< back to search

shield Security update for gzip

SUSE-SLE-Micro-5.4-2026-3592

This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623). - Crafted LZW file followed by a crafted LZH file can cause an out-of-bounds memory buffer access (bsc#1272554).

Release Date

Aug 12 2026
References

Bugzilla: 1269623, 1272554
CVEs: CVE-2026-41992
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.4 x86_64

Packages

gzip
GNU Zip Compression Utilities

1.10-150200.16.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.4 s390x

Packages

gzip
GNU Zip Compression Utilities

1.10-150200.16.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.4 aarch64

Packages

gzip
GNU Zip Compression Utilities

1.10-150200.16.1 lock rpm lock src