gzip-1.14-3.1 on GA media (moderate)

gzip-1.14-3.1 on GA media Announcement ID: openSUSE-SU-2026:11518-1 Rating: moderate Cross-References: CVE-2026-41992 CVSS scores: CVE-2026-41992 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H CVE-2026-41992 SUSE : 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N...

ROOT-OS-DEBIAN-13-CVE-2026-41992 CVE-2026-41992 in gzip - Patched by Root

Root has patched CVE-2026-41992 in the gzip package for Root:Debian:13. Multiple fixed versions available...

Updated gzip package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Predictable Temporary File in GNU gzip. CVE-2026-41991 Global Buffer Overflow in GNU gzip. CVE-2026-41992...

CVE-2026-41992

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...