Home / mailings [USN-8733-1] Gzip vulnerabilities
Posted on 08 September 2026
Ubuntu Security==========================================================================Ubuntu Security Notice USN-8733-1
September 07, 2026
gzip vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in Gzip.
Software Description:
- gzip: GNU compression utilities
Details:
Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe
utility created temporary files in an insecure manner when mktemp was
unavailable. A local attacker could possibly use this issue to overwrite
arbitrary files. (CVE-2026-41991)
Elias Hasas, Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip incorrectly
handled certain compressed files. An attacker could possibly use this
issue to obtain sensitive information or cause Gzip to crash, resulting
in a denial of service. (CVE-2026-41992)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 LTS
gzip 1.6-4ubuntu1+esm2
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-8733-1
CVE-2026-41991, CVE-2026-41992
--===============0189571941044807124==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
