Debian Patches
Status for gzip/1.14-1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2026-41991-a.patch | gzexe: use -C if lacking mktemp (Problem reported by Michał Majchrowicz.) * gzexe.in: If mktemp is needed but not installed, use ‘set -C’ to avoid a race when creating a temporary file. * zdiff.in: Use the same pattern here, even though the old code was probably OK anyway. |
Paul Eggert <eggert@cs.ucla.edu> | no | debian | upstream, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=4e6f8b24ab823146ab8776f0b7fe486ab34d4269 | 2026-04-16 |
| CVE-2026-41991-b.patch | znew: use -C * znew.in: Also use -C here, when creating a temp. |
Paul Eggert <eggert@cs.ucla.edu> | no | debian | upstream, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=0dfab98769f932242687becf69470ca8d6d5c9a6 | 2026-04-16 |
| CVE-2026-41992.patch | gzip: don’t mishandle .lzh after .Z Problem reported by Michał Majchrowicz. * unlzh.c (read_c_len): Clear left and right when n == 0. |
Paul Eggert <eggert@cs.ucla.edu> | no | debian | upstream, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681 | 2026-04-15 |
| gzip-fix-uninitialized-read.patch | gzip: fix uninitialized read Problem reported by Mohamed Maatallah <https://bugs.gnu.org/78639>. * unzip.c (check_zipfile): Don’t read past end of initialized data in the input buffer. |
Paul Eggert <eggert@cs.ucla.edu> | yes | upstream | upstream, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=c5e789971dfbc999cde5d1ce526a4422310617b8 | 2025-05-29 |
| gzip-fix-another-uninitialized-read.patch | gzip: fix another uninitialized read This can occur if you define DYNALLOC. Problem reported by Mohamed Maatallah <https://bugs.gnu.org/78639#13>. * gzip.c (get_method): Don’t memcmp more bytes than were read. Also, no need to do two memcmp’s now, or to check inptr. |
Paul Eggert <eggert@cs.ucla.edu> | yes | upstream | upstream, https://cgit.git.savannah.gnu.org/cgit/gzip.git/patch/?id=b1de0e782a291c46e26777005893eeca142e0490 | 2025-05-30 |
| gzip_reproducible_build.diff | no |