzn 2023 | 5.2.5-9.amzn2023.0.2 | [ALAS2023-2023-042](https://patchblox.com/security/data/fix/linux/alas2023-2023-042.md) | Feb 17, 2023 |
| Linux | xz-utils Debian 11.6 (bullseye) | 5.2.5-2.1~deb11u1 | [DSA-5123-1](https://patchblox.com/security/data/fix/linux/dsa-5123-1.md) | Apr 18, 2022 |
| Linux | xz-utils Debian 12.15 (bookworm) | 5.2.5-2.1 | [DEBIAN-CVE-2022-1271](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1271.md) | Aug 31, 2022 |
| Linux | xz-utils Debian 13.5 (trixie) | 5.2.5-2.1 | [DEBIAN-CVE-2022-1271](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1271.md) | Aug 31, 2022 |
| Linux | xz-utils Debian 14 | 5.2.5-2.1 | [DEBIAN-CVE-2022-1271](https://patchblox.com/security/data/fix/linux/debian-cve-2022-1271.md) | Aug 31, 2022 |
| Linux | xz-utils Ubuntu 18.04.6 LTS (bionic) | 5.2.2-1.3ubuntu0.1 | [xz-utils 5.2.2-1.3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xz-utils-5.2.2-1.3ubuntu0.1.md) | Apr 6, 2022 |
| Linux | xz-utils Ubuntu 20.04 LTS (focal) | 5.2.4-1ubuntu1.1 | [xz-utils 5.2.4-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xz-utils-5.2.4-1ubuntu1.1.md) | Apr 6, 2022 |
| Linux | xz-utils Ubuntu 22.04.1 LTS (jammy) | 5.2.5-2ubuntu1 | [xz-utils 5.2.5-2ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xz-utils-5.2.5-2ubuntu1.md) | Apr 6, 2022 |
| Linux | xzdec Ubuntu 18.04.6 LTS (bionic) | 5.2.2-1.3ubuntu0.1 | [xzdec 5.2.2-1.3ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-xzdec-5.2.2-1.3ubuntu0.1.md) | Apr 6, 2022 |
| Linux | xzdec Ubuntu 20.04 LTS (focal) | 5.2.4-1ubuntu1.1 | [xzdec 5.2.4-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-xzdec-5.2.4-1ubuntu1.1.md) | Apr 6, 2022 |
| Linux | xzdec Ubuntu 22.04.1 LTS (jammy) | 5.2.5-2ubuntu1 | [xzdec 5.2.5-2ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xzdec-5.2.5-2ubuntu1.md) | Apr 6, 2022 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.