Ubuntu 16.04 LTS : Gzip vulnerabilities (USN-8733-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8733-1 advisory. Micha Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporary files in an insecure manner when mktemp was unavailable....

gzip security update

1.9-15 - Fix the wrong date in the previous changelog message - There's an updated version of the CVE-2026-41992 fix Resolves: CVE-2026-41992 1.9-14 - Fix an issue with a temporary file creations when mktemp is missing 41991 - Fix a global buffer overflow vulnerability in the LZH decompression...

gzip security update

1.12-2 - Fix an issue with a temporary file creations when mktemp is missing 41991 - Fix a global buffer overflow vulnerability in the LZH decompression logic 41992 Resolves: CVE-2026-41991 Resolves: CVE-2026-41992...

ROOT-OS-DEBIAN-13-CVE-2026-41992 CVE-2026-41992 in gzip - Patched by Root

Root has patched CVE-2026-41992 in the gzip package for Root:Debian:13. Multiple fixed versions available...

gzip-1.14-3.1 on GA media (moderate)

gzip-1.14-3.1 on GA media Announcement ID: openSUSE-SU-2026:11518-1 Rating: moderate Cross-References: CVE-2026-41992 CVSS scores: CVE-2026-41992 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H CVE-2026-41992 SUSE : 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N...

SUSE SLED15 / SLES15 Security Update : gzip (SUSE-SU-2026:3592-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3592-1 advisory. - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state...

SUSE SLES12 Security Update : gzip (SUSE-SU-2026:3590-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3590-1 advisory. - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression...

Security update for gzip

This update for gzip fixes the following issues: CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution bsc1269623. Crafted LZW file followed by a crafted LZH file can cau...

SUSE-SU-2026:3592-1 Security update for gzip

This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution bsc1269623. - Crafted LZW file followed by a crafted LZH file can...

Updated gzip package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Predictable Temporary File in GNU gzip. CVE-2026-41991 Global Buffer Overflow in GNU gzip. CVE-2026-41992...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gzip: gzip-1.14-2.3.hum1 aarch64, x8664 gzip-1.14-2.3.hum1.src src Security Fixes: gzip: CVE-2026-41992...

CVE-2026-41992

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression...