ROOT-OS-DEBIAN-13-CVE-2026-41992 CVE-2026-41992 in rootio-gzip - Patched by Root

Root has patched CVE-2026-41992 in the rootio-gzip package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-41992

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...