Gnu Gzip vulnerabilities

• gnu gzip Global Buffer Overflow in GNU gzip CVE-2026-41992 Fix available 6.9 MediumJune 29, 2026
• gnu gzip Predictable Temporary File in GNU gzip CVE-2026-41991 Fix available 2.0 LowJune 29, 2026
• gnu gzip, debian linux, redhat jboss data grid +5 more +7 more An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is... CVE-2022-1271 Fix available 8.8 HighApril 7, 2022
• gnu gzip Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as... CVE-2010-0001 Fix available 6.8 MediumJanuary 20, 2010
• gnu gzip The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table... CVE-2009-2624 Fix available 6.8 MediumJanuary 20, 2010
• gnu gzip, canonical ubuntu linux +1 more zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to... CVE-2005-0758 Fix available 4.6 MediumMay 13, 2005
• gnu gzip Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote... CVE-2005-1228 Fix available 5.0 MediumApril 22, 2005
• gnu gzip, freebsd, gentoo linux +9 more +11 more Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local... CVE-2005-0988 Fix available 3.7 LowApril 6, 2005
• gnu gzip The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages... CVE-2004-0970 Fix available 2.1 LowOctober 20, 2004
• gnu gzip, oracle solaris +1 more gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the... CVE-2004-1349 2.1 LowOctober 4, 2004
• gnu gzip gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails... CVE-2004-0603 10.0 HighJune 30, 2004
• gnu gzip, debian linux +1 more znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on... CVE-2003-0367 Fix available 2.1 LowJune 6, 2003
• gnu gzip Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code... CVE-2001-1228 7.5 HighNovember 18, 2001