Debian Patches
Status for gzip/1.13-1+deb13u1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| gzip_reproducible_build.diff | no | |||||
| disable-Werror.patch | no | |||||
| CVE-2026-41991-a.patch | gzexe: use -C if lacking mktemp (Problem reported by Michał Majchrowicz.) * gzexe.in: If mktemp is needed but not installed, use ‘set -C’ to avoid a race when creating a temporary file. * zdiff.in: Use the same pattern here, even though the old code was probably OK anyway. |
Paul Eggert <eggert@cs.ucla.edu> | no | debian | backport, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=4e6f8b24ab823146ab8776f0b7fe486ab34d4269 | 2026-04-16 |
| CVE-2026-41991-b.patch | znew: use -C * znew.in: Also use -C here, when creating a temp. |
Paul Eggert <eggert@cs.ucla.edu> | no | debian | upstream, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=0dfab98769f932242687becf69470ca8d6d5c9a6 | 2026-04-16 |
| CVE-2026-41992.patch | gzip: don’t mishandle .lzh after .Z Problem reported by Michał Majchrowicz. * unlzh.c (read_c_len): Clear left and right when n == 0. |
Paul Eggert <eggert@cs.ucla.edu> | no | debian | upstream, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681 | 2026-04-15 |
All known versions for source package 'gzip'
- 1.14-1 (sid, forky)
- 1.13-1+deb13u1 (trixie)
- 1.12-1 (bookworm)